Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
efELSMI5R4.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_138b2837\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
 |
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1D8A.tmp.txt
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE4A6.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE7F3.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERECA5.tmp.csv
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl.0001 (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl.0001 (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl.0001mo (copy)
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20211202_085826_059.etl
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_8c5962cbbdb13a8671f1f3c3793157e73bd5d897_d70d8aa6_09efe6a1\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_d71d33d652a62c864cb684e881f783bcee8c2df7_d70d8aa6_17200f86\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
modified
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER20B.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2267.tmp.csv
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2650.tmp.txt
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER442A.tmp.csv
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WER47E4.tmp.txt
|
data
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCFCE.tmp.dmp
|
Mini DuMP crash report, 15 streams, Thu Dec 2 08:45:33 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDDA9.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE06A.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF6ED.tmp.dmp
|
Mini DuMP crash report, 15 streams, Thu Dec 2 08:45:40 2021, 0x1205a4 type
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFF1C.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl.0001@Y (copy)
|
data
|
dropped
|
|
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
modified
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
|
|
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll"
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\efELSMI5R4.dll,Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll",#1
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k unistacksvcgroup
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\efELSMI5R4.dll,ajkaibu
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\efELSMI5R4.dll,akyncbgollmj
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k WerSvcGroup
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll",Control_RunDLL
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Luvyipkowrkroyzm\ogjmypdycx.tqu",YATH
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Bbinmhqtvqxlwm\fxpdqqlt.pee",NbYKKsmYIJwkXu
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Bbinmhqtvqxlwm\fxpdqqlt.pee",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\efELSMI5R4.dll",#1
|
|
|
|
C:\Windows\System32\wermgr.exe
|
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "572" "2276" "2168" "2272" "0" "0" "2268" "0" "0" "0" "0" "0"
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 7084 -ip 7084
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 7084 -ip 7084
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7084 -s 344
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 168 -p 6404 -ip 6404
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6404 -s 308
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6404 -ip 6404
|
|
|
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6404 -s 316
|
|
There are 20 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://45.63.5.129/fWxVMEvEItuVfHPcFsGHwLkZfscDpKaAeHKyPiJIqQ
|
45.63.5.129
|
|
|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Transit/Stops/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
http://crl.m
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/your-california-privacy-rights
|
unknown
|
|
|
|
http://crl.ver)
|
unknown
|
|
|
|
https://www.disneyplus.com/legal/privacy-policy
|
unknown
|
|
|
|
http://upx.sf.net
|
unknown
|
|
|
|
https://www.tiktok.com/legal/report/feedback
|
unknown
|
|
|
|
http://help.disneyplus.com.
|
unknown
|
|
|
|
https://disneyplus.com/legal.
|
unknown
|
|
There are 32 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.63.5.129
|
unknown
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Usage
|
MonthID
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6404
|
Terminator
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6404
|
Reason
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6404
|
CreationTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHivePermissionsCorrect
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHiveOwnerCorrect
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceTicket
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceId
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
ApplicationFlags
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
|
0018800453F4626F
|
|
There are 4 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
600000
|
stack
|
page execute and read and write
|
|
|
|
CCC000
|
heap default
|
page read and write
|
|
|
|
CCC000
|
heap default
|
page read and write
|
|
|
|
8F9000
|
unkown
|
page read and write
|
|
|
|
33D2000
|
unkown
|
page read and write
|
|
|
|
920000
|
stack
|
page execute and read and write
|
|
|
|
920000
|
stack
|
page execute and read and write
|
|
|
|
920000
|
stack
|
page execute and read and write
|
|
|
|
30A0000
|
stack
|
page execute and read and write
|
|
|
|
32D0000
|
stack
|
page execute and read and write
|
|
|
|
345A000
|
heap default
|
page read and write
|
|
|
|
68A000
|
heap default
|
page read and write
|
|
|
|
3460000
|
stack
|
page execute and read and write
|
|
|
|
316A000
|
heap default
|
page read and write
|
|
|
|
CCC000
|
heap default
|
page read and write
|
|
|
|
920000
|
stack
|
page execute and read and write
|
|
|
|
CCC000
|
heap default
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
stack
|
page execute and read and write
|
|
|
|
920000
|
stack
|
page execute and read and write
|
|
|
|
CCC000
|
heap default
|
page read and write
|
|
|
|
2FD0000
|
stack
|
page execute and read and write
|
|
|
|
7FF5AF947000
|
unkown image
|
page readonly
|
|
|
|
2ACC000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown
|
page read and write
|
|
|
|
1240000
|
unkown image
|
page readonly
|
|
|
|
7FF502B5F000
|
unkown image
|
page readonly
|
|
|
|
ECE60FF000
|
stack
|
page read and write
|
|
|
|
46FB000
|
unkown
|
page read and write
|
|
|
|
179FEA69000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page read and write
|
|
|
|
7FF597B55000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
2A1B000
|
unkown image
|
page readonly
|
|
|
|
33CD000
|
unkown
|
page read and write
|
|
|
|
7F9B2000
|
unkown image
|
page readonly
|
|
|
|
18451470000
|
unkown image
|
page readonly
|
|
|
|
38D0000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown image
|
page readonly
|
|
|
|
29CE000
|
unkown image
|
page readonly
|
|
|
|
179FEA46000
|
unkown
|
page read and write
|
|
|
|
3430000
|
unkown image
|
page readonly
|
|
|
|
29F6000
|
unkown image
|
page readonly
|
|
|
|
362D000
|
stack
|
page read and write
|
|
|
|
7FF5A900C000
|
unkown image
|
page readonly
|
|
|
|
4A1E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFA1A000
|
unkown image
|
page readonly
|
|
|
|
19E2A6A0000
|
heap default
|
page read and write
|
|
|
|
179FEA4C000
|
unkown
|
page read and write
|
|
|
|
7FF50D8AB000
|
unkown image
|
page readonly
|
|
|
|
2320DA30000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
227A74F000
|
stack
|
page read and write
|
|
|
|
179FEA7C000
|
unkown
|
page read and write
|
|
|
|
253F000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
45F0000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
6D8000
|
heap default
|
page read and write
|
|
|
|
7FF597A4E000
|
unkown image
|
page readonly
|
|
|
|
268B000
|
unkown image
|
page readonly
|
|
|
|
2DA1000
|
unkown image
|
page readonly
|
|
|
|
227AE7F000
|
stack
|
page read and write
|
|
|
|
12F407B000
|
unkown
|
page read and write
|
|
|
|
7FF57A401000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD692000
|
unkown image
|
page readonly
|
|
|
|
179FEA61000
|
unkown
|
page read and write
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
4E30000
|
heap private
|
page read and write
|
|
|
|
33F0000
|
unkown
|
page read and write
|
|
|
|
7F822000
|
unkown image
|
page readonly
|
|
|
|
680000
|
heap default
|
page read and write
|
|
|
|
8D0000
|
heap default
|
page read and write
|
|
|
|
389451B000
|
unkown
|
page read and write
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
7FF5AF92F000
|
unkown image
|
page readonly
|
|
|
|
3894E7E000
|
stack
|
page read and write
|
|
|
|
ECE61FF000
|
stack
|
page read and write
|
|
|
|
7FF57A2F7000
|
unkown image
|
page readonly
|
|
|
|
980000
|
stack
|
page read and write
|
|
|
|
2B8B000
|
unkown image
|
page readonly
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
7FF502DFA000
|
unkown image
|
page readonly
|
|
|
|
1980CC00000
|
unkown image
|
page readonly
|
|
|
|
179FE8E0000
|
unkown image
|
page readonly
|
|
|
|
7FF502DE4000
|
unkown image
|
page readonly
|
|
|
|
2320D9F0000
|
unkown image
|
page read and write
|
|
|
|
CB0000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
2B56000
|
unkown image
