Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
P5LROPCURK.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
modified
|
 |
|
|
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20211202_163803_584.etl
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll"
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\P5LROPCURK.dll,Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\P5LROPCURK.dll,agrwqhxohbh
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\P5LROPCURK.dll,aoydsyidkopcdbcv
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
|
|
|
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Itfgfdekendecpnp\cibm.oux",wUSgoatRqMcfEKj
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",Control_RunDLL
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",Control_RunDLL
|
|
|
|
C:\Windows\System32\svchost.exe
|
C:\Windows\system32\svchost.exe -k wsappx -p -s AppXSvc
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\P5LROPCURK.dll",#1
|
|
|
|
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
|
|
|
C:\Program Files\Windows Defender\MpCmdRun.exe
|
"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
There are 9 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
|
|
|
https://%s.xboxlive.comedsds
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Transit/Stops/
|
unknown
|
|
|
|
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
|
|
|
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
|
|
|
https://%s.xboxlive.com
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
|
|
|
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
|
|
|
https://dynamic.t
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
|
|
|
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
|
|
|
https://activity.windows.com
|
unknown
|
|
|
|
http://www.bingmapsportal.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
|
|
|
https://%s.dnet.xboxlive.com
|
unknown
|
|
|
|
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
|
unknown
|
|
|
|
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
|
There are 27 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
195.154.133.20
|
unknown
|
France
|
|
|
|
212.237.17.99
|
unknown
|
Italy
|
|
|
|
110.232.117.186
|
unknown
|
Australia
|
|
|
|
104.245.52.73
|
unknown
|
United States
|
|
|
|
138.185.72.26
|
unknown
|
Brazