| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 2228224
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x02b40000
- allocation_type:
- 8192
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02d20000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtProtectVirtualMemory |
- process_identifier:
- 812
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x79e71000
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x025da000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtProtectVirtualMemory |
- process_identifier:
- 812
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 8192
- protection:
- 64
- base_address:
- 0x79e72000
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x025d2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02602000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02d21000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 8192
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02d22000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0262a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02603000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02604000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0263b000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02637000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x025db000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02622000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02635000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02605000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0262c000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04e90000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x025d3000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02606000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0263c000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02623000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02624000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02625000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02626000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02627000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02628000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x02629000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed0000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed1000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed3000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed4000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed5000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed6000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed7000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed8000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ed9000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04eda000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04edb000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04edc000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04edd000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ede000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04edf000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ee0000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ee1000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ee2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 812 |
NtAllocateVirtualMemory |
- process_identifier:
- 812
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x04ee3000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