|
page readonly
|
|
|
|
470F000
|
stack
|
page read and write
|
|
|
|
29DF000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
7DF5B70B2000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
2A09000
|
unkown image
|
page readonly
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
3920000
|
unkown image
|
page readonly
|
|
|
|
7EFF0000
|
unkown image
|
page readonly
|
|
|
|
31F1000
|
unkown
|
page read and write
|
|
|
|
7FF57A323000
|
unkown image
|
page readonly
|
|
|
|
4A5F000
|
unkown
|
page read and write
|
|
|
|
7FF502CEE000
|
unkown image
|
page readonly
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
7FF5A938B000
|
unkown image
|
page readonly
|
|
|
|
625000
|
stack
|
page execute and read and write
|
|
|
|
18451640000
|
unkown
|
page read and write
|
|
|
|
1980C960000
|
unkown
|
page read and write
|
|
|
|
7FF502BC7000
|
unkown image
|
page readonly
|
|
|
|
3F7000
|
heap private
|
page read and write
|
|
|
|
34BA000
|
heap default
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF6A5000
|
unkown image
|
page readonly
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE60000
|
unkown image
|
page readonly
|
|
|
|
2320DC29000
|
unkown
|
page read and write
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
1980C940000
|
unkown
|
page read and write
|
|
|
|
7FF502B22000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
2A4F000
|
unkown
|
page read and write
|
|
|
|
1B4DBE20000
|
unkown
|
page read and write
|
|
|
|
2B96000
|
unkown image
|
page readonly
|
|
|
|
18451430000
|
heap private
|
page read and write
|
|
|
|
801000
|
unkown
|
page read and write
|
|
|
|
179FEA68000
|
unkown
|
page read and write
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
19E2A850000
|
unkown
|
page read and write
|
|
|
|
2A9F000
|
unkown image
|
page readonly
|
|
|
|
7FB70000
|
unkown image
|
page readonly
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
43D000
|
unkown
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7DF5A57C2000
|
unkown image
|
page readonly
|
|
|
|
33D2000
|
unkown
|
page read and write
|
|
|
|
7DF5B70B0000
|
unkown image
|
page readonly
|
|
|
|
1B4DC202000
|
unkown
|
page read and write
|
|
|
|
2AD2000
|
unkown image
|
page readonly
|
|
|
|
3485000
|
stack
|
page execute and read and write
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDC0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A2D1000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
B90000
|
unkown image
|
page readonly
|
|
|
|
2A06000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7F830000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8D9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF94E000
|
unkown image
|
page readonly
|
|
|
|
2F20000
|
unkown image
|
page readonly
|
|
|
|
7DF510A80000
|
unkown image
|
page readonly
|
|
|
|
505F000
|
unkown
|
page read and write
|
|
|
|
7FF57A37D000
|
unkown image
|
page readonly
|
|
|
|
AC707F000
|
stack
|
page read and write
|
|
|
|
2631000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
2A06000
|
unkown image
|
page readonly
|
|
|
|
1980CA5C000
|
unkown
|
page read and write
|
|
|
|
840000
|
heap private
|
page read and write
|
|
|
|
7FF5AF973000
|
unkown image
|
page readonly
|
|
|
|
2CF9000
|
unkown image
|
page readonly
|
|
|
|
1C99D860000
|
unkown image
|
page readonly
|
|
|
|
7FF502D0F000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
472F000
|
unkown
|
page read and write
|
|
|
|
7F822000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5D0000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
2B7F000
|
unkown image
|
page readonly
|
|
|
|
2A9F000
|
unkown image
|
page readonly
|
|
|
|
2D40000
|
unkown image
|
page readonly
|
|
|
|
179FEA4D000
|
unkown
|
page read and write
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A934F000
|
unkown image
|
page readonly
|
|
|
|
7FF50D67A000
|
unkown image
|
page readonly
|
|
|
|
8FC000
|
unkown
|
page read and write
|
|
|
|
3320000
|
heap default
|
page read and write
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
2C16000
|
unkown image
|
page readonly
|
|
|
|
7DF510A60000
|
unkown image
|
page readonly
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AFA0A000
|
unkown image
|
page readonly
|
|
|
|
7FF57A377000
|
unkown image
|
page readonly
|
|
|
|
7FF57A327000
|
unkown image
|
page readonly
|
|
|
|
4DAD000
|
unkown
|
page read and write
|
|
|
|
19E2A857000
|
unkown
|
page read and write
|
|
|
|
6289BDF000
|
stack
|
page read and write
|
|
|
|
179FEA44000
|
unkown
|
page read and write
|
|
|
|
2CE1000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
179FE900000
|
unkown image
|
page readonly
|
|
|
|
7FF57A30D000
|
unkown image
|
page readonly
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
7FF597A8E000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF9F9000
|
unkown image
|
page readonly
|
|
|
|
1C99D190000
|
heap default
|
page read and write
|
|
|
|
18451602000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
2659000
|
unkown image
|
page readonly
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
26FB000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9392000
|
unkown image
|
page readonly
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
1C99D202000
|
unkown
|
page read and write
|
|
|
|
7DF510A60000
|
unkown image
|
page readonly
|
|
|
|
7FF597AB8000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
32F5000
|
stack
|
page execute and read and write
|
|
|
|
54FC000
|
stack
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
AAF000
|
stack
|
page read and write
|
|
|
|
1240000
|
unkown image
|
page readonly
|
|
|
|
1C99D140000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
1980E402000
|
unkown
|
page read and write
|
|
|
|
7FF5AF96B000
|
unkown image
|
page readonly
|
|
|
|
7FF50D86F000
|
unkown image
|
page readonly
|
|
|
|
29CE000
|
unkown image
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
179FEA7D000
|
unkown
|
page read and write
|
|
|
|
179FECD0000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
heap private
|
page read and write
|
|
|
|
7DF510A72000
|
unkown image
|
page readonly
|
|
|
|
7FF502DF1000
|
unkown image
|
page readonly
|
|
|
|
19E2A800000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
heap default
|
page read and write
|
|
|
|
179FEA80000
|
unkown
|
page read and write
|
|
|
|
7FF597A57000
|
unkown image
|
page readonly
|
|
|
|
7FF597A0F000
|
unkown image
|
page readonly
|
|
|
|
24DD000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
7DF588080000
|
unkown image
|
page readonly
|
|
|
|
1980C920000
|
unkown image
|
page readonly
|
|
|
|
7FF50D955000
|
unkown image
|
page readonly
|
|
|
|
7FF502AD2000
|
unkown image
|
page readonly
|
|
|
|
28B4000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
2AA4000
|
unkown image
|
page readonly
|
|
|
|
82E000
|
stack
|
page read and write
|
|
|
|
7FF50D883000
|
unkown image
|
page readonly
|
|
|
|
3630000
|
unkown image
|
page readonly
|
|
|
|
2F40000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
29F6000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
68E0000
|
unkown image
|
page readonly
|
|
|
|
2C28000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page read and write
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
1B4DC302000
|
unkown
|
page read and write
|
|
|
|
7DF5A57D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8FD0000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
19E2A84F000
|
unkown
|
page read and write
|
|
|
|
7FF5AF87B000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD680000
|
unkown image
|
page readonly
|
|
|
|
AC696B000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
2A4C000
|
unkown image
|
page readonly
|
|
|
|
7F820000
|
unkown image
|
page readonly
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
1B4DC200000
|
unkown
|
page read and write
|
|
|
|
2BF4000
|
unkown image
|
page readonly
|
|
|
|
7FF50D86D000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0087000
|
unkown image
|
page readonly
|
|
|
|
A6E000
|
stack
|
page read and write
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
7DF4A3690000
|
unkown image
|
page readonly
|
|
|
|
960000
|
unkown image
|
page read and write
|
|
|
|
7FF5A8FA9000
|
unkown image
|
page readonly
|
|
|
|
ECE5BFA000
|
stack
|
page read and write
|
|
|
|
7FF5AF9F2000
|
unkown image
|
page readonly
|
|
|
|
1980CF80000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
1980C820000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE30000
|
unkown image
|
page readonly
|
|
|
|
2AA4000
|
unkown image
|
page readonly
|
|
|
|
2A50000
|
unkown image
|
page readonly
|
|
|
|
29D1000
|
unkown image
|
page readonly
|
|
|
|
1C99D170000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5D0000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
2B75000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
7FF50D880000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7FF597ABE000
|
unkown image
|
page readonly
|
|
|
|
2A6B000
|
heap private
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
270B000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5D2000
|
unkown image
|
page readonly
|
|
|
|
2BEB000
|
unkown image
|
page readonly
|
|
|
|
7FF502DD9000
|
unkown image
|
page readonly
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
179FEA47000
|
unkown
|
page read and write
|
