Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
NjTYb3VyzV.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.chk
|
data
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage user DataBase, version 0x620, checksum 0x391a54b5, page size 16384, Windows version 10.0
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 61414 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
modified
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\NjTYb3VyzV.dll,Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\NjTYb3VyzV.dll",#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\NjTYb3VyzV.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Xzrjbnqqcb\ruunnfqf.mlu",ZUcsEM
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Xzrjbnqqcb\ruunnfqf.mlu",Control_RunDLL
|
|
|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\NjTYb3VyzV.dll"
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\NjTYb3VyzV.dll",#1
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
|
There are 2 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.disneyplus.com/legal/your-california-privacy-rights
|
unknown
|
|
|
|
http://crl.ver)
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/privacy-policy
|
unknown
|
|
|
|
https://www.tiktok.com/legal/report/feedback
|
unknown
|
|
|
|
http://help.disneyplus.com.
|
unknown
|
|
|
|
https://disneyplus.com/legal.
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
195.154.133.20
|
unknown
|
France
|
|
|
|
212.237.17.99
|
unknown
|
Italy
|
|
|
|
110.232.117.186
|
unknown
|
Australia
|
|
|
|
138.185.72.26
|
unknown
|
Brazil
|
|
|
|
81.0.236.90
|
unknown
|
Czech Republic
|
|
|
|
103.75.201.2
|
unknown
|
Thailand
|
|
|
|
216.158.226.206
|
unknown
|
United States
|
|
|
|
188.165.214.166
|
unknown
|
France
|
|
|
|
107.182.225.142
|
unknown
|
United States
|
|
|
|
45.118.135.203
|
unknown
|
Japan
|
|
|
|
50.116.54.215
|
unknown
|
United States
|
|
|
|
51.68.175.8
|
unknown
|
France
|
|
|
|
103.8.26.102
|
unknown
|
Malaysia
|
|
|
|
41.76.108.46
|
unknown
|
South Africa
|
|
|
|
91.200.186.228
|
unknown
|
Poland
|
|
|
|
103.8.26.103
|
unknown
|
Malaysia
|
|
|
|
178.79.147.66
|
unknown
|
United Kingdom
|
|
|
|
212.237.5.209
|
unknown
|
Italy
|
|
|
|
176.104.106.96
|
unknown
|
Serbia
|
|
|
|
207.38.84.195
|
unknown
|
United States
|
|
|
|
212.237.56.116
|
unknown
|
Italy
|
|
|
|
191.252.196.221
|
unknown
|
Brazil
|
|
|
|
45.142.114.231
|
unknown
|
Germany
|
|
|
|
210.57.217.132
|
unknown
|
Indonesia
|
|
|
|
58.227.42.236
|
unknown
|
Korea Republic of
|
|
|
|
185.184.25.237
|
unknown
|
Turkey
|
|
|
|
158.69.222.101
|
unknown
|
Canada
|
|
|
|
104.251.214.46
|
unknown
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 19 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
|
PerfMMFileName
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4CE0000
|
unkown
|
page execute and read and write
|
|
|
|
4B40000
|
unkown
|
page execute and read and write
|
|
|
|
4CF0000
|
unkown
|
page execute and read and write
|
|
|
|
46F0000
|
unkown
|
page execute and read and write
|
|
|
|
4ED0000
|
unkown
|
page execute and read and write
|
|
|
|
4820000
|
unkown
|
page execute and read and write
|
|
|
|
50C0000
|
unkown
|
page execute and read and write
|
|
|
|
4030000
|
unkown
|
page execute and read and write
|
|
|
|
4090000
|
unkown
|
page execute and read and write
|
|
|
|
670000
|
stack
|
page execute and read and write
|
|
|
|
5130000
|
unkown
|
page execute and read and write
|
|
|
|
4EC0000
|
unkown
|
page execute and read and write
|
|
|
|
4DC0000
|
unkown
|
page execute and read and write
|
|
|
|
4980000
|
unkown
|
page execute and read and write
|
|
|
|
5140000
|
unkown
|
page execute and read and write
|
|
|
|
4620000
|
unkown
|
page execute and read and write
|
|
|
|
49E0000
|
unkown
|
page execute and read and write
|
|
|
|
45F0000
|
unkown
|
page execute and read and write
|
|
|
|
4E70000
|
unkown
|
page execute and read and write
|
|
|
|
4BC0000
|
unkown
|
page execute and read and write
|
|
|
|
197B00F8000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CC237000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B7D000
|
unkown image
|
page readonly
|
|
|
|
10056000
|
unkown image
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5B9BF7000
|
unkown image
|
page readonly
|
|
|
|
7FF5D383D000
|
unkown image
|
page readonly
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A7EB2000
|
unkown image
|
page readonly
|
|
|
|
2B61000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
7F5E2000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B00A5000
|
unkown
|
page read and write
|
|
|
|
7FF59E046000
|
unkown image
|
page readonly
|
|
|
|
10056000
|
unkown image
|
page read and write
|
|
|
|
2758000
|
unkown image
|
page readonly
|
|
|
|
5161000
|
unkown
|
page execute read
|
|
|
|
197B5680000
|
unkown
|
page read and write
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B5A000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
7FF510CD7000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DC0000
|
unkown image
|
page readonly
|
|
|
|
19CDEB60000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
E865E7B000
|
stack
|
page read and write
|
|
|
|
125DA43C000
|
unkown
|
page read and write
|
|
|
|
197B0071000
|
unkown
|
page read and write
|
|
|
|
1CE55387000
|
heap default
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7DF5C39D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0969000
|
unkown image
|
page readonly
|
|
|
|
3470000
|
unkown
|
page read and write
|
|
|
|
7FF5B9C37000
|
unkown image
|
page readonly
|
|
|
|
125DAD6D000
|
unkown
|
page read and write
|
|
|
|
4BF1000
|
unkown
|
page execute read
|
|
|
|
7F5F0000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DB200000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CB4000
|
unkown image
|
page readonly
|
|
|
|
5171000
|
unkown
|
page execute read
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
1CE55250000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
125DAD00000
|
unkown
|
page read and write
|
|
|
|
125DAD9D000
|
unkown
|
page read and write
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
1005B000
|
unkown image
|
page readonly
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
4651000
|
unkown
|
page execute read
|
|
|
|
4D37000
|
unkown
|
page readonly
|
|
|
|
7FF5B9C23000
|
unkown image
|
page readonly
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
26BA000
|
unkown image
|
page readonly
|
|
|
|
3FD7000
|
stack
|
page readonly
|
|
|
|
125DA454000
|
unkown
|
page read and write
|
|
|
|
4FF5000
|
unkown
|
page read and write
|
|
|
|
2DDE000
|
stack
|
page read and write
|
|
|
|
125DAD49000
|
unkown
|
page read and write
|
|
|
|
7FF5B9AB5000
|
unkown image
|
page readonly
|
|
|
|
461E000
|
stack
|
page read and write
|
|
|
|
CD21E79000
|
stack
|
page read and write
|
|
|
|
7FF5A0B8F000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E70000
|
unkown
|
page read and write
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
1F9E7E8E000
|
unkown
|
page read and write
|
|
|
|
197B008C000
|
unkown
|
page read and write
|
|
|
|
7DF5DD640000
|
unkown image
|
page readonly
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
26BD000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
2CE6000
|
unkown image
|
page readonly
|
|
|
|
C8C000
|
unkown
|
page read and write
|
|
|
|
1E40D700000
|
unkown
|
page read and write
|
|
|
|
4B80000
|
unkown image
|
page readonly
|
|
|
|
7F5F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0DBA000
|
unkown image
|
page readonly
|
|
|
|
125DAD17000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1006F7000
|
stack
|
page read and write
|
|
|
|
7FF5D3831000
|
unkown image
|
page readonly
|
|
|
|
7FF59E0F3000
|
unkown image
|
page readonly
|
|
|
|
2CDB000
|
unkown image
|
page readonly
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
7AC000
|
unkown
|
page read and write
|
|
|
|
125DA320000
|
heap default
|
page read and write
|
|
|
|
2D20000
|
heap default
|
page read and write
|
|
|
|
197AFE70000
|
unkown image
|
page readonly
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
7FF5D3887000
|
unkown image
|
page readonly
|
|
|
|
1CE55220000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
2697000
|
unkown image
|
page readonly
|
|
|
|
4D7E000
|
stack
|
page read and write
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC693000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7DF5C39E0000
|
unkown image
|
page readonly
|
|
|
|
125DAD76000
|
unkown
|
page read and write
|
|
|
|
4FCF000
|
unkown
|
page read and write
|
|
|
|
197B07F3000
|
unkown
|
page read and write
|
|
|
|
7FF59E014000
|
unkown image
|
page readonly
|
|
|
|
EC9CFE000
|
stack
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
4F75000
|
unkown
|
page read and write
|
|
|
|
7FF5B94C5000
|
unkown image
|
page readonly
|
|
|
|
125DADC8000
|
unkown
|
page read and write
|
|
|
|
EC95DC000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
unkown image
|
page readonly
|
|
|
|
269E000
|
unkown image
|
page readonly
|
|
|
|
125DAD75000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF59D988000
|
unkown image
|
page readonly
|
|
|
|
7DF4A8A50000
|
unkown image
|
page readonly
|
|
|
|
4B3D000
|
stack
|
page read and write
|
|
|
|
1CE554D0000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A2A000
|
unkown image
|
page readonly
|
|
|
|
1F9E8602000
|
unkown
|
page read and write
|
|
|
|
E8660FF000
|
stack
|
page read and write
|
|
|
|
19CDED6F000
|
unkown
|
page read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
7FF5B96E1000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC5C8000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B4D000
|
unkown image
|
page readonly
|
|
|
|
197B582D000
|
unkown
|
page read and write
|
|
|
|
1E40D62C000
|
unkown
|
page read and write
|
|
|
|
48C000
|
unkown
|
page read and write
|
|
|
|
4F15000
|
unkown
|
page read and write
|
|
|
|
4F41000
|
unkown
|
page read and write
|
|
|
|
1005B000
|
unkown image
|
page readonly
|
|
|
|
197B00A2000
|
unkown
|
page read and write
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
34CA000
|
unkown
|
page read and write
|
|
|
|
1D8F2E3C000
|
unkown
|
page read and write
|
|
|
|
197B55F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C51000
|
unkown image
|
page readonly
|
|
|
|
960000
|
heap default
|
page read and write
|
|
|
|
7FF59E0BD000
|
unkown image
|
page readonly
|
|
|
|
7DF5DD620000
|
unkown image
|
page readonly
|
|
|
|
4690000
|
heap private
|
page read and write
|
|
|
|
7FF5CCE15000
|
unkown image
|
page readonly
|
|
|
|
125DA600000
|
unkown image
|
page readonly
|
|
|
|
7FF510D03000
|
unkown image
|
page readonly
|
|
|
|
7DF5A7EB0000
|
unkown image
|
page readonly
|
|
|
|
4E40000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C95000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
125DAC02000
|
unkown
|
page read and write
|
|
|
|
1D8F2E50000
|
unkown
|
page read and write
|
|
|
|
7FF5D384B000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4EC5000
|
unkown
|
page read and write
|
|
|
|
197B0F10000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4C40000
|
unkown
|
page read and write
|
|
|
|
1CE553D0000
|
unkown
|
page read and write
|
|
|
|
1004FB000
|
stack
|
page read and write
|
|
|
|
125DAD6D000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap default
|
page read and write
|
|
|
|
7FF5CCF57000
|
unkown image
|
page readonly
|
|
|
|
7FF510C2E000
|
unkown image
|
page readonly
|
|
|
|
10017E000
|
stack
|
page read and write
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B93F7000
|
unkown image
|
page readonly
|
|
|
|
125DADBE000
|
unkown
|
page read and write
|
|
|
|
2C5A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D26000
|
unkown image
|
page readonly
|
|
|
|
5197000
|
unkown
|
page readonly
|
|
|
|
125DAD7C000
|
unkown
|
page read and write
|
|
|
|
2762000
|
unkown image
|
page readonly
|
|
|
|
197B0057000
|
unkown
|
page read and write
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4647000
|
unkown
|
page readonly
|
|
|
|
19CDECE0000
|
unkown image
|
page read and write
|
|
|
|
7FF5B9AE7000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
125DAD6D000
|
unkown
|
page read and write
|
|
|
|
197B5560000
|
unkown
|
page read and write
|
|
|
|
7FF5A0DA7000
|
unkown image
|
page readonly
|
|
|
|
197B0959000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B87000
|
unkown image
|
page readonly
|
|
|
|
4CDC000
|
stack
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
276F000
|
unkown image
|
page readonly
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
197B5550000
|
unkown
|
page read and write
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
10033000
|
unkown image
|
page write copy
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
125DAD75000
|
unkown
|
page read and write
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
D298877000
|
stack
|
page read and write
|
|
|
|
2C6B000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
49D7000
|
unkown
|
page readonly
|
|
|
|
B0C000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5A0ABF000
|
unkown image
|
page readonly
|
|
|
|
26C5000
|
unkown image
|
page readonly
|
|
|
|
125DAD19000
|
unkown
|
page read and write
|
|
|
|
197B0102000
|
unkown
|
page read and write
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B19000
|
unkown image
|
page readonly
|
|
|
|
10033000
|
unkown image
|
page write copy
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
197B0013000
|
unkown
|
page read and write
|
|
|
|
45DE000
|
stack
|
page read and write
|
|
|
|
1F9E7D00000
|
unkown image
|
page read and write
|
|
|
|
125DADAD000
|
unkown
|
page read and write
|
|
|
|
1CE554F0000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CCF26000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9A78000
|
unkown image
|
page readonly
|
|
|
|
65D0000
|
unkown image
|
page readonly
|
|
|
|
CD21EF9000
|
stack
|
page read and write
|
|
|
|
4C9D000
|
stack
|
page read and write
|
|
|
|
29DE000
|
stack
|
page read and write
|
|
|
|
7FF59DF18000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B1E000
|
unkown image
|
page readonly
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
7FF5D3876000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5104D4000
|
unkown image
|
page readonly
|
|
|
|
197B5650000
|
unkown
|
page read and write
|
|
|
|
7DF5AAB92000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
125DA4BF000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DA471000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5B99CA000
|
unkown image
|
page readonly
|
|
|
|
584000
|
unkown
|
page read and write
|
|
|
|
197B5861000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown image
|
page readonly
|
|
|
|
2D2A000
|
heap default
|
page read and write
|
|
|
|
19CDF2C0000
|
unkown image
|
page readonly
|
|
|
|
2C65000
|
unkown image
|
page readonly
|
|
|
|
7FF59E0DA000
|
unkown image
|
page readonly
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5CCE18000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CD007000
|
unkown image
|
page readonly
|
|
|
|
276C000
|
unkown image
|
page readonly
|
|
|
|
7FF5B94C9000
|
unkown image
|
page readonly
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
7FF5CC51A000
|
unkown image
|
page readonly
|
|
|
|
5025000
|
unkown
|
page read and write
|
|
|
|
7FF510CD4000
|
unkown image
|
page readonly
|
|
|
|
100AFB000
|
stack
|
page read and write
|
|
|
|
7DF5D6540000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9BED000
|
unkown image
|
page readonly
|
|
|
|
2758000
|
unkown image
|
page readonly
|
|
|
|
ECA37E000
|
stack
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E00000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown image
|
page readonly
|
|
|
|
7F5D0000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E55000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
1001FE000
|
stack
|
page read and write
|
|
|
|
7FF59E0C7000
|
unkown image
|
page readonly
|
|
|
|
2753000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4DBE000
|
stack
|
page read and write
|
|
|
|
1E40D670000
|
unkown
|
page read and write
|
|
|
|
6AA0000
|
unkown
|
page read and write
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
4E40000
|
unkown
|
page read and write
|
|
|
|
1000FE000
|
stack
|
page read and write
|
|
|
|
584000
|
unkown
|
page read and write
|
|
|
|
7FF59E059000
|
unkown image
|
page readonly
|
|
|
|
96F000
|
stack
|
page read and write
|
|
|
|
92B6D7E000
|
stack
|
page read and write
|
|
|
|
7FF5CC6D9000
|
unkown image
|
page readonly
|
|
|
|
197B584B000
|
unkown
|
page read and write
|
|
|
|
7FF5D3781000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D91000
|
unkown image
|
page readonly
|
|
|
|
125DA44E000
|
unkown
|
page read and write
|
|
|
|
125DA4BC000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF59E107000
|
unkown image
|
page readonly
|
|
|
|
34C9000
|
unkown
|
page read and write
|
|
|
|
7FF59E04D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B997B000
|
unkown image
|
page readonly
|
|
|
|
26B2000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6522000
|
unkown image
|
page readonly
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC6A6000
|
unkown image
|
page readonly
|
|
|
|
4721000
|
unkown
|
page execute read
|
|
|
|
7DF5D6540000
|
unkown image
|
page readonly
|
|
|
|
197AFFA0000
|
unkown image
|
page readonly
|
|
|
|
7FF510C5D000
|
unkown image
|
page readonly
|
|
|
|
197AFE50000
|
unkown image
|
page read and write
|
|
|
|
860000
|
heap default
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
10056000
|
unkown image
|
page read and write
|
|
|
|
7FF5A0BB7000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0DD3000
|
unkown image
|
page readonly
|
|
|
|
273B000
|
unkown image
|
page readonly
|
|
|
|
970000
|
unkown image
|
page readonly
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
700000
|
heap default
|
page read and write
|
|
|
|
2CF8000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC67F000
|
unkown image
|
page readonly
|
|
|
|
125DA4EE000
|
unkown
|
page read and write
|
|
|
|
1CE55F00000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
125DA810000
|
unkown image
|
page readonly
|
|
|
|
269E000
|
unkown image
|
page readonly
|
|
|
|
125DAB40000
|
unkown
|
page read and write
|
|
|
|
7FF5B9792000
|
unkown image
|
page readonly
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6532000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC782000
|
unkown image
|
page readonly
|
|
|
|
274E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B76000
|
unkown image
|
page readonly
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
1F9E7D20000
|
unkown image
|
page readonly
|
|
|
|
7FF5A098E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B24000
|
unkown image
|
page readonly
|
|
|
|
34AA000
|
heap default
|
page read and write
|
|
|
|
1CE56150000
|
unkown
|
page read and write
|
|
|
|
7FF5CCF4D000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
275E000
|
unkown image
|
page readonly
|
|
|
|
8EF000
|
stack
|
page read and write
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
2E5E000
|
stack
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
3FB0000
|
stack
|
page read and write
|
|
|
|
1F9E7E56000
|
unkown
|
page read and write
|
|
|
|
7FF59D98A000
|
unkown image
|
page readonly
|
|
|
|
7DF5DD630000
|
unkown image
|
page readonly
|
|
|
|
125DA44C000
|
unkown
|
page read and write
|
|
|
|
125DAD6F000
|
unkown
|
page read and write
|
|
|
|
7FF5CCEFF000
|
unkown image
|
page readonly
|
|
|
|
1D8F2C00000
|
unkown image
|
page readonly
|
|
|
|
66CE000
|
stack
|
page read and write
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
125DAD90000
|
unkown
|
page read and write
|
|
|
|
2753000
|
unkown image
|
page readonly
|
|
|
|
1E40D651000
|
unkown
|
page read and write
|
|
|
|
125DAD9D000
|
unkown
|
page read and write
|
|
|
|
197B0800000
|
unkown
|
page read and write
|
|
|
|
125DA44B000
|
unkown
|
page read and write
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
7FF5B9970000
|
unkown image
|
page readonly
|
|
|
|
4C30000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B2B000
|
unkown image
|
page readonly
|
|
|
|
36CE000
|
stack
|
page read and write
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6520000
|
unkown image
|
page readonly
|
|
|
|
D2984FB000
|
stack
|
page read and write
|
|
|
|
7F5D2000
|
unkown image
|
page readonly
|
|
|
|
36D7000
|
heap private
|
page read and write
|
|
|
|
7FF5CCFF3000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DA44D000
|
unkown
|
page read and write
|
|
|
|
7DF4D43F0000
|
unkown image
|
page readonly
|
|
|
|
125DAD9E000
|
unkown
|
page read and write
|
|
|
|
7FF5CC75A000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D37000
|
unkown image
|
page readonly
|
|
|
|
92B6C7C000
|
unkown
|
page read and write
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC590000
|
unkown image
|
page readonly
|
|
|
|
26C5000
|
unkown image
|
page readonly
|
|
|
|
40F0000
|
unkown
|
page read and write
|
|
|
|
7DF4A5D70000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7F652000
|
unkown image
|
page readonly
|
|
|
|
D298A7E000
|
stack
|
page read and write
|
|
|
|
7FF5CC73D000
|
unkown image
|
page readonly
|
|
|
|
125DADA6000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B55F0000
|
unkown
|
page read and write
|
|
|
|
125DA457000
|
unkown
|
page read and write
|
|
|
|
3090000
|
unkown image
|
page readonly
|
|
|
|
125DAD89000
|
unkown
|
page read and write
|
|
|
|
7FF5B9B43000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0A93000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
10031000
|
unkown image
|
page read and write
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
19CDED6F000
|
unkown
|
page read and write
|
|
|
|
7FF5B9C26000
|
unkown image
|
page readonly
|
|
|
|
125DAD75000
|
unkown
|
page read and write
|
|
|
|
7FF510CC1000
|
unkown image
|
page readonly
|
|
|
|
197B009F000
|
unkown
|
page read and write
|
|
|
|
7FF59E0C4000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6530000
|
unkown image
|
page readonly
|
|
|
|
E865FF7000
|
stack
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9905000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page read and write
|
|
|
|
125DADA2000
|
unkown
|
page read and write
|
|
|
|
2CC5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D37D9000
|
unkown image
|
page readonly
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
|
|
4F4F000
|
unkown
|
page read and write
|
|
|
|
EC9AFA000
|
stack
|
page read and write
|
|
|
|
34CD000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7DF5A7EA2000
|
unkown image
|
page readonly
|
|
|
|
4D11000
|
unkown
|
page execute read
|
|
|
|
1D8F2C20000
|
heap default
|
page read and write
|
|
|
|
2B32000
|
unkown image
|
page readonly
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
7F5E2000
|
unkown image
|
page readonly
|
|
|
|
1F9E7F00000
|
unkown
|
page read and write
|
|
|
|
125DAB50000
|
unkown image
|
page read and write
|
|
|
|
7FF5B9B14000
|
unkown image
|
page readonly
|
|
|
|
92B71FF000
|
stack
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD43000
|
unkown
|
page read and write
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
1F9E7D50000
|
unkown image
|
page readonly
|
|
|
|
197B0913000
|
unkown
|
page read and write
|
|
|
|
125DA4C5000
|
unkown
|
page read and write
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
29A0000
|
unkown image
|
page readonly
|
|
|
|
7FF510CC4000
|
unkown image
|
page readonly
|
|
|
|
1005B000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC747000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
4A10000
|
unkown
|
page read and write
|
|
|
|
4850000
|
unkown
|
page read and write
|
|
|
|
7F5F0000
|
unkown image
|
page readonly
|
|
|
|
4DAE000
|
stack
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4D35000
|
unkown
|
page read and write
|
|
|
|
125DA508000
|
unkown
|
page read and write
|
|
|
|
7DF5C39D0000
|
unkown image
|
page readonly
|
|
|
|
273D000
|
unkown image
|
page readonly
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
26CB000
|
unkown image
|
page readonly
|
|
|
|
125DAD89000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2CF3000
|
unkown image
|
page readonly
|
|
|
|
2C41000
|
unkown image
|
page readonly
|
|
|
|
34CD000
|
unkown
|
page read and write
|
|
|
|
1CE55EA0000
|
unkown
|
page read and write
|
|
|
|
4F75000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1D8F2E4D000
|
unkown
|
page read and write
|
|
|
|
7DF51AAC0000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D06000
|
unkown image
|
page readonly
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
7FF5B9BE7000
|
unkown image
|
page readonly
|
|
|
|
4197000
|
unkown
|
page readonly
|
|
|
|
125DA4AF000
|
unkown
|
page read and write
|
|
|
|
ECA1FA000
|
stack
|
page read and write
|
|
|
|
501D000
|
unkown
|
page read and write
|
|
|
|
7F4D0000
|
unkown image
|
page readonly
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
D29877F000
|
stack
|
page read and write
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
2762000
|
unkown image
|
page readonly
|
|
|
|
10027000
|
unkown image
|
page readonly
|
|
|
|
32ED000
|
stack
|
page read and write
|
|
|
|
1CE55A90000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5D37B2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9BE4000
|
unkown image
|
page readonly
|
|
|
|
38E0000
|
unkown image
|
page readonly
|
|
|
|
1F9E82D0000
|
unkown image
|
page readonly
|
|
|
|
4E15000
|
unkown
|
page read and write
|
|
|
|
7DF4D4C70000
|
unkown image
|
page readonly
|
|
|
|
7FF582FAB000
|
unkown image
|
page readonly
|
|
|
|
10027000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC744000
|
unkown image
|
page readonly
|
|
|
|
26B2000
|
unkown image
|
page readonly
|
|
|
|
5FF000
|
unkown
|
page read and write
|
|
|
|
274E000
|
unkown image
|
page readonly
|
|
|
|
92B72FF000
|
stack
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
2774000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B0918000
|
unkown
|
page read and write
|
|
|
|
5FF000
|
unkown
|
page read and write
|
|
|
|
125DA450000
|
unkown
|
page read and write
|
|
|
|
D90000
|
unkown image
|
page readonly
|
|
|
|
45A0000
|
unkown
|
page read and write
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCF13000
|
unkown image
|
page readonly
|
|
|
|
125DADBE000
|
unkown
|
page read and write
|
|
|
|
19CDEF35000
|
heap private
|
page read and write
|
|
|
|
7FF5D37A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5A095C000
|
unkown image
|
page readonly
|
|
|
|
1E40D530000
|
heap private
|
page read and write
|
|
|
|
7FF5CC231000
|
unkown image
|
page readonly
|
|
|
|
19CDED7F000
|
unkown
|
page read and write
|
|
|
|
7DF5D6DA0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C39E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCF32000
|
unkown image
|
page readonly
|
|
|
|
7DF5A7EB0000
|
unkown image
|
page readonly
|
|
|
|
1E40D63C000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
19CDEB80000
|
unkown image
|
page readonly
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
1005FB000
|
stack
|
page read and write
|
|
|
|
7FF5D36C8000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D2D000
|
unkown image
|
page readonly
|
|
|
|
7DF51AAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3887000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC74B000
|
unkown image
|
page readonly
|
|
|
|
44E0000
|
unkown image
|
page readonly
|
|
|
|
4DEE000
|
stack
|
page read and write
|
|
|
|
1D8F2BF0000
|
unkown image
|
page readonly
|
|
|
|
1F9E7DA0000
|
unkown
|
page read and write
|
|
|
|
125DAD5C000
|
unkown
|
page read and write
|
|
|
|
7DF51AAB2000
|
unkown image
|
page readonly
|
|
|
|
343E000
|
stack
|
page read and write
|
|
|
|
5EE000
|
stack
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
125DAD6D000
|
unkown
|
page read and write
|
|
|
|
7FF5D3882000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B10000
|
unkown image
|
page readonly
|
|
|
|
125DAD73000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
125DAD43000
|
unkown
|
page read and write
|
|
|
|
4C41000
|
unkown
|
page execute read
|
|
|
|
197B5854000
|
unkown
|
page read and write
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
197B0400000
|
unkown image
|
page readonly
|
|
|
|
19CDED66000
|
unkown
|
page read and write
|
|
|
|
7F762000
|
unkown image
|
page readonly
|
|
|
|
125DAD8C000
|
unkown
|
page read and write
|
|
|
|
50F1000
|
unkown
|
page execute read
|
|
|
|
7FF5A0BA3000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
197B0900000
|
unkown
|
page read and write
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
7FF510C36000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD90000
|
unkown
|
page read and write
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
7F5D0000
|
unkown image
|
page readonly
|
|
|
|
1E40D687000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
7FF5D37CD000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC32F000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D9D000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
7DF5DD622000
|
unkown image
|
page readonly
|
|
|
|
384000
|
unkown
|
page read and write
|
|
|
|
197AFE60000
|
heap private
|
page read and write
|
|
|
|
1F9E7D40000
|
unkown image
|
page readonly
|
|
|
|
34D5000
|
unkown
|
page read and write
|
|
|
|
1008F9000
|
stack
|
page read and write
|
|
|
|
4747000
|
unkown
|
page readonly
|
|
|
|
125DA2C0000
|
heap private
|
page read and write
|
|
|
|
197B5420000
|
unkown
|
page read and write
|
|
|
|
4B35000
|
unkown
|
page read and write
|
|
|
|
7FF5CC734000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCD9A000
|
unkown image
|
page readonly
|
|
|
|
197B0815000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
1BC000
|
unkown
|
page read and write
|
|
|
|
7FF510D06000
|
unkown image
|
page readonly
|
|
|
|
49D5000
|
unkown
|
page read and write
|
|
|
|
19CDF140000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CC69D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC68F000
|
unkown image
|
page readonly
|
|
|
|
1CE55240000
|
unkown image
|
page readonly
|
|
|
|
248E000
|
unkown image
|
page readonly
|
|
|
|
10058000
|
unkown image
|
page read and write
|
|
|
|
C20000
|
unkown image
|
page read and write
|
|
|
|
4B37000
|
unkown
|
page readonly
|
|
|
|
1D8F2D00000
|
unkown image
|
page readonly
|
|
|
|
197B5560000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4F81000
|
unkown
|
page read and write
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown image
|
page read and write
|
|
|
|
4E2E000
|
stack
|
page read and write
|
|
|
|
2FCA000
|
unkown
|
page read and write
|
|
|
|
1D8F2E87000
|
unkown
|
page read and write
|
|
|
|
273B000
|
unkown image
|
page readonly
|
|
|
|
1CE55380000
|
heap default
|
page read and write
|
|
|
|
7FF5B96B6000
|
unkown image
|
page readonly
|
|
|
|
1F9E8450000
|
unkown image
|
page readonly
|
|
|
|
7FF59DABF000
|
unkown image
|
page readonly
|
|
|
|
1F9E7E2A000
|
unkown
|
page read and write
|
|
|
|
197B5770000
|
unkown
|
page read and write
|
|
|
|
466F000
|
stack
|
page read and write
|
|
|
|
1D8F2E46000
|
unkown
|
page read and write
|
|
|
|
EC9DFB000
|
stack
|
page read and write
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
197B5680000
|
unkown
|
page read and write
|
|
|
|
197AFFC0000
|
unkown
|
page read and write
|
|
|
|
7FF59D981000
|
unkown image
|
page readonly
|
|
|
|
1D8F3200000
|
unkown image
|
page readonly
|
|
|
|
7F5E2000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
920000
|
unkown image
|
page readonly
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5A0DE7000
|
unkown image
|
page readonly
|
|
|
|
4F17000
|
unkown
|
page readonly
|
|
|
|
1CE554E5000
|
heap private
|
page read and write
|
|
|
|
125DA4EB000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5A0912000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B56000
|
unkown image
|
page readonly
|
|
|
|
1E40DC50000
|
unkown image
|
page readonly
|
|
|
|
7F5F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5C39F0000
|
unkown image
|
page readonly
|
|
|
|
197B0114000
|
unkown
|
page read and write
|
|
|
|
1D8F2E7B000
|
unkown
|
page read and write
|
|
|
|
197B58DA000
|
unkown
|
page read and write
|
|
|
|
4D47000
|
unkown
|
page readonly
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown
|
page read and write
|
|
|
|
1D8F2BC0000
|
heap private
|
page read and write
|
|
|
|
1F9E7D70000
|
heap default
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
36DA000
|
heap private
|
page read and write
|
|
|
|
26A1000
|
unkown image
|
page readonly
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
125DAD7D000
|
unkown
|
page read and write
|
|
|
|
125DA45C000
|
unkown
|
page read and write
|
|
|
|
125DAD46000
|
unkown
|
page read and write
|
|
|
|
2774000
|
unkown image
|
page readonly
|
|
|
|
46A0000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
unkown image
|
page readonly
|
|
|
|
125DA513000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
255D000
|
unkown image
|
page readonly
|
|
|
|
92B70F7000
|
stack
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
276F000
|
unkown image
|
page readonly
|
|
|
|
2C5D000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
970000
|
unkown
|
page read and write
|
|
|
|
1E40D67D000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B5544000
|
unkown
|
page read and write
|
|
|
|
7FF510CDB000
|
unkown image
|
page readonly
|
|
|
|
4DF1000
|
unkown
|
page execute read
|
|
|
|
125DA400000
|
unkown
|
page read and write
|
|
|
|
125DA2F0000
|
unkown image
|
page readonly
|
|
|
|
2681000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4AFC000
|
stack
|
page read and write
|
|
|
|
125DA4EC000
|
unkown
|
page read and write
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page read and write
|
|
|
|
7FF5B9B87000
|
unkown image
|
page readonly
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D385A000
|
unkown image
|
page readonly
|
|
|
|
6B60000
|
unkown
|
page read and write
|
|
|
|
273D000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC737000
|
unkown image
|
page readonly
|
|
|
|
1F9E80D0000
|
unkown image
|
page readonly
|
|
|
|
1E40D540000
|
unkown image
|
page readonly
|
|
|
|
4D20000
|
unkown
|
page read and write
|
|
|
|
1E40D708000
|
unkown
|
page read and write
|
|
|
|
197B0918000
|
unkown
|
page read and write
|
|
|
|
7FF5D3837000
|
unkown image
|
page readonly
|
|
|
|
7FF59DABA000
|
unkown image
|
page readonly
|
|
|
|
19CDEB40000
|
unkown image
|
page read and write
|
|
|
|
7FF5B99DF000
|
unkown image
|
page readonly
|
|
|
|
197B00F8000
|
unkown
|
page read and write
|
|
|
|
1F9E7E00000
|
unkown
|
page read and write
|
|
|
|
273D000
|
unkown image
|
page readonly
|
|
|
|
1CE553C8000
|
unkown
|
page read and write
|
|
|
|
7FF59E0B7000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CC6CD000
|
unkown image
|
page readonly
|
|
|
|
269E000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7DF5DD632000
|
unkown image
|
page readonly
|
|
|
|
4FA7000
|
unkown
|
page read and write
|
|
|
|
1D8F2E8F000
|
unkown
|
page read and write
|
|
|
|
125DAD8E000
|
unkown
|
page read and write
|
|
|
|
125DAD79000
|
unkown
|
page read and write
|
|
|
|
4C17000
|
unkown
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2697000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
34D7000
|
unkown
|
page read and write
|
|
|
|
274E000
|
unkown image
|
page readonly
|
|
|
|
7FF59DF48000
|
unkown image
|
page readonly
|
|
|
|
19CDED57000
|
heap default
|
page read and write
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
7D3000
|
heap default
|
page read and write
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1F9E7D80000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
125DADA8000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
10056000
|
unkown image
|
page read and write
|
|
|
|
10031000
|
unkown image
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
D2980DB000
|
unkown
|
page read and write
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCE85000
|
unkown image
|
page readonly
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5AAB90000
|
unkown image
|
page readonly
|
|
|
|
1E40D560000
|
unkown image
|
page readonly
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
7DF5DD630000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC787000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCE10000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E27000
|
unkown
|
page read and write
|
|
|
|
26BA000
|
unkown image
|
page readonly
|
|
|
|
197B0959000
|
unkown
|
page read and write
|
|
|
|
268E000
|
unkown image
|
page readonly
|
|
|
|
197B583E000
|
unkown
|
page read and write
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
7FF59DFFF000
|
unkown image
|
page readonly
|
|
|
|
125DAD83000
|
unkown
|
page read and write
|
|
|
|
7FF5CC557000
|
unkown image
|
page readonly
|
|
|
|
4620000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD9D000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
19CDEC90000
|
unkown
|
page read and write
|
|
|
|
1CE55340000
|
unkown
|
page read and write
|
|
|
|
125DB202000
|
unkown
|
page read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
1E40D64B000
|
unkown
|
page read and write
|
|
|
|
4E40000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
|
|
7F652000
|
unkown image
|
page readonly
|
|
|
|
197B58AB000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AD9000
|
unkown image
|
page readonly
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
2762000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0AE6000
|
unkown image
|
page readonly
|
|
|
|
670D000
|
stack
|
page read and write
|
|
|
|
7DF5A7EA0000
|
unkown image
|
page readonly
|
|
|
|
34E9000
|
unkown
|
page read and write
|
|
|
|
E8659CE000
|
stack
|
page read and write
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
197B0000000
|
unkown
|
page read and write
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
7FF5B990F000
|
unkown image
|
page readonly
|
|
|
|
197B5680000
|
unkown
|
page read and write
|
|
|
|
19CDED40000
|
heap default
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
276C000
|
unkown image
|
page readonly
|
|
|
|
125DAD89000
|
unkown
|
page read and write
|
|
|
|
898000
|
unkown
|
page read and write
|
|
|
|
4FF6000
|
unkown
|
page read and write
|
|
|
|
47DD000
|
stack
|
page read and write
|
|
|
|
197B5660000
|
unkown
|
page read and write
|
|
|
|
1CE55210000
|
unkown
|
page read and write
|
|
|
|
125DB202000
|
unkown
|
page read and write
|
|
|
|
10058000
|
unkown image
|
page read and write
|
|
|
|
6C8000
|
heap private
|
page read and write
|
|
|
|
26BD000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DB0000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
7FF5A0DE2000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DC0000
|
unkown image
|