|
|
|
461E000
|
stack
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
7FF50D887000
|
unkown image
|
page readonly
|
|
|
|
7FF5A93BA000
|
unkown image
|
page readonly
|
|
|
|
2320E402000
|
unkown
|
page read and write
|
|
|
|
1C99D200000
|
unkown
|
page read and write
|
|
|
|
7FF5A8C64000
|
unkown image
|
page readonly
|
|
|
|
18451623000
|
unkown
|
page read and write
|
|
|
|
7FF502D77000
|
unkown image
|
page readonly
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
2BEC000
|
unkown image
|
page readonly
|
|
|
|
2F2B000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF502596000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FF57A309000
|
unkown image
|
page readonly
|
|
|
|
628A47F000
|
stack
|
page read and write
|
|
|
|
7FF5A9419000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FF502D7D000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown image
|
page read and write
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
7EFD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5DFEE6000
|
unkown image
|
page readonly
|
|
|
|
2A14000
|
unkown image
|
page readonly
|
|
|
|
266B000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
7FF50D8DA000
|
unkown image
|
page readonly
|
|
|
|
7F830000
|
unkown image
|
page readonly
|
|
|
|
19E2A854000
|
unkown
|
page read and write
|
|
|
|
18451490000
|
heap default
|
page read and write
|
|
|
|
24E6000
|
unkown image
|
page readonly
|
|
|
|
2320E000000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF88C000
|
unkown image
|
page readonly
|
|
|
|
473A000
|
unkown
|
page read and write
|
|
|
|
2BEF000
|
unkown image
|
page readonly
|
|
|
|
33CE000
|
unkown
|
page read and write
|
|
|
|
7FF5AF7F0000
|
unkown image
|
page readonly
|
|
|
|
2AA4000
|
unkown image
|
page readonly
|
|
|
|
7FF57A313000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
2C1C000
|
unkown image
|
page readonly
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
7FF597B5A000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9412000
|
unkown image
|
page readonly
|
|
|
|
8C0000
|
heap private
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DFDE5000
|
unkown image
|
page readonly
|
|
|
|
78B000
|
unkown
|
page read and write
|
|
|
|
7DF485F30000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
680D000
|
stack
|
page read and write
|
|
|
|
7FF5A943A000
|
unkown image
|
page readonly
|
|
|
|
7FF5979FE000
|
unkown image
|
page readonly
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
1C99D1C0000
|
unkown
|
page read and write
|
|
|
|
7DF5A57C0000
|
unkown image
|
page readonly
|
|
|
|
2B2E000
|
unkown image
|
page readonly
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
350000
|
unkown
|
page read and write
|
|
|
|
1C99D140000
|
unkown image
|
page readonly
|
|
|
|
2AC6000
|
unkown image
|
page readonly
|
|
|
|
7FF50D951000
|
unkown image
|
page readonly
|
|
|
|
980000
|
stack
|
page read and write
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
2B6B000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
2608000
|
unkown image
|
page readonly
|
|
|
|
658A0FD000
|
stack
|
page read and write
|
|
|
|
7FF5A9107000
|
unkown image
|
page readonly
|
|
|
|
7DF510A70000
|
unkown image
|
page readonly
|
|
|
|
26F4000
|
unkown image
|
page readonly
|
|
|
|
501E000
|
unkown
|
page read and write
|
|
|
|
7FF50D939000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
7FF50D944000
|
unkown image
|
page readonly
|
|
|
|
7FF5978DB000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDC2000
|
unkown image
|
page readonly
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
29BB000
|
unkown image
|
page readonly
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5A8C35000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1980CA79000
|
unkown
|
page read and write
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
19E2A88D000
|
unkown
|
page read and write
|
|
|
|
3450000
|
stack
|
page read and write
|
|
|
|
7FF50D95A000
|
unkown image
|
page readonly
|
|
|
|
7FF50D869000
|
unkown image
|
page readonly
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
179FEA85000
|
unkown
|
page read and write
|
|
|
|
3597000
|
heap private
|
page read and write
|
|
|
|
2320DA10000
|
unkown image
|
page readonly
|
|
|
|
7FF502D13000
|
unkown image
|
page readonly
|
|
|
|
2A4C000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page read and write
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
2BFB000
|
unkown image
|
page readonly
|
|
|
|
19E2A650000
|
unkown image
|
page readonly
|
|
|
|
2D20000
|
unkown image
|
page read and write
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
2CD4000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
1980CA84000
|
unkown
|
page read and write
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
52AF000
|
stack
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
7F830000
|
unkown image
|
page readonly
|
|
|
|
264A000
|
unkown image
|
page readonly
|
|
|
|
1B4DC013000
|
unkown
|
page read and write
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
26EF000
|
unkown image
|
page readonly
|
|
|
|
33D2000
|
unkown
|
page read and write
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FF597A11000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
2B7B000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
3440000
|
heap default
|
page read and write
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
7FF502DEA000
|
unkown image
|
page readonly
|
|
|
|
19E2A813000
|
unkown
|
page read and write
|
|
|
|
2B59000
|
unkown image
|
page readonly
|
|
|
|
2A3D000
|
unkown image
|
page readonly
|
|
|
|
2BF5000
|
unkown image
|
page readonly
|
|
|
|
52B0000
|
unkown
|
page read and write
|
|
|
|
19E2AC00000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9252000
|
unkown image
|
page readonly
|
|
|
|
534E000
|
stack
|
page read and write
|
|
|
|
2AD3000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0144000
|
unkown image
|
page readonly
|
|
|
|
179FEA43000
|
unkown
|
page read and write
|
|
|
|
2D94000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
ECE5FFD000
|
stack
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
7FF5A9360000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
CCD000
|
stack
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
2D0F000
|
unkown image
|
page readonly
|
|
|
|
1C99D265000
|
unkown
|
page read and write
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
2BFB000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
1980CA13000
|
unkown
|
page read and write
|
|
|
|
37A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A93B7000
|
unkown image
|
page readonly
|
|
|
|
2B2F000
|
unkown image
|
page readonly
|
|
|
|
AC6C7F000
|
stack
|
page read and write
|
|
|
|
2A9F000
|
unkown image
|
page readonly
|
|
|
|
7FF597AD7000
|
unkown image
|
page readonly
|
|
|
|
ECE5CFF000
|
stack
|
page read and write
|
|
|
|
2EEB000
|
unkown
|
page read and write
|
|
|
|
7DF4EBC90000
|
unkown image
|
page readonly
|
|
|
|
933000
|
unkown
|
page read and write
|
|
|
|
7FF5AF917000
|
unkown image
|
page readonly
|
|
|
|
179FEA29000
|
unkown
|
page read and write
|
|
|
|
179FEA4A000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
2B9C000
|
unkown image
|
page readonly
|
|
|
|
2AAB000
|
unkown image
|
page readonly
|
|
|
|
1B4DC100000
|
unkown
|
page read and write
|
|
|
|
36D0000
|
heap private
|
page read and write
|
|
|
|
2C01000
|
unkown image
|
page readonly
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
7FF57A27C000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD682000
|
unkown image
|
page readonly
|
|
|
|
1980CF90000
|
unkown image
|
page readonly
|
|
|
|
18451658000
|
unkown
|
page read and write
|
|
|
|
980000
|
stack
|
page read and write
|
|
|
|
7FF5A92BC000
|
unkown image
|
page readonly
|
|
|
|
7FF502CF7000
|
unkown image
|
page readonly
|
|
|
|
2A06000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8C78000
|
unkown image
|
page readonly
|
|
|
|
29DF000
|
unkown image
|
page readonly
|
|
|
|
7FF597A73000
|
unkown image
|
page readonly
|
|
|
|
19E2A630000
|
unkown image
|
page read and write
|
|
|
|
327C000
|
unkown
|
page read and write
|
|
|
|
18451B80000
|
unkown image
|
page readonly
|
|
|
|
7FF597ADD000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
7FC70000
|
unkown image
|
page readonly
|
|
|
|
765000
|
heap default
|
page read and write
|
|
|
|
3445000
|
heap default
|
page read and write
|
|
|
|
4E2E000
|
unkown
|
page read and write
|
|
|
|
2A36000
|
unkown image
|
page readonly
|
|
|
|
7FF5AFA21000
|
unkown image
|
page readonly
|
|
|
|
3430000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
18451629000
|
unkown
|
page read and write
|
|
|
|
7FF5A9349000
|
unkown image
|
page readonly
|
|
|
|
2A36000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown image
|
page readonly
|
|
|
|
474E000
|
unkown
|
page read and write
|
|
|
|
2A66000
|
heap private
|
page read and write
|
|
|
|
18451800000
|
unkown image
|
page readonly
|
|
|
|
1B4DC102000
|
unkown
|
page read and write
|
|
|
|
1B4DC000000
|
unkown
|
page read and write
|
|
|
|
19E2A870000
|
unkown
|
page read and write
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
1980E3A0000
|
unkown
|
page read and write
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
68D4000
|
heap private
|
page read and write
|
|
|
|
2320DD13000
|
unkown
|
page read and write
|
|
|
|
3380000
|
unkown
|
page read and write
|
|
|
|
7FF50D932000
|
unkown image
|
page readonly
|
|
|
|
7FF57A2A5000
|
unkown image
|
page readonly
|
|
|
|
29D1000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF997000
|
unkown image
|
page readonly
|
|
|
|
179FEA66000
|
unkown
|
page read and write
|
|
|
|
2DCB000
|
unkown
|
page read and write
|
|
|
|
7FF5E0151000
|
unkown image
|
page readonly
|
|
|
|
4E7F000
|
unkown
|
page read and write
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
3320000
|
heap default
|
page read and write
|
|
|
|
7FF5AF933000
|
unkown image
|
page readonly
|
|
|
|
7FF5E00D7000
|
unkown image
|
page readonly
|
|
|
|
7FF502CD1000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
1B4DC317000
|
unkown
|
page read and write
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
3090000
|
heap default
|
page read and write
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
2E70000
|
unkown image
|
page read and write
|
|
|
|
2EC000
|
unkown
|
page read and write
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
2A09000
|
unkown image
|
page readonly
|
|
|
|
1C99D27E000
|
unkown
|
page read and write
|
|
|
|
2CE6000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
7FF50D8DD000
|
unkown image
|
page readonly
|
|
|
|
7F170000
|
unkown image
|
page readonly
|
|
|
|
19E2A829000
|
unkown
|
page read and write
|
|
|
|
7FC72000
|
unkown image
|
page readonly
|
|
|
|
1980CE00000
|
unkown image
|
page readonly
|
|
|
|
3450000
|
heap default
|
page read and write
|
|
|
|
7FF5A9441000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
1240000
|
unkown image
|
page readonly
|
|
|
|
2960000
|
unkown
|
page read and write
|
|
|
|
1980CA02000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
945000
|
stack
|
page execute and read and write
|
|
|
|
8B0000
|
unkown
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
88F000
|
stack
|
page read and write
|
|
|
|
7DF5A57E0000
|
unkown image
|
page readonly
|
|
|
|
2320DE00000
|
unkown image
|
page readonly
|
|
|
|
1B4DC313000
|
unkown
|
page read and write
|
|
|
|
7DF5B70B2000
|
unkown image
|
page readonly
|
|
|
|
1980C7E0000
|
heap private
|
page read and write
|
|
|
|
2A27000
|
unkown image
|
page readonly
|
|
|
|
1980C7D0000
|
unkown image
|
page read and write
|
|
|
|
7FF5A932F000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
478C000
|
stack
|
page read and write
|
|
|
|
2D9B000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
46F0000
|
unkown
|
page read and write
|
|
|
|
7FFA2000
|
unkown image
|
page readonly
|
|
|
|
7EE000
|
stack
|
page read and write
|
|
|
|
2F30000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8C75000
|
unkown image
|
page readonly
|
|
|
|
7F812000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
12F437B000
|
stack
|
page read and write
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDC0000
|
unkown image
|
page readonly
|
|
|
|
33C6000
|
unkown
|
page read and write
|
|
|
|
36AE000
|
stack
|
page read and write
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
1C99D213000
|
unkown
|
page read and write
|
|
|
|
7FF502DD2000
|
unkown image
|
page readonly
|
|
|
|
2320DC37000
|
unkown
|
page read and write
|
|
|
|
19E2A88B000
|
unkown
|
page read and write
|
|
|
|
184515C0000
|
unkown
|
page read and write
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE80000
|
heap default
|
page read and write
|
|
|
|
7FF50D961000
|
unkown image
|
page readonly
|
|
|
|
7FFA2000
|
unkown image
|
page readonly
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
1C99D6D0000
|
unkown image
|
page readonly
|
|
|
|
29BE000
|
unkown image
|
page readonly
|
|
|
|
37B0000
|
unkown image
|
page readonly
|
|
|
|
7DF588060000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2554000
|
unkown image
|
page readonly
|
|
|
|
19E2A680000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
340000
|
unkown image
|
page readonly
|
|
|
|
2A9F000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3FA000
|
unkown image
|
page readonly
|
|
|
|
179FEA49000
|
unkown
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FF5E0161000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDE0000
|
unkown image
|
page readonly
|
|
|
|
28AA000
|
unkown image
|
page readonly
|
|
|
|
2B5A000
|
unkown image
|
page readonly
|
|
|
|
7FFA2000
|
unkown image
|
page readonly
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
18451A00000
|
unkown image
|
page readonly
|
|
|
|
7FF59792D000
|
unkown image
|
page readonly
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
3310000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown image
|
page readonly
|
|
|
|
33D5000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8BBC000
|
unkown image
|
page readonly
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
2C33000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9441000
|
unkown image
|
page readonly
|
|
|
|
1980CB18000
|
unkown
|
page read and write
|
|
|
|
945000
|
stack
|
page execute and read and write
|
|
|
|
658A27E000
|
stack
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
AC6E7F000
|
stack
|
page read and write
|
|
|
|
28AA000
|
unkown image
|
page readonly
|
|
|
|
2B0E000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF7A6000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
2CBE000
|
unkown image
|
page readonly
|
|
|
|
2320DB60000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
628A27E000
|
stack
|
page read and write
|
|
|
|
32C0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A401000
|
unkown image
|
page readonly
|
|
|
|
179FE910000
|
unkown image
|
page readonly
|
|
|
|
2FB0000
|
unkown image
|
page readonly
|
|
|
|
7EFA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E006F000
|
unkown image
|
page readonly
|
|
|
|
2D17000
|
unkown image
|
page readonly
|
|
|
|
C50000
|
unkown image
|
page readonly
|
|
|
|
AC6F7E000
|
stack
|
page read and write
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
unkown
|
page read and write
|
|
|
|
2B46000
|
unkown image
|
page readonly
|
|
|
|
2B56000
|
unkown image
|
page readonly
|
|
|
|
18451613000
|
unkown
|
page read and write
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
7FF579B96000
|
unkown image
|
page readonly
|
|
|
|
7FF502D7A000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
1980C7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF597A6F000
|
unkown image
|
page readonly
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
7AE000
|
stack
|
page read and write
|
|
|
|
7FF5A913D000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
2A09000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
29E4000
|
unkown image
|
page readonly
|
|
|
|
2536000
|
unkown image
|
page readonly
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
2ACC000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0161000
|
unkown image
|
page readonly
|
|
|
|
7F812000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
2E90000
|
unkown image
|
page readonly
|
|
|
|
1980CB13000
|
unkown
|
page read and write
|
|
|
|
7DF4B4F70000
|
unkown image
|
page readonly
|
|
|
|
543E000
|
stack
|
page read and write
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
29BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF8A5000
|
unkown image
|
page readonly
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A57D2000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9424000
|
unkown image
|
page readonly
|
|
|
|
1240000
|
unkown image
|
page readonly
|
|
|
|
ECE63FF000
|
stack
|
page read and write
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
3894F7E000
|
stack
|
page read and write
|
|
|
|
19E2A84B000
|
unkown
|
page read and write
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
18451440000
|
unkown image
|
page readonly
|
|
|
|
29CE000
|
unkown image
|
page readonly
|
|
|
|
2ABE000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
36D0000
|
unkown image
|
page readonly
|
|
|
|
7EFF0000
|
unkown image
|
page readonly
|
|
|
|
29F6000
|
unkown image
|
page readonly
|
|
|
|
7EFE2000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
7FF5978AE000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
1C99D160000
|
unkown image
|
page readonly
|
|
|
|
179FEA4F000
|
unkown
|
page read and write
|
|
|
|
18451570000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
474D000
|
stack
|
page read and write
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
2AAB000
|
unkown image
|
page readonly
|
|
|
|
7F0E2000
|
unkown image
|
page readonly
|
|
|
|
2ACC000
|
unkown image
|
page readonly
|
|
|
|
179FE960000
|
unkown
|
page read and write
|
|
|
|
2320E190000
|
unkown image
|
page readonly
|
|
|
|
2A36000
|
unkown image
|
page readonly
|
|
|
|
19E2A847000
|
unkown
|
page read and write
|
|
|
|
261F000
|
unkown image
|
page readonly
|
|
|
|
7FF502D27000
|
unkown image
|
page readonly
|
|
|
|
7FF5976C9000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF507000
|
unkown image
|
page readonly
|
|
|
|
2C11000
|
unkown image
|
page readonly
|
|
|
|
1230000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
7FF5E006D000
|
unkown image
|
page readonly
|
|
|
|
2A36000
|
unkown image
|
page readonly
|
|
|
|
251A000
|
unkown image
|
page readonly
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