page readonly
|
|
|
|
3FB1000
|
stack
|
page execute read
|
|
|
|
268E000
|
unkown image
|
page readonly
|
|
|
|
255F000
|
unkown image
|
page readonly
|
|
|
|
4EA0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CA8000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
heap private
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CC6C6000
|
unkown image
|
page readonly
|
|
|
|
92B6F7B000
|
stack
|
page read and write
|
|
|
|
125DAD22000
|
unkown
|
page read and write
|
|
|
|
34D5000
|
unkown
|
page read and write
|
|
|
|
7DF5AABA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCAB1000
|
unkown image
|
page readonly
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
19CDEF40000
|
unkown image
|
page readonly
|
|
|
|
34CE000
|
unkown
|
page read and write
|
|
|
|
3210000
|
unkown image
|
page readonly
|
|
|
|
125DAD82000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AD2000
|
unkown image
|
page readonly
|
|
|
|
125DAD73000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3844000
|
unkown image
|
page readonly
|
|
|
|
10058000
|
unkown image
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
125DADAD000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD9A000
|
unkown
|
page read and write
|
|
|
|
7FF5B996E000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
125DA4FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A0D39000
|
unkown image
|
page readonly
|
|
|
|
7FF5D378F000
|
unkown image
|
page readonly
|
|
|
|
4EA1000
|
unkown
|
page execute read
|
|
|
|
7FF5CCFBD000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B0E20000
|
unkown
|
page read and write
|
|
|
|
92E000
|
stack
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4195000
|
unkown
|
page read and write
|
|
|
|
2C3E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9AAE000
|
unkown image
|
page readonly
|
|
|
|
197B5410000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DA455000
|
unkown
|
page read and write
|
|
|
|
125DAD5B000
|
unkown
|
page read and write
|
|
|
|
674F000
|
stack
|
page read and write
|
|
|
|
197B0076000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5B9C0A000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9C32000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DA0000
|
unkown image
|
page readonly
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
1E40D5C0000
|
unkown
|
page read and write
|
|
|
|
E865EFE000
|
stack
|
page read and write
|
|
|
|
7FF5B9A48000
|
unkown image
|
page readonly
|
|
|
|
4EC7000
|
unkown
|
page readonly
|
|
|
|
7FF5A0CE1000
|
unkown image
|
page readonly
|
|
|
|
7FF59DAB8000
|
unkown image
|
page readonly
|
|
|
|
4EBE000
|
stack
|
page read and write
|
|
|
|
7DF5A7EA2000
|
unkown image
|
page readonly
|
|
|
|
197B07F0000
|
unkown
|
page read and write
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
4D21000
|
unkown
|
page execute read
|
|
|
|
51A1000
|
unkown
|
page read and write
|
|
|
|
7FF510C23000
|
unkown image
|
page readonly
|
|
|
|
2CC8000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
125DA453000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CF3000
|
unkown image
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
1D8F2BD0000
|
unkown image
|
page readonly
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6530000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
heap default
|
page read and write
|
|
|
|
7FF5CC6B2000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
4B70000
|
heap private
|
page read and write
|
|
|
|
7FF5CC3F1000
|
unkown image
|
page readonly
|
|
|
|
10007B000
|
unkown
|
page read and write
|
|
|
|
7DF5AAB90000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E13000
|
unkown
|
page read and write
|
|
|
|
7FF5B9B62000
|
unkown image
|
page readonly
|
|
|
|
268E000
|
unkown image
|
page readonly
|
|
|
|
5A8000
|
unkown
|
page read and write
|
|
|
|
7F760000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCF59000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0C5E000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
197B5800000
|
unkown
|
page read and write
|
|
|
|
7FF5CC598000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCF0F000
|
unkown image
|
page readonly
|
|
|
|
4171000
|
unkown
|
page execute read
|
|
|
|
197B58A1000
|
unkown
|
page read and write
|
|
|
|
2B2B000
|
unkown image
|
page readonly
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2749000
|
unkown image
|
page readonly
|
|
|
|
7FF5B96E7000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCFB4000
|
unkown image
|
page readonly
|
|
|
|
550000
|
unkown image
|
page readonly
|
|
|
|
1D8F3402000
|
unkown
|
page read and write
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
92B6CFE000
|
stack
|
page read and write
|
|
|
|
7FF5B9B2F000
|
unkown image
|
page readonly
|
|
|
|
2B3D000
|
unkown image
|
page readonly
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0C28000
|
unkown image
|
page readonly
|
|
|
|
7FF59E107000
|
unkown image
|
page readonly
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
4085000
|
unkown
|
page read and write
|
|
|
|
7FF5CC6AA000
|
unkown image
|
page readonly
|
|
|
|
197B5540000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CC0000
|
unkown image
|
page readonly
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC681000
|
unkown image
|
page readonly
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
1E40D600000
|
unkown
|
page read and write
|
|
|
|
34E9000
|
unkown
|
page read and write
|
|
|
|
197B0102000
|
unkown
|
page read and write
|
|
|
|
1009F7000
|
stack
|
page read and write
|
|
|
|
125DADC8000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3647000
|
unkown image
|
page readonly
|
|
|
|
7FF582FAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D377F000
|
unkown image
|
page readonly
|
|
|
|
5195000
|
unkown
|
page read and write
|
|
|
|
86A000
|
heap default
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CC731000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
2D99000
|
unkown
|
page read and write
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
7FF59E0B1000
|
unkown image
|
page readonly
|
|
|
|
1E40D590000
|
heap default
|
page read and write
|
|
|
|
4F9A000
|
unkown
|
page read and write
|
|
|
|
125DAD9F000
|
unkown
|
page read and write
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
51A0000
|
unkown
|
page read and write
|
|
|
|
4F81000
|
unkown
|
page read and write
|
|
|
|
4720000
|
unkown
|
page read and write
|
|
|
|
125DAD8C000
|
unkown
|
page read and write
|
|
|
|
125DAD77000
|
unkown
|
page read and write
|
|
|
|
E865C7E000
|
stack
|
page read and write
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
2CB1000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5A0D94000
|
unkown image
|
page readonly
|
|
|
|
5185000
|
unkown
|
page read and write
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3695000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCF01000
|
unkown image
|
page readonly
|
|
|
|
7FF510D17000
|
unkown image
|
page readonly
|
|
|
|
2C52000
|
unkown image
|
page readonly
|
|
|
|
5E60FF000
|
stack
|
page read and write
|
|
|
|
1CE55200000
|
unkown image
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF510CEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5B97DF000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
7FF5B99DD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3873000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9C37000
|
unkown image
|
page readonly
|
|
|
|
26C5000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCFF6000
|
unkown image
|
page readonly
|
|
|
|
125DA800000
|
unkown image
|
page readonly
|
|
|
|
49B0000
|
unkown
|
page read and write
|
|
|
|
4CB000
|
unkown
|
page read and write
|
|
|
|
125DAD8F000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AE4000
|
unkown image
|
page readonly
|
|
|
|
1E40D570000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
197B0200000
|
unkown image
|
page readonly
|
|
|
|
2753000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3834000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page read and write
|
|
|
|
48FB000
|
stack
|
page read and write
|
|
|
|
4E17000
|
unkown
|
page readonly
|
|
|
|
7FF59E057000
|
unkown image
|
page readonly
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
7DF5A7EA0000
|
unkown image
|
page readonly
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
4E6C000
|
stack
|
page read and write
|
|
|
|
7FF5A0D3E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9BE1000
|
unkown image
|
page readonly
|
|
|
|
7F752000
|
unkown image
|
page readonly
|
|
|
|
7DF51AAB0000
|
unkown image
|
page readonly
|
|
|
|
4F7E000
|
unkown
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page readonly
|
|
|
|
4770000
|
heap private
|
page read and write
|
|
|
|
197AFE90000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown image
|
page readonly
|
|
|
|
1CE55220000
|
unkown image
|
page readonly
|
|
|
|
25A7000
|
unkown image
|
page readonly
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
1D8F2DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5D3793000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC787000
|
unkown image
|
page readonly
|
|
|
|
4F75000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown image
|
page readonly
|
|
|
|
2D0F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDC7000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3337000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0CC4000
|
unkown image
|
page readonly
|
|
|
|
125DADD4000
|
unkown
|
page read and write
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
197B58FB000
|
unkown
|
page read and write
|
|
|
|
7FF5D37C6000
|
unkown image
|
page readonly
|
|
|
|
4E7E000
|
stack
|
page read and write