7FF597882000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF80B000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown image
|
page readonly
|
|
|
|
2B73000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
9F2000
|
unkown
|
page read and write
|
|
|
|
3894B7C000
|
stack
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
3070000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF50D8D7000
|
unkown image
|
page readonly
|
|
|
|
389507C000
|
stack
|
page read and write
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
2A09000
|
unkown image
|
page readonly
|
|
|
|
7DF5B70A0000
|
unkown image
|
page readonly
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
1B4DC123000
|
heap private
|
page read and write
|
|
|
|
7FF5AF8A1000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD690000
|
unkown image
|
page readonly
|
|
|
|
7FF502C7C000
|
unkown image
|
page readonly
|
|
|
|
179FEA60000
|
unkown
|
page read and write
|
|
|
|
7FF597A80000
|
unkown image
|
page readonly
|
|
|
|
7F822000
|
unkown image
|
page readonly
|
|
|
|
7FF59738D000
|
unkown image
|
page readonly
|
|
|
|
54BE000
|
stack
|
page read and write
|
|
|
|
67E000
|
heap default
|
page read and write
|
|
|
|
28FC000
|
unkown image
|
page readonly
|
|
|
|
2C20000
|
unkown image
|
page readonly
|
|
|
|
7FF502E00000
|
unkown image
|
page readonly
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown image
|
page readonly
|
|
|
|
2BAC000
|
unkown image
|
page readonly
|
|
|
|
2A65000
|
unkown image
|
page readonly
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
2B69000
|
unkown image
|
page readonly
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF929000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
19E2B002000
|
unkown
|
page read and write
|
|
|
|
1980CB02000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
7FF597B61000
|
unkown image
|
page readonly
|
|
|
|
7FF5E00DA000
|
unkown image
|
page readonly
|
|
|
|
CBB000
|
heap default
|
page read and write
|
|
|
|
359A000
|
heap private
|
page read and write
|
|
|
|
7FF5A932B000
|
unkown image
|
page readonly
|
|
|
|
6589E7F000
|
stack
|
page read and write
|
|
|
|
2C26000
|
unkown image
|
page readonly
|
|
|
|
7FF502BC1000
|
unkown image
|
page readonly
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
2646000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A57C0000
|
unkown image
|
page readonly
|
|
|
|
2A50000
|
unkown image
|
page readonly
|
|
|
|
1B4DC300000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FF502AC7000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8F93000
|
unkown image
|
page readonly
|
|
|
|
7F710000
|
unkown image
|
page readonly
|
|
|
|
2D0B000
|
unkown image
|
page readonly
|
|
|
|
7EFD2000
|
unkown image
|
page readonly
|
|
|
|
19E2A7A0000
|
unkown
|
page read and write
|
|
|
|
2A55000
|
unkown image
|
page readonly
|
|
|
|
2BE5000
|
unkown image
|
page readonly
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3F5000
|
unkown image
|
page readonly
|
|
|
|
2DBC000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
980000
|
stack
|
page read and write
|
|
|
|
4706000
|
unkown
|
page read and write
|
|
|
|
227ACFE000
|
stack
|
page read and write
|
|
|
|
7DF588070000
|
unkown image
|
page readonly
|
|
|
|
2A0E000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
6589D7E000
|
stack
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
3894A7D000
|
stack
|
page read and write
|
|
|
|
2A23000
|
unkown image
|
page readonly
|
|
|
|
7FF50D94A000
|
unkown image
|
page readonly
|
|
|
|
179FEA41000
|
unkown
|
page read and write
|
|
|
|
2BA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF260000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
2D1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9363000
|
unkown image
|
page readonly
|
|
|
|
801000
|
unkown
|
page read and write
|
|
|
|
179FEA3E000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
7FF5A91F3000
|
unkown image
|
page readonly
|
|
|
|
CBB000
|
heap default
|
page read and write
|
|
|
|
2A4C000
|
unkown image
|
page readonly
|
|
|
|
7FF50D6E6000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page read and write
|
|
|
|
7DF5BD682000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
684F000
|
stack
|
page read and write
|
|
|
|
7FF50D961000
|
unkown image
|
page readonly
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7F352000
|
unkown image
|
page readonly
|
|
|
|
ECE5DFC000
|
stack
|
page read and write
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
24F3000
|
unkown image
|
page readonly
|
|
|
|
46CE000
|
stack
|
page read and write
|
|
|
|
2A06000
|
unkown image
|
page readonly
|
|
|
|
2A0A000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
7FF50D822000
|
unkown image
|
page readonly
|
|
|
|
BD0000
|
unkown image
|
page readonly
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
19E2A84D000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown image
|
page readonly
|
|
|
|
179FEA35000
|
unkown
|
page read and write
|
|
|
|
7DF588070000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
7FF579B9D000
|
unkown image
|
page readonly
|
|
|
|
266F000
|
unkown image
|
page readonly
|
|
|
|
366E000
|
stack
|
page read and write
|
|
|
|
29CE000
|
unkown image
|
page readonly
|
|
|
|
7FF5E00B3000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5C2000
|
unkown image
|
page readonly
|
|
|
|
2C28000
|
unkown image
|
page readonly
|
|
|
|
7F812000
|
unkown image
|
page readonly
|
|
|
|
6589CFF000
|
stack
|
page read and write
|
|
|
|
2F30000
|
unkown image
|
page readonly
|
|
|
|
7FF597AAB000
|
unkown image
|
page readonly
|
|
|
|
8FC000
|
unkown
|
page read and write
|
|
|
|
2C0B000
|
unkown image
|
page readonly
|
|
|
|
2CEA000
|
unkown image
|
page readonly
|
|
|
|
19E2A902000
|
unkown
|
page read and write
|
|
|
|
7FF5DFD30000
|
unkown image
|
page readonly
|
|
|
|
7FF5E008E000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5E0000
|
unkown image
|
page readonly
|
|
|
|
3A60000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5D2000
|
unkown image
|
page readonly
|
|
|
|
2AAB000
|
unkown image
|
page readonly
|
|
|
|
2B6F000
|
unkown image
|
page readonly
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
7DF5A57C2000
|
unkown image
|
page readonly
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
1B4DC028000
|
unkown
|
page read and write
|
|
|
|
35D0000
|
stack
|
page read and write
|
|
|
|
3410000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF943000
|
unkown image
|
page readonly
|
|
|
|
18451E02000
|
unkown
|
page read and write
|
|
|
|
7FF502D0A000
|
unkown image
|
page readonly
|
|
|
|
2D26000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
1980C9D0000
|
unkown
|
page read and write
|
|
|
|
7FF5A922B000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FF597B51000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8BC4000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7F822000
|
unkown image
|
page readonly
|
|
|
|
29BE000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
1980CA00000
|
unkown
|
page read and write
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDD2000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0083000
|
unkown image
|
page readonly
|
|
|
|
7DF510A80000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
2A1B000
|
unkown image
|
page readonly
|
|
|
|
35A0000
|
unkown image
|
page readonly
|
|
|
|
12F457F000
|
stack
|
page read and write
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
1C99D120000
|
unkown image
|
page read and write
|
|
|
|
4F7B000
|
unkown
|
page read and write
|
|
|
|
2FA0000
|
unkown image
|
page readonly
|
|
|
|
7DF588072000
|
unkown image
|
page readonly
|
|
|
|
179FF050000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDC2000
|
unkown image
|
page readonly
|
|
|
|
33A0000
|
heap default
|
page read and write
|
|
|
|
24D7000
|
unkown image
|
page readonly
|
|
|
|
1240000
|
unkown image
|
page readonly
|
|
|
|
1C99D850000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD6A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9435000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8BCE000
|
unkown image
|
page readonly
|
|
|
|
19E2A855000
|
unkown
|
page read and write
|
|
|
|
7F812000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown image
|
page readonly
|
|
|
|
18451440000
|
unkown image
|
page readonly
|
|
|
|
7FF5E00AB000
|
unkown image
|
page readonly
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
12F447B000
|
stack
|
page read and write
|
|
|
|
340000
|
unkown image
|
page readonly
|
|
|
|
7FF50D88E000
|
unkown image
|
page readonly
|
|
|
|
2D8F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8C4D000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7FF597B39000
|
unkown image
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown image
|
page readonly
|
|
|
|
7F820000
|
unkown image
|
page readonly
|
|
|
|
7F820000
|
unkown image
|
page readonly
|
|
|
|
2B86000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF7ED000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
heap private
|
page read and write
|
|
|
|
CBB000
|
heap default
|
page read and write
|
|
|
|
960000
|
stack
|
page read and write
|
|
|
|
31E8000
|
unkown
|
page read and write
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
2D8B000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
2320DC00000
|
unkown
|
page read and write
|
|
|
|
2A1B000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
675000
|
heap default
|
page read and write
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
4708000
|
unkown
|
page read and write
|
|
|
|
2C04000
|
unkown image
|
page readonly
|
|
|
|
28AA000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD6A0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2320DC71000
|
unkown
|
page read and write
|
|
|
|
688E000
|
stack
|
page read and write
|
|
|
|
2320E180000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown image
|
page read and write
|
|
|
|
7FF5A8FA7000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0073000
|
unkown image
|
page readonly
|
|
|
|
3894C7F000
|
stack
|
page read and write
|
|
|
|
227ABFF000
|
stack
|
page read and write
|
|
|
|
4C1E000
|
unkown
|
page read and write
|
|
|
|
2A23000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
9D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A934D000
|
unkown image
|
page readonly
|
|
|
|
7FF5AFA21000
|
unkown image
|
page readonly
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
2D05000
|
unkown image
|
page readonly
|
|
|
|
179FE940000
|
unkown image
|
page readonly
|
|
|
|
36C0000
|
heap private
|
page read and write
|
|
|
|
960000
|
stack
|
page read and write
|
|
|
|
7FF502AE4000
|
unkown image
|
page readonly
|
|
|
|
945000
|
stack
|
page execute and read and write
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A93BD000
|
unkown image
|
page readonly
|
|
|
|
628A177000
|
stack
|
page read and write
|
|
|
|
7FF5A942A000
|
unkown image
|
page readonly
|
|
|
|
7FF5E015A000
|
unkown image
|
page readonly
|
|
|
|
227ADF9000
|
stack
|
page read and write
|
|
|
|
1C99D300000
|
unkown
|
page read and write
|
|
|
|
7FF502B86000
|
unkown image
|
page readonly
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
1C99D228000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
254C000
|
unkown image
|
page readonly
|
|
|
|
179FE8C0000
|
unkown image
|
page read and write
|
|
|
|
36E0000
|
unkown image
|
page readonly
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
7FF502CE3000
|
unkown image
|
page readonly
|
|
|
|
801000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
19E2A900000
|
unkown
|
page read and write
|
|
|
|
7FF50D620000
|
unkown image
|
page readonly
|
|
|
|
179FE8E0000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
3170000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
179FEA2F000
|
unkown
|
page read and write
|
|
|
|
960000
|
stack
|
page read and write
|
|
|
|
2CAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5A939E000
|
unkown image
|
page readonly
|
|
|
|
28B4000
|
unkown image
|
page readonly
|
|
|
|
28B4000
|
unkown image
|
page readonly
|
|
|
|
730000
|
stack
|
page read and write
|
|
|
|
1C99D26A000
|
unkown
|
page read and write
|
|
|
|
1230000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
unkown image
|
page readonly
|
|
|
|
ECE5EFE000
|
stack
|
page read and write
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
179FEA6B000
|
unkown
|
page read and write
|
|
|
|
7FF5A91C6000
|
unkown image
|
page readonly
|
|
|
|
2320DB40000
|
unkown image
|
page readonly
|
|
|
|
7DF40E930000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
7FF502E01000
|
unkown image
|
page readonly
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
7DF419490000
|
unkown image
|
page readonly
|
|
|
|
1980E980000
|
unkown image
|
page write copy
|
|
|
|
2320DA00000
|
heap private
|
page read and write
|
|
|
|
2ACC000
|
unkown image
|
page readonly
|
|
|
|
300000
|
unkown image
|
page read and write
|
|
|
|
7FF5A936E000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
36C000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
heap default
|
page read and write
|
|
|
|
304B000
|
unkown
|
page read and write
|
|
|
|
2C1B000
|
unkown image
|
page readonly
|
|
|
|
7FF502D2E000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
2B3F000
|
unkown image
|
page readonly
|
|
|
|
289C000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
30C5000
|
stack
|
page execute and read and write
|
|
|
|
18451702000
|
unkown
|
page read and write
|
|
|
|
19E2A650000
|
unkown image
|
page readonly
|
|
|
|
7FF5A91BB000
|
unkown image
|
page readonly
|
|
|
|
2AC6000
|
unkown image
|
page readonly
|
|
|
|
7F0A0000
|
unkown image
|
page readonly
|
|
|
|
2BB0000
|
unkown image
|
page readonly
|
|
|
|
915000
|
unkown
|
page read and write
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
1B4DC302000
|
unkown
|
page read and write
|
|
|
|
1C99D1A0000
|
unkown image
|
page readonly
|
|
|
|
801000
|
unkown
|
page read and write
|
|
|
|
7FF50D8B3000
|
unkown image
|
page readonly
|
|
|
|
2665000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
2E80000
|
unkown image
|
page read and write
|
|
|
|
18451C60000
|
unkown
|
page read and write
|
|
|
|
33AA000
|
heap default
|
page read and write
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
2C2C000
|
unkown image
|
page readonly
|
|
|
|
1980CA64000
|
unkown
|
page read and write
|
|
|
|
1C99D302000
|
unkown
|
page read and write
|
|
|
|
2D3C000
|
unkown image
|
page readonly
|
|
|
|
2320DA10000
|
unkown image
|
page readonly
|
|
|
|
7F270000
|
unkown image
|
page readonly
|
|
|
|
6F5000
|
stack
|
page execute and read and write
|
|
|
|
19E2A846000
|
unkown
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2AC6000
|
unkown image
|
page readonly
|
|
|
|
1980C9D0000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
heap default
|
page read and write
|
|
|
|
1980C7F0000
|
unkown image
|
page readonly
|
|
|
|
1980CA5C000
|
unkown
|
page read and write
|
|
|
|
2B65000
|
unkown image
|
page readonly
|
|
|
|
19E2A670000
|
unkown image
|
page readonly
|
|
|
|
2EB4000
|
unkown
|
page read and write
|
|
|
|
19E2A858000
|
unkown
|
page read and write
|
|
|
|
1C99D4D0000
|
unkown image
|
page readonly
|
|
|
|
4DED000
|
unkown
|
page read and write
|
|
|
|
ECE62FF000
|
stack
|
page read and write
|
|
|
|
7FF5A8FBD000
|
unkown image
|
page readonly
|
|
|
|
628A379000
|
stack
|
page read and write
|
|
|
|
7FC82000
|
unkown image
|
page readonly
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
8CC000
|
stack
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
1980CA2A000
|
unkown
|
page read and write
|
|
|
|
CB0000
|
heap default
|
page read and write
|
|
|
|
2AC6000
|
unkown image
|
page readonly
|
|
|
|
2B21000
|
unkown image
|
page readonly
|
|
|
|
32E0000
|
unkown
|
page read and write
|
|
|
|
28AA000
|
unkown image
|
page readonly
|
|
|
|
945000
|
stack
|
page execute and read and write
|
|
|
|
8DA000
|
heap default
|
page read and write
|
|
|
|
1230000
|
unkown image
|
page readonly
|
|
|
|
19E2A859000
|
unkown
|
page read and write
|
|
|
|
7FF57A3D9000
|
unkown image
|
page readonly
|
|
|
|
1980CB00000
|
unkown
|
page read and write
|
|
|
|
7DF588060000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9367000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
2BA4000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE10000
|
unkown image
|
page read and write
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
2C38000
|
unkown image
|
page readonly
|
|
|
|
7FF57A320000
|
unkown image
|
page readonly
|
|
|
|
280000
|
unkown image
|
page read and write
|
|
|
|
328000
|
unkown
|
page read and write
|
|
|
|
7FF597376000
|
unkown image
|
page readonly
|
|
|
|
19E2AD80000
|
unkown image
|
page readonly
|
|
|
|
7FF502BEB000
|
unkown image
|
page readonly
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
10B0000
|
unkown image
|
page readonly
|
|
|
|
1C99D23E000
|
unkown
|
page read and write
|
|
|
|
2B8C000
|
unkown image
|
page readonly
|
|
|
|
7CD000
|
unkown
|
page read and write
|
|
|
|
2A1F000
|
unkown image
|
page readonly
|
|
|
|
2C0B000
|
unkown image
|
page readonly
|
|
|
|
74D000
|
unkown
|
page read and write
|
|
|
|
7FF5AFA04000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page read and write
|
|
|
|
68CE000
|
stack
|
page read and write
|
|
|
|
1980CA40000
|
unkown
|
page read and write
|
|
|
|
2D2B000
|
unkown image
|
page readonly
|
|
|
|
7F820000
|
unkown image
|
page readonly
|
|
|
|
7DF5A57D0000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
94D000
|
unkown
|
page read and write
|
|
|
|
7FF5A8B12000
|
unkown image
|
page readonly
|
|
|
|
7FF50D1DD000
|
unkown image
|
page readonly
|
|
|
|
3894D7F000
|
stack
|
page read and write
|
|
|
|
7F280000
|
unkown image
|
page readonly
|
|
|
|
4ED000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
4F3D000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0057000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
2716000
|
unkown image
|
page readonly
|
|
|
|
2686000
|
unkown image
|
page readonly
|
|
|
|
CBB000
|
heap default
|
page read and write
|
|
|
|
7FC72000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
179FEA63000
|
unkown
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7FF597B4A000
|
unkown image
|
page readonly
|
|
|
|
7DF510A62000
|
unkown image
|
page readonly
|
|
|
|
7FFA2000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF92D000
|
unkown image
|
page readonly
|
|
|
|
7DF510A72000
|
unkown image
|
page readonly
|
|
|
|
945000
|
stack
|
page execute and read and write
|
|
|
|
7FF502D4B000
|
unkown image
|
page readonly
|
|
|
|
7FF50D844000
|