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B99F7000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DA2000
|
unkown image
|
page readonly
|
|
|
|
7EB000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
2697000
|
unkown image
|
page readonly
|
|
|
|
7FF59E0B4000
|
unkown image
|
page readonly
|
|
|
|
125DB300000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown image
|
page readonly
|
|
|
|
4D45000
|
unkown
|
page read and write
|
|
|
|
125DAD90000
|
unkown
|
page read and write
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown
|
page read and write
|
|
|
|
3FD5000
|
stack
|
page read and write
|
|
|
|
1F9E7F13000
|
unkown
|
page read and write
|
|
|
|
34CD000
|
unkown
|
page read and write
|
|
|
|
7FF5D3705000
|
unkown image
|
page readonly
|
|
|
|
19CDED67000
|
unkown
|
page read and write
|
|
|
|
7FF5CCFCB000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAD76000
|
unkown
|
page read and write
|
|
|
|
7F250000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DA48A000
|
unkown
|
page read and write
|
|
|
|
7FF5CCFB7000
|
unkown image
|
page readonly
|
|
|
|
7F5D2000
|
unkown image
|
page readonly
|
|
|
|
197B003D000
|
unkown
|
page read and write
|
|
|
|
2697000
|
unkown image
|
page readonly
|
|
|
|
7DF5C39E0000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E4A000
|
unkown
|
page read and write
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2749000
|
unkown image
|
page readonly
|
|
|
|
1CE554E9000
|
heap private
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
197B5670000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF59DF41000
|
unkown image
|
page readonly
|
|
|
|
125DB202000
|
unkown
|
page read and write
|
|
|
|
4D10000
|
unkown
|
page read and write
|
|
|
|
125DAD80000
|
unkown
|
page read and write
|
|
|
|
197B0802000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B93000
|
unkown image
|
page readonly
|
|
|
|
2C37000
|
unkown image
|
page readonly
|
|
|
|
197B0086000
|
unkown
|
page read and write
|
|
|
|
19CDED80000
|
unkown
|
page read and write
|
|
|
|
26BA000
|
unkown image
|
page readonly
|
|
|
|
7F5D0000
|
unkown image
|
page readonly
|
|
|
|
4851000
|
unkown
|
page execute read
|
|
|
|
4645000
|
unkown
|
page read and write
|
|
|
|
E8661FF000
|
stack
|
page read and write
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
7F5D2000
|
unkown image
|
page readonly
|
|
|
|
125DAD8C000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
heap default
|
page read and write
|
|
|
|
4745000
|
unkown
|
page read and write
|
|
|
|
197B5541000
|
unkown
|
page read and write
|
|
|
|
7FF5CCBAF000
|
unkown image
|
page readonly
|
|
|
|
EC99F7000
|
stack
|
page read and write
|
|
|
|
5170000
|
unkown
|
page read and write
|
|
|
|
7FF5D37D7000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2B01000
|
unkown
|
page read and write
|
|
|
|
4C67000
|
unkown
|
page readonly
|
|
|
|
5CF000
|
unkown
|
page read and write
|
|
|
|
7F652000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3331000
|
unkown image
|
page readonly
|
|
|
|
7DF51AAB2000
|
unkown image
|
page readonly
|
|
|
|
4675000
|
unkown
|
page read and write
|
|
|
|
7FF5CCFB1000
|
unkown image
|
page readonly
|
|
|
|
197B58F8000
|
unkown
|
page read and write
|
|
|
|
7DF51AAC2000
|
unkown image
|
page readonly
|
|
|
|
2DE0000
|
heap private
|
page read and write
|
|
|
|
4170000
|
unkown
|
page read and write
|
|
|
|
125DAD9D000
|
unkown
|
page read and write
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
7FF510CC7000
|
unkown image
|
page readonly
|
|
|
|
2774000
|
unkown image
|
page readonly
|
|
|
|
46B0000
|
unkown
|
page read and write
|
|
|
|
197B002A000
|
unkown
|
page read and write
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
10027000
|
unkown image
|
page readonly
|
|
|
|
10058000
|
unkown image
|
page read and write
|
|
|
|
1005B000
|
unkown image
|
page readonly
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
125DA502000
|
unkown
|
page read and write
|
|
|
|
1007FE000
|
stack
|
page read and write
|
|
|
|
1CE55700000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9BF4000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0636000
|
unkown image
|
page readonly
|
|
|
|
7DF51AAB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D0A000
|
unkown image
|
page readonly
|
|
|
|
1E40D540000
|
unkown image
|
page readonly
|
|
|
|
197B58DE000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
19CDECC0000
|
unkown image
|
page readonly
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
ECA57E000
|
stack
|
page read and write
|
|
|
|
3290000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B7A000
|
unkown image
|
page readonly
|
|
|
|
125DB302000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown image
|
page readonly
|
|
|
|
4650000
|
unkown
|
page read and write
|
|
|
|
7FF5CCE48000
|
unkown image
|
page readonly
|
|
|
|
64E000
|
unkown
|
page read and write
|
|
|
|
277D000
|
unkown image
|
page readonly
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
2CDD000
|
unkown image
|
page readonly
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
19CDEF30000
|
heap private
|
page read and write
|
|
|
|
26BD000
|
unkown image
|
page readonly
|
|
|
|
D29897F000
|
stack
|
page read and write
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
125DAD86000
|
unkown
|
page read and write
|
|
|
|
7DF5A7EC0000
|
unkown image
|
page readonly
|
|
|
|
7FF510CCD000
|
unkown image
|
page readonly
|
|
|
|
2D0F000
|
stack
|
page read and write
|
|
|
|
7F5D2000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
heap private
|
page read and write
|
|
|
|
125DA49E000
|
unkown
|
page read and write
|
|
|
|
10027000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
7DF5AAB92000
|
unkown image
|
page readonly
|
|
|
|
125DAD7E000
|
unkown
|
page read and write
|
|
|
|
3440000
|
unkown image
|
page readonly
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
3A60000
|
unkown image
|
page readonly
|
|
|
|
638000
|
unkown
|
page read and write
|
|
|
|
197B006C000
|
unkown
|
page read and write
|
|
|
|
4BBE000
|
stack
|
page read and write
|
|
|
|
19CDEB60000
|
unkown image
|
page readonly
|
|
|
|
5E5E7A000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
1D8F2BD0000
|
unkown image
|
page readonly
|
|
|
|
2679000
|
unkown image
|
page readonly
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
5027000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B8A000
|
unkown image
|
page readonly
|
|
|
|
2AEB000
|
unkown
|
page read and write
|
|
|
|
4B11000
|
unkown
|
page execute read
|
|
|
|
125DA45B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD002000
|
unkown image
|
page readonly
|
|
|
|
273B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B98A1000
|
unkown image
|
page readonly
|
|
|
|
125DA451000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
7DF5AAB82000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0AA8000
|
unkown image
|
page readonly
|
|
|
|
3320000
|
heap default
|
page read and write
|
|
|
|
2753000
|
unkown image
|
page readonly
|
|
|
|
7F652000
|
unkown image
|
page readonly
|
|
|
|
125DA2D0000
|
unkown image
|
page readonly
|
|
|
|
7DF4C18A0000
|
unkown image
|
page readonly
|
|
|
|
125DAD8C000
|
unkown
|
page read and write
|
|
|
|
7F5D0000
|
unkown image
|
page readonly
|
|
|
|
125DA413000
|
unkown
|
page read and write
|
|
|
|
E86594B000
|
unkown
|
page read and write
|
|
|
|
EC9BFB000
|
stack
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1F9E7E8F000
|
unkown
|
page read and write
|
|
|
|
1E40D629000
|
unkown
|
page read and write
|
|
|
|
4DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC71000
|
unkown image
|
page readonly
|
|
|
|
1CE561D0000
|
unkown
|
page read and write
|
|
|
|
125DAD8C000
|
unkown
|
page read and write
|
|
|
|
7F650000
|
unkown image
|
page readonly
|
|
|
|
1F9E7D20000
|
unkown image
|
page readonly
|
|
|
|
125DA990000
|
unkown image
|
page readonly
|
|
|
|
7FF5CD007000
|
unkown image
|
page readonly
|
|
|
|
1D8F2F00000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
2D1D000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
5115000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown
|
page read and write
|
|
|
|
7FF5D3676000
|
unkown image
|
page readonly
|
|
|
|
1F9E7E81000
|
unkown
|
page read and write
|
|
|
|
40E0000
|
heap private
|
page read and write
|
|
|
|
7FF5CC54F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0A8D000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E29000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown
|
page read and write
|
|
|
|
7FF5CCF46000
|
unkown image
|
page readonly
|
|
|
|
4621000
|
unkown
|
page execute read
|
|
|
|
7FF5B9B3F000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6522000
|
unkown image
|
page readonly
|
|
|
|
197B552E000
|
unkown
|
page read and write
|
|
|
|
125DAD88000
|
unkown
|
page read and write
|
|
|
|
5E5FFA000
|
stack
|
page read and write
|
|
|
|
125DADD0000
|
unkown
|
page read and write
|
|
|
|
1F9E7F02000
|
unkown
|
page read and write
|
|
|
|
7DF51AAC0000
|
unkown image
|
page readonly
|
|
|
|
19CDED4B000
|
heap default
|
page read and write
|
|
|
|
197B581F000
|
unkown
|
page read and write
|
|
|
|
248E000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
4F71000
|
unkown
|
page read and write
|
|
|
|
2D14000
|
unkown image
|
page readonly
|
|
|
|
7F5D2000
|
unkown image
|
page readonly
|
|
|
|
275E000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDCF000
|
unkown image
|
page readonly
|
|
|
|
125DB26A000
|
unkown
|
page read and write
|
|
|
|
85C000
|
unkown
|
page read and write
|
|
|
|
125DA516000
|
unkown
|
page read and write
|
|
|
|
273D000
|
unkown image
|
page readonly
|
|
|
|
4EF1000
|
unkown
|
page execute read
|
|
|
|
2774000
|