unkown image
|
page readonly
|
|
|
|
2AD3000
|
unkown image
|
page readonly
|
|
|
|
19E2A908000
|
unkown
|
page read and write
|
|
|
|
CBB000
|
heap default
|
page read and write
|
|
|
|
7FF597A87000
|
unkown image
|
page readonly
|
|
|
|
7FF502D5E000
|
unkown image
|
page readonly
|
|
|
|
2A31000
|
unkown image
|
page readonly
|
|
|
|
1980CA4C000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7FF502B9F000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF9DF000
|
unkown image
|
page readonly
|
|
|
|
7FF50D857000
|
unkown image
|
page readonly
|
|
|
|
2320DC02000
|
unkown
|
page read and write
|
|
|
|
1B4DC002000
|
unkown
|
page read and write
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDD2000
|
unkown image
|
page readonly
|
|
|
|
34DD000
|
unkown
|
page read and write
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
32B8000
|
unkown
|
page read and write
|
|
|
|
7FF502AF6000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
1B4DC115000
|
unkown
|
page read and write
|
|
|
|
7FF5AF99D000
|
unkown image
|
page readonly
|
|
|
|
4727000
|
unkown
|
page read and write
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
7FF57A37A000
|
unkown image
|
page readonly
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
6289B5B000
|
unkown
|
page read and write
|
|
|
|
29B9000
|
unkown image
|
page readonly
|
|
|
|
6589A7C000
|
unkown
|
page read and write
|
|
|
|
2A1B000
|
unkown image
|
page readonly
|
|
|
|
2B8D000
|
unkown image
|
page readonly
|
|
|
|
7FC70000
|
unkown image
|
page readonly
|
|
|
|
29BE000
|
unkown image
|
page readonly
|
|
|
|
1C99D257000
|
unkown
|
page read and write
|
|
|
|
7F0A2000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF99A000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
3590000
|
heap private
|
page read and write
|
|
|
|
6589FFE000
|
stack
|
page read and write
|
|
|
|
7DF510A62000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0097000
|
unkown image
|
page readonly
|
|
|
|
227AAF9000
|
stack
|
page read and write
|
|
|
|
530E000
|
stack
|
page read and write
|
|
|
|
7DF5A57D2000
|
unkown image
|
page readonly
|
|
|
|
2CA9000
|
unkown image
|
page readonly
|
|
|
|
53CF000
|
stack
|
page read and write
|
|
|
|
7FF5AF97E000
|
unkown image
|
page readonly
|
|
|
|
18451B90000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9353000
|
unkown image
|
page readonly
|
|
|
|
3050000
|
unkown image
|
page readonly
|
|
|
|
69A0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9257000
|
unkown image
|
page readonly
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
2B9B000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE50000
|
unkown image
|
page readonly
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
29DF000
|
unkown image
|
page readonly
|
|
|
|
179FEA13000
|
unkown
|
page read and write
|
|
|
|
7DF588080000
|
unkown image
|
page readonly
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
7DF5B70B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A90E4000
|
unkown image
|
page readonly
|
|
|
|
2B51000
|
unkown image
|
page readonly
|
|
|
|
2504000
|
unkown image
|
page readonly
|
|
|
|
ECE64FF000
|
stack
|
page read and write
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
2677000
|
unkown image
|
page readonly
|
|
|
|
28F5000
|
unkown image
|
page readonly
|
|
|
|
7DF588072000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
179FEA50000
|
unkown
|
page read and write
|
|
|
|
AC69EF000
|
stack
|
page read and write
|
|
|
|
1980C990000
|
unkown
|
page read and write
|
|
|
|
2B7D000
|
unkown image
|
page readonly
|
|
|
|
2722000
|
unkown image
|
page readonly
|
|
|
|
AB0000
|
heap default
|
page read and write
|
|
|
|
1230000
|
unkown image
|
page readonly
|
|
|
|
47B000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
6589F7D000
|
stack
|
page read and write
|
|
|
|
227A6CD000
|
unkown
|
page read and write
|
|
|
|
1C99D313000
|
unkown
|
page read and write
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
18451420000
|
unkown image
|
page read and write
|
|
|
|
2AD3000
|
unkown image
|
page readonly
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A57E0000
|
unkown image
|
page readonly
|
|
|
|
1B4DC213000
|
unkown
|
page read and write
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
7FF5AF7D1000
|
unkown image
|
page readonly
|
|
|
|
7FF50D873000
|
unkown image
|
page readonly
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
2A1F000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5A9112000
|
unkown image
|
page readonly
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
7FF50D82E000
|
unkown image
|
page readonly
|
|
|
|
2701000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD680000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
179FEA00000
|
unkown
|
page read and write
|
|
|
|
BEA000
|
heap default
|
page read and write
|
|
|
|
2A1F000
|
unkown image
|
page readonly
|
|
|
|
24EA000
|
unkown image
|
page readonly
|
|
|
|
7F822000
|
unkown image
|
page readonly
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
179FEA42000
|
unkown
|
page read and write
|
|
|
|
179FEA48000
|
unkown
|
page read and write
|
|
|
|
7FF57A3EA000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
7FF57A32E000
|
unkown image
|
page readonly
|
|
|
|
179FEB02000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
547F000
|
stack
|
page read and write
|
|
|
|
34F5000
|
unkown
|
page read and write
|
|
|
|
7FF5AF259000
|
unkown image
|
page readonly
|
|
|
|
7FF597856000
|
unkown image
|
page readonly
|
|
|
|
1B4DBE30000
|
unkown image
|
page readonly
|
|
|
|
7F8B0000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
heap default
|
page read and write
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
2B1E000
|
unkown image
|
page readonly
|
|
|
|
28B4000
|
unkown image
|
page readonly
|
|
|
|
2EB0000
|
unkown
|
page read and write
|
|
|
|
7FF502D23000
|
unkown image
|
page readonly
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown
|
page read and write
|
|
|
|
7FF5E00BE000
|
unkown image
|
page readonly
|
|
|
|
33E6000
|
unkown
|
page read and write
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
51B0000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FF5A9337000
|
unkown image
|
page readonly
|
|
|
|
4C5E000
|
unkown
|
page read and write
|
|
|
|
7DF5B70A2000
|
unkown image
|
page readonly
|
|
|
|
65E000
|
unkown
|
page read and write
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
1B4DC00D000
|
unkown
|
page read and write
|
|
|
|
2320DA60000
|
heap default
|
page read and write
|
|
|
|
2FF5000
|
stack
|
page execute and read and write
|
|
|
|
7FF5976C7000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown image
|
page readonly
|
|
|
|
7FF597B5E000
|
unkown image
|
page readonly
|
|
|
|
1980C9D0000
|
unkown
|
page read and write
|
|
|
|
628A07A000
|
stack
|
page read and write
|
|
|
|
6A20000
|
unkown
|
page read and write
|
|
|
|
29D1000
|
unkown image
|
page readonly
|
|
|
|
2DB6000
|
unkown image
|
page readonly
|
|
|
|
1230000
|
unkown image
|
page readonly
|
|
|
|
7F812000
|
unkown image
|
page readonly
|
|
|
|
4F80000
|
unkown image
|
page write copy
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD692000
|
unkown image
|
page readonly
|
|
|
|
7FF502D37000
|
unkown image
|
page readonly
|
|
|
|
340000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8C38000
|
unkown image
|
page readonly
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
7FF5E0132000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BD690000
|
unkown image
|
page readonly
|
|
|
|
2555000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
7EED0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3F1000
|
unkown image
|
page readonly
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
7F9B2000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8AEE000
|
unkown image
|
page readonly
|
|
|
|
2320DC60000
|
unkown
|
page read and write
|
|
|
|
2320DC87000
|
unkown
|
page read and write
|
|
|
|
7F820000
|
unkown image
|
page readonly
|
|
|
|
18451590000
|
unkown
|
page read and write
|
|
|
|
2320DC42000
|
unkown
|
page read and write
|
|
|
|
68D0000
|
heap private
|
page read and write
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
4890000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
48E0000
|
unkown
|
page read and write
|
|
|
|
7EFE2000
|
unkown image
|
page readonly
|
|
|
|
7FF597A6D000
|
unkown image
|
page readonly
|
|
|
|
2BFF000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF957000
|
unkown image
|
page readonly
|
|
|
|
7FF50D8BE000
|
unkown image
|
page readonly
|
|
|
|
34A0000
|
unkown image
|
page readonly
|
|
|
|
7FF579C1A000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5C0000
|
unkown image
|
page readonly
|
|
|
|
19E2A640000
|
heap private
|
page read and write
|
|
|
|
1980CA4B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF82F000
|
unkown image
|
page readonly
|
|
|
|
7FF502591000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
2980000
|
unkown
|
page read and write
|
|
|
|
2320DC6C000
|
unkown
|
page read and write
|
|
|
|
7FF5E0080000
|
unkown image
|
page readonly
|
|
|
|
2A3B000
|
unkown image
|
page readonly
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page read and write
|
|
|
|
465E000
|
stack
|
page read and write
|
|
|
|
179FEA65000
|
unkown
|
page read and write
|
|
|
|
7FF502D20000
|
unkown image
|
page readonly
|
|
|
|
2B1E000
|
unkown image
|
page readonly
|
|
|
|
4733000
|
unkown
|
page read and write
|
|
|
|
267D000
|
unkown image
|
page readonly
|
|
|
|
2C23000
|
unkown image
|
page readonly
|
|
|
|
2D8C000
|
unkown
|
page read and write
|
|
|
|
19E2A780000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
227A7CE000
|
stack
|
page read and write
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
7FF502D0D000
|
unkown image
|
page readonly
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
heap default
|
page read and write
|
|
|
|
7DF5B70C0000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
27CE000
|
unkown image
|
page readonly
|
|
|
|
7DF588062000
|
unkown image
|
page readonly
|
|
|
|
19E2A83C000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown image
|
page readonly
|
|
|
|
271C000
|
unkown image
|
page readonly
|
|
|
|
7FF597ADA000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
7DF4BB550000
|
unkown image
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
6ECB0000
|
unkown image
|
page readonly
|
|
|
|
179FEA56000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
658A1FF000
|
stack
|
page read and write
|
|
|
|
2C38000
|
unkown image
|
page readonly
|
|
|
|
2A04000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown image
|
page readonly
|
|
|
|
33C9000
|
unkown
|
page read and write
|
|
|
|
7F0E0000
|
unkown image
|
page readonly
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF501000
|
unkown image
|
page readonly
|
|
|
|
538D000
|
stack
|
page read and write
|
|
|
|
7F272000
|
unkown image
|
page readonly
|
|
|
|
2CF6000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
2320DC13000
|
unkown
|
page read and write
|
|
|
|
7F360000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page read and write
|
|
|
|
2D3000
|
unkown
|
page read and write
|
|
|
|
7F342000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
BA0000
|
heap default
|
page read and write
|
|
|
|
7FF5976B3000
|
unkown image
|
page readonly
|
|
|
|
9EE000
|
unkown
|
page read and write
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDE0000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
7FF5A91DF000
|
unkown image
|
page readonly
|
|
|
|
179FEED0000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
2B9A000
|
unkown image
|
page readonly
|
|
|
|
2DAB000
|
unkown image
|
page readonly
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
heap default
|
page read and write
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
2A1F000
|
unkown image
|
page readonly
|
|
|
|
2728000
|
unkown image
|
page readonly
|
|
|
|
7DF5B70A2000
|
unkown image
|
page readonly
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
3420000
|
heap private
|
page read and write
|
|
|
|
7F282000
|
unkown image
|
page readonly
|
|
|
|
19E2A913000
|
unkown
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
FA3000
|
unkown image
|
page readonly
|
|
|
|
4F1000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
heap private
|
page read and write
|
|
|
|
2A4A000
|
unkown image
|
page readonly
|
|
|
|
19E2A880000
|
unkown
|
page read and write
|
|
|
|
18451665000
|
unkown
|
page read and write
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
2DC2000
|
unkown image
|
page readonly
|
|
|
|
29F6000
|
unkown image
|
page readonly
|
|
|
|
19E2AA00000
|
unkown image
|
page readonly
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
7FF597B44000
|
unkown image
|
page readonly
|
|
|
|
2320DA40000
|
unkown image
|
page readonly
|
|
|
|
29DF000
|
unkown image
|
page readonly
|
|
|
|
1980CA5E000
|
unkown
|
page read and write
|
|
|
|
7DF5B70C0000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AF940000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5C0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B70A0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A3E4000
|
unkown image
|
page readonly
|
|
|
|
2AA4000
|
unkown image
|
page readonly
|
|
|
|
7FF5E014A000
|
unkown image
|
page readonly
|
|
|
|
179FEA30000
|
unkown
|
page read and write
|
|
|
|
184515C0000
|
unkown
|
page read and write
|
|
|
|
179FEA64000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
7F830000
|
unkown image
|
page readonly
|
|
|
|
6D0000
|
heap default
|
page read and write
|
|
|
|
7FC80000
|
unkown image
|
page readonly
|
|
|
|
1C99D130000
|
heap private
|
page read and write
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
2B4A000
|
unkown image
|
page readonly
|
|
|
|
7FC82000
|
unkown image
|
page readonly
|
|
|
|
6BF000
|
unkown
|
page read and write
|
|
|
|
7FF50D617000
|
unkown image
|
page readonly
|
|
|
|
2E90000
|
unkown image
|
page readonly
|
|
|
|
1980CA5B000
|
unkown
|
page read and write
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
38E0000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown image
|
page readonly
|
|
|
|
19E2A893000
|
unkown
|
page read and write
|
|
|
|
670000
|
heap default
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
7F0F2000
|
unkown image
|
page readonly
|
|
|
|
2B66000
|
unkown image
|
page readonly
|
|
|
|
2A4C000
|
unkown image
|
page readonly
|
|
|
|
1980C840000
|
heap default
|
page read and write
|
|
|
|
557000
|
unkown
|
page read and write
|
|
|
|
7FF5AF875000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8BBE000
|
unkown image
|
page readonly
|
|
|
|
7DF588062000
|
unkown image
|
page readonly
|
|
|
|
33D9000
|
unkown
|
page read and write
|
|
|
|
920000
|
heap default
|
page read and write
|
|
|
|
18451600000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
2DC8000
|
unkown image
|
page readonly
|
|
|
|
184515C0000
|
unkown
|
page read and write
|
|
|
|
7FF597A83000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown image
|
page readonly
|
|
|
|
7F100000
|
unkown image
|
page readonly
|
|
|
|
2EDC000
|
unkown
|
page read and write
|
|
|
|
2320DD02000
|
unkown
|
page read and write
|
|
|
|
980000
|
stack
|
page read and write
|
|
|
|
6EA21000
|
unkown image
|
page execute read
|
|
|
|
6F0000
|
unkown image
|
page readonly
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
7FF597A69000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown image
|
page readonly
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
7FF57A355000
|
unkown image
|
page readonly
|
|
|
|
2A50000
|
unkown image
|
page readonly
|
|
|
|
7DF51B5E0000
|
unkown image
|
page readonly
|
|
|
|
269C000
|
unkown image
|
page readonly
|
|
|
|
3047000
|
unkown
|
page read and write
|
|
|
|
6EA48000
|
unkown image
|
page readonly
|
|
|
|
7DF510A70000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
19E2A84C000
|
unkown
|
page read and write
|
|
|
|
2A23000
|
unkown image
|
page readonly
|
|
|
|
7D3000
|
unkown
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
760000
|
heap default
|
page read and write
|
|
|
|
7F0F0000
|
unkown image
|
page readonly
|
|
|
|
7FF57A19F000
|
unkown image
|
page readonly
|
|
|
|
2CCF000
|
unkown image
|
page readonly
|
|
|
|
7FF57A30F000
|
unkown image
|
page readonly
|
|
|
|
7FF502D53000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDD0000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
12F467E000
|
stack
|
page read and write
|
|
|
|
2AAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AFA11000
|
unkown image
|
page readonly
|
|
|
|
1980CA4C000
|
unkown
|
page read and write
|
|
|
|
6EA7C000
|
unkown image
|
page write copy
|
|
|
|
ECE578B000
|
unkown
|
page read and write
|
|
|
|
7FF597AB2000
|
unkown image
|
page readonly
|
|
|
|
2320DC66000
|
unkown
|
page read and write
|
|
|
|
7FF597B32000
|
unkown image
|
page readonly
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
179FE8D0000
|
heap private
|
page read and write
|
|
|
|
1C99DA02000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
7DF5EDDD0000
|
unkown image
|
page readonly
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
1980C810000
|
unkown image
|
page readonly
|
|
|
|
7FF597A43000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9431000
|
unkown image
|
page readonly
|
|
|
|
31E4000
|
unkown
|
page read and write
|
|
|
|
260E000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
179FEA79000
|
unkown
|
page read and write
|
|
|
|
2D7000
|
unkown
|
page read and write
|
|
|
|
1B4DC036000
|
unkown
|
page read and write
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FE90000
|
unkown image
|
page readonly
|
|
|
|
179FE930000
|
heap default
|
page read and write
|
|
|
|
6EA7D000
|
unkown image
|
page readonly
|
|
|
|
3A50000
|
unkown image
|
page readonly
|
|
|
|
31ED000
|
unkown
|
page read and write
|
|
|
|
179FF202000
|
unkown
|
page read and write
|
|
|
|
7FF50D8B8000
|
unkown image
|
page readonly
|
|
|
|
29F1000
|
unkown image
|
page readonly
|
|
|
|
2AD8000
|
unkown image
|
page readonly
|
|
|
|
6EA20000
|
unkown image
|
page readonly
|
|
|
|
BE0000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
18451460000
|
unkown image
|
page readonly
|
|
|
|
2AB1000
|
unkown image
|
page readonly
|
|
|
|
19E2A852000
|
unkown
|
page read and write
|
|
|
|
2CAE000
|
unkown image
|
page readonly
|
|
|
|
6EA7A000
|
unkown image
|
page read and write
|
|
|
|
7FF5E00DD000
|
unkown image
|
page readonly
|
|
|
|
7F830000
|
unkown image
|
page readonly
|
|
|
|
4570000
|
unkown
|
page read and write
|
|
There are 1616 hidden memdumps, click here to show them.