unkown image
|
page readonly
|
|
|
|
6C0000
|
heap private
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
D29857E000
|
stack
|
page read and write
|
|
|
|
7FF5CCDF6000
|
unkown image
|
page readonly
|
|
|
|
7FF59E026000
|
unkown image
|
page readonly
|
|
|
|
125DAAD0000
|
unkown image
|
page write copy
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D34F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5A09B5000
|
unkown image
|
page readonly
|
|
|
|
197B589E000
|
unkown
|
page read and write
|
|
|
|
7DF4DB4F0000
|
unkown image
|
page readonly
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
1E40DE02000
|
unkown
|
page read and write
|
|
|
|
7FF5A05C9000
|
unkown image
|
page readonly
|
|
|
|
7BA000
|
heap default
|
page read and write
|
|
|
|
7FF5A0DD6000
|
unkown image
|
page readonly
|
|
|
|
1D8F3000000
|
unkown image
|
page readonly
|
|
|
|
5E5EFF000
|
stack
|
page read and write
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
125DB202000
|
unkown
|
page read and write
|
|
|
|
125DA4E9000
|
unkown
|
page read and write
|
|
|
|
1E40D5A0000
|
unkown image
|
page readonly
|
|
|
|
4C15000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
6754000
|
heap private
|
page read and write
|
|
|
|
2C1B000
|
unkown image
|
page readonly
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
7FF510C25000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1CE55F10000
|
unkown
|
page read and write
|
|
|
|
7DF5DD632000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
7FF59E0F6000
|
unkown image
|
page readonly
|
|
|
|
125DAD8F000
|
unkown
|
page read and write
|
|
|
|
4F71000
|
unkown
|
page read and write
|
|
|
|
7FF510C56000
|
unkown image
|
page readonly
|
|
|
|
49B1000
|
unkown
|
page execute read
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
4750000
|
heap private
|
page read and write
|
|
|
|
7FF5A0CEF000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
34C5000
|
unkown
|
page read and write
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0AB5000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC776000
|
unkown image
|
page readonly
|
|
|
|
125DAD8A000
|
unkown
|
page read and write
|
|
|
|
4B7E000
|
stack
|
page read and write
|
|
|
|
4BF0000
|
unkown
|
page read and write
|
|
|
|
2711000
|
unkown image
|
page readonly
|
|
|
|
125DB302000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3690000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5CCF2A000
|
unkown image
|
page readonly
|
|
|
|
7F5E2000
|
unkown image
|
page readonly
|
|
|
|
4F83000
|
unkown
|
page read and write
|
|
|
|
1CE55480000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0AF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0DA4000
|
unkown image
|
page readonly
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
2BA0000
|
unkown image
|
page readonly
|
|
|
|
584000
|
unkown
|
page read and write
|
|
|
|
125DAB40000
|
unkown
|
page read and write
|
|
|
|
2C2E000
|
unkown image
|
page readonly
|
|
|
|
2C61000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1F9E7F08000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
197B5680000
|
unkown
|
page read and write
|
|
|
|
323B000
|
unkown
|
page read and write
|
|
|
|
125DB26A000
|
unkown
|
page read and write
|
|
|
|
1E40D613000
|
unkown
|
page read and write
|
|
|
|
638000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DAA80000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DA4E1000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
D29867B000
|
stack
|
page read and write
|
|
|
|
7F5E2000
|
unkown image
|
page readonly
|
|
|
|
7FF59DF31000
|
unkown image
|
page readonly
|
|
|
|
1E40D702000
|
unkown
|
page read and write
|
|
|
|
197B5813000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5104D7000
|
unkown image
|
page readonly
|
|
|
|
2D0F000
|
stack
|
page read and write
|
|
|
|
4877000
|
unkown
|
page readonly
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
273B000
|
unkown image
|
page readonly
|
|
|
|
125DADBF000
|
unkown
|
page read and write
|
|
|
|
5117000
|
unkown
|
page readonly
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
50F0000
|
unkown
|
page read and write
|
|
|
|
5FE000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
heap default
|
page read and write
|
|
|
|
7FF5A0CDF000
|
unkown image
|
page readonly
|
|
|
|
2D38000
|
unkown image
|
page readonly
|
|
|
|
26C5000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
197B58FA000
|
unkown
|
page read and write
|
|
|
|
125DA459000
|
unkown
|
page read and write
|
|
|
|
1F9E7E70000
|
unkown
|
page read and write
|
|
|
|
7FF5A0C65000
|
unkown image
|
page readonly
|
|
|
|
4F81000
|
unkown
|
page read and write
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
10DE000
|
unkown image
|
page readonly
|
|
|
|
4F00000
|
unkown
|
page read and write
|
|
|
|
4CAE000
|
stack
|
page read and write
|
|
|
|
4087000
|
unkown
|
page readonly
|
|
|
|
7FF59D8A3000
|
unkown image
|
page readonly
|
|
|
|
2762000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2D7F000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
26BA000
|
unkown image
|
page readonly
|
|
|
|
7FF5B96B3000
|
unkown image
|
page readonly
|
|
|
|
125DAD77000
|
unkown
|
page read and write
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
34C5000
|
unkown
|
page read and write
|
|
|
|
197B5600000
|
unkown
|
page read and write
|
|
|
|
2AF8000
|
unkown
|
page read and write
|
|
|
|
7DF5AAB82000
|
unkown image
|
page readonly
|
|
|
|
7F242000
|
unkown image
|
page readonly
|
|
|
|
7FF59DE8C000
|
unkown image
|
page readonly
|
|
|
|
E865D7C000
|
stack
|
page read and write
|
|
|
|
388000
|
unkown
|
page read and write
|
|
|
|
7DF5DD640000
|
unkown image
|
page readonly
|
|
|
|
1CE55A80000
|
unkown image
|
page readonly
|
|
|
|
5187000
|
unkown
|
page readonly
|
|
|
|
7FF5B9AE5000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DA2000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page read and write
|
|
|
|
125DA4BF000
|
unkown
|
page read and write
|
|
|
|
1D8F3380000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC605000
|
unkown image
|
page readonly
|
|
|
|
197B5550000
|
unkown
|
page read and write
|
|
|
|
7DF51AAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3657000
|
unkown image
|
page readonly
|
|
|
|
197B0904000
|
unkown
|
page read and write
|
|
|
|
7FF5B9994000
|
unkown image
|
page readonly
|
|
|
|
125DAD81000
|
unkown
|
page read and write
|
|
|
|
197B55F0000
|
unkown
|
page read and write
|
|
|
|
970000
|
unkown image
|
page readonly
|
|
|
|
6750000
|
heap private
|
page read and write
|
|
|
|
7DF5C39F0000
|
unkown image
|
page readonly
|
|
|
|
125DAD6D000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CD4000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown image
|
page read and write
|
|
|
|
197B0902000
|
unkown
|
page read and write
|
|
|
|
7DF5DD620000
|
unkown image
|
page readonly
|
|
|
|
7F5F0000
|
unkown image
|
page readonly
|
|
|
|
4C65000
|
unkown
|
page read and write
|
|
|
|
197B0580000
|
unkown image
|
page readonly
|
|
|
|
197B5528000
|
unkown
|
page read and write
|
|
|
|
197AFE70000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
7DF5C39E2000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
1E40D713000
|
unkown
|
page read and write
|
|
|
|
7DF5AABA0000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
258C000
|
unkown image
|
page readonly
|
|
|
|
268E000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCDD7000
|
unkown image
|
page readonly
|
|
|
|
2CFE000
|
unkown image
|
page readonly
|
|
|
|
1E40D8D0000
|
unkown image
|
page readonly
|
|
|
|
1F9E7D10000
|
heap private
|
page read and write
|
|
|
|
197B58EF000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CB7000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
4670000
|
unkown
|
page read and write
|
|
|
|
7DF5D6520000
|
unkown image
|
page readonly
|
|
|
|
7F540000
|
unkown image
|
page readonly
|
|
|
|
19CDECD0000
|
unkown image
|
page readonly
|
|
|
|
197AFEC0000
|
heap default
|
page read and write
|
|
|
|
269E000
|
unkown image
|
page readonly
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
5000000
|
unkown
|
page read and write
|
|
|
|
125DAD8F000
|
unkown
|
page read and write
|
|
|
|
1E40D653000
|
unkown
|
page read and write
|
|
|
|
3182000
|
unkown
|
page read and write
|
|
|
|
7FF5109CB000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
7F5D0000
|
unkown image
|
page readonly
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
197B0107000
|
unkown
|
page read and write
|
|
|
|
481E000
|
stack
|
page read and write
|
|
|
|
1CE553D0000
|
unkown
|
page read and write
|
|
|
|
48BD000
|
stack
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4F72000
|
unkown
|
page read and write
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
2A64000
|
unkown
|
page read and write
|
|
|
|
1FB000
|
unkown
|
page read and write
|
|
|
|
602000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown
|
page read and write
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
2D6F000
|
heap default
|
page read and write
|
|
|
|
1F9E7E3C000
|
unkown
|
page read and write
|
|
|
|
7FF5CCF1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D379D000
|
unkown image
|
page readonly
|
|
|
|
197B5390000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
32F0000
|
unkown image
|
page readonly
|
|
|
|
125DA429000
|
unkown
|
page read and write
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
4F7C000
|
unkown
|
page read and write
|
|
|
|
7DF5DD622000
|
unkown image
|
page readonly
|
|
|
|
10031000
|
unkown image
|
page read and write
|
|
|
|
4875000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
7FF59E0CB000
|
unkown image
|
page readonly
|
|
|
|
64E000
|
unkown
|
page read and write
|
|
|
|
7DF5C39D2000
|
unkown image
|
page readonly
|
|
|
|
2AFB000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
275E000
|
unkown image
|
page readonly
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
29EE000
|
stack
|
page read and write
|
|
|
|
650000
|
unkown image
|
page readonly
|
|
|
|
125DA4A5000
|
unkown
|
page read and write
|
|
|
|
5E5F7F000
|
stack
|
page read and write
|
|
|
|
19CDED6F000
|
unkown
|
page read and write
|
|
|
|
125DA4A7000
|
unkown
|
page read and write
|
|
|
|
7FF5CC773000
|
unkown image
|
page readonly
|
|
|
|
34CD000
|
unkown
|
page read and write
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D3847000
|
unkown image
|
page readonly
|
|
|
|
1D8F2F13000
|
unkown
|
page read and write
|
|
|
|
2746000
|
unkown image
|
page readonly
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
1D8F2BB0000
|
unkown image
|
page read and write
|
|
|
|
7DF5A7EB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9A45000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC547000
|
unkown image
|
page readonly
|
|
|
|
19CDEC70000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
197B5630000
|
unkown
|
page read and write
|
|
|
|
125DA458000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
55A000
|
heap default
|
page read and write
|
|
|
|
25BA000
|
unkown image
|
page readonly
|
|
|
|
92B6E7B000
|
stack
|
page read and write
|
|
|
|
197B0097000
|
unkown
|
page read and write
|
|
|
|
7FF510C67000
|
unkown image
|
page readonly
|
|
|
|
5CF000
|
unkown
|
page read and write
|
|
|
|
4CEE000
|
stack
|
page read and write
|
|
|
|
7FF5D34F5000
|
unkown image
|
page readonly
|
|
|
|
4FA7000
|
unkown
|
page read and write
|
|
|
|
7F5E0000
|
unkown image
|
page readonly
|
|
|
|
7FD92000
|
unkown image
|
page readonly
|
|
|
|
125DAD93000
|
unkown
|
page read and write
|
|
|
|
7FF5CCFC4000
|
unkown image
|
page readonly
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
D8D000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
FCB000
|
heap default
|
page read and write
|
|
|
|
7FF5A0D97000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B20000
|
unkown image
|
page readonly
|
|
|
|
197B5640000
|
unkown
|
page read and write
|
|
|
|
7FF510C69000
|
unkown image
|
page readonly
|
|
|
|
10033000
|
unkown image
|
page write copy
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4F7C000
|
unkown
|
page read and write
|
|
|
|
CD21FF9000
|
stack
|
page read and write
|
|
|
|
7F640000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
197B5520000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
125DADB1000
|
unkown
|
page read and write
|
|
|
|
125DADD0000
|
unkown
|
page read and write
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
34A0000
|
heap default
|
page read and write
|
|
|
|
1E40D64E000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
2749000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC595000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0B8D000
|
unkown image
|
page readonly
|
|
|
|
7FF59D93F000
|
unkown image
|
page readonly
|
|
|
|
1F9E7E13000
|
unkown
|
page read and write
|
|
|
|
197B1390000
|
unkown
|
page read and write
|
|
|
|
275E000
|
unkown image
|
page readonly
|
|
|
|
125DB202000
|
unkown
|
page read and write
|
|
|
|
7FF5D37AA000
|
unkown image
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
1CE56160000
|
unkown
|
page readonly
|
|
|
|
197B5564000
|
unkown
|
page read and write
|
|
|
|
7DF5AAB80000
|
unkown image
|
page readonly
|
|
|
|
19CDED52000
|
unkown
|
page read and write
|
|
|
|
1E40D520000
|
unkown image
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
7FF5A0CFD000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0942000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0CC9000
|
unkown image
|
page readonly
|
|
|
|
125DAD8E000
|
unkown
|
page read and write
|
|
|
|
197B5400000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A26000
|
unkown image
|
page readonly
|
|
|
|
4061000
|
unkown
|
page execute read
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
7FF5D361A000
|
unkown image
|
page readonly
|
|
|
|
1CE56170000
|
unkown
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
7FF5B99E3000
|
unkown image
|
page readonly
|
|
|
|
1D8F2E02000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
7DF5AAB80000
|
unkown image
|
page readonly
|
|
|
|
2D02000
|
unkown image
|
page readonly
|
|
|
|
1F9E7E50000
|
unkown
|
page read and write
|
|
|
|
5E6079000
|
stack
|
page read and write
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
1CE554E0000
|
heap private
|
page read and write
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
7DF5C39D2000
|
unkown image
|
page readonly
|
|
|
|
7F642000
|
unkown image
|
page readonly
|
|
|
|
274E000
|
unkown image
|
page readonly
|
|
|
|
125DAAA0000
|
unkown image
|
page readonly
|
|
|
|
5160000
|
unkown
|
page read and write
|
|
|
|
E10000
|
heap default
|
page read and write
|
|
|
|
2CEE000
|
unkown image
|
page readonly
|
|
|
|
10033000
|
unkown image
|
page write copy
|
|
|
|
D2981DE000
|
stack
|
page read and write
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
7FD90000
|
unkown image
|
page readonly
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
3FB0000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
125DA2B0000
|
unkown image
|
page read and write
|
|
|
|
1CE553D0000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
4060000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B44000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9B31000
|
unkown image
|
page readonly
|
|
|
|
7FF5CC6D7000
|
unkown image
|
page readonly
|
|
|
|
4677000
|
unkown
|
page readonly
|
|
|
|
46A1000
|
unkown
|
page read and write
|
|
|
|
5E617F000
|
stack
|
page read and write
|
|
|
|
7DF5D6532000
|
unkown image
|
page readonly
|
|
|
|
125DAD81000
|
unkown
|
page read and write
|
|
|
|
7FF5B98EB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9AF8000
|
unkown image
|
page readonly
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
7DF5D6DB2000
|
unkown image
|
page readonly
|
|
|
|
10031000
|
unkown image
|
page read and write
|
|
|
|
197B5520000
|
unkown
|
page read and write
|
|
|
|
CD21F7E000
|
stack
|
page read and write
|
|
|
|
92B6FFE000
|
stack
|
page read and write
|
|
|
|
267B000
|
unkown image
|
page readonly
|
|
|
|
3186000
|
unkown
|
page read and write
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0A9B000
|
unkown image
|
page readonly
|
|
|
|
125DAD76000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
4130000
|
heap private
|
page read and write
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
7FF5B93F4000
|
unkown image
|
page readonly
|
|
|
|
125DAD4C000
|
unkown
|
page read and write
|
|
|
|
36E0000
|
unkown image
|
page readonly
|
|
|
|
1E40D64C000
|
unkown
|
page read and write
|
|
|
|
7FF5B9A07000
|
unkown image
|
page readonly
|
|
|
|
51C7000
|
unkown
|
page read and write
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B9940000
|
unkown image
|
page readonly
|
|
|
|
125DADB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AEA000
|
unkown image
|
page readonly
|
|
|
|
7DF5A7EC0000
|
unkown image
|
page readonly
|
|
|
|
125DB363000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown image
|
page read and write
|
|
|
|
705000
|
unkown
|
page read and write
|
|
|
|
7FF510D17000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCFC7000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
|
|
125DAD7E000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2B10000
|
unkown image
|
page readonly
|
|
|
|
CD21C7B000
|
unkown
|
page read and write
|
|
|
|
940000
|
unkown image
|
page readonly
|
|
|
|
197B58FE000
|
unkown
|
page read and write
|
|
|
|
125DA2D0000
|
unkown image
|
page readonly
|
|
|
|
1D8F2F02000
|
unkown
|
page read and write
|
|
|
|
7FF5B9B89000
|
unkown image
|
page readonly
|
|
|
|
2AEF000
|
unkown
|
page read and write
|
|
|
|
7FF5D3698000
|
unkown image
|
page readonly
|
|
|
|
197B57B0000
|
unkown
|
page read and write
|
|
|
|
7DF418980000
|
unkown image
|
page readonly
|
|
|
|
7DF51AAC2000
|
unkown image
|
page readonly
|
|
|
|
4B10000
|
unkown
|
page read and write
|
|
|
|
7F660000
|
unkown image
|
page readonly
|
|
|
|
125DAD47000
|
unkown
|
page read and write
|
|
|
|
1CE56180000
|
unkown
|
page read and write
|
|
|
|
45DF000
|
stack
|
page read and write
|
|
|
|
5001000
|
unkown
|
page execute read
|
|
|
|
7F652000
|
unkown image
|
page readonly
|
|
|
|
7FF5A0D12000
|
unkown image
|
page readonly
|
|
|
|
125DA300000
|
unkown image
|
page readonly
|
|
|
|
2798000
|
unkown image
|
page readonly
|
|
|
|
1E40DAD0000
|
unkown image
|
page readonly
|
|
|
|
125DAD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5CC576000
|
unkown image
|
page readonly
|
|
|
|
7FF5CCAB7000
|
unkown image
|
page readonly
|
|
|
|
197AFEA0000
|
unkown image
|
page readonly
|
|
|
|
8B0000
|
unkown image
|
page readonly
|
|
|
|
1CE55900000
|
unkown image
|
page readonly
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
5C9000
|
unkown
|
page read and write
|
|
|
|
4F7C000
|
unkown
|
page read and write
|
|
|
|
704000
|
unkown
|
page read and write
|
|
|
|
1D8F2F08000
|
unkown
|
page read and write
|
|
|
|
125DAD92000
|
unkown
|
page read and write
|
|
|
|
D29815E000
|
stack
|
page read and write
|
|
|
|
7FF5A0C21000
|
unkown image
|
page readonly
|
|
|
|
1CE55360000
|
unkown
|
page read and write
|
|
|
|
1E40D67C000
|
unkown
|
page read and write
|
|
|
|
7FF5CCFDA000
|
unkown image
|
page readonly
|
|
|
|
26A1000
|
unkown image
|
page readonly
|
|
|
|
10E2000
|
unkown image
|
page readonly
|
|
|
|
125DAB40000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown image
|
page readonly
|
|
There are 1681 hidden memdumps, click here to show them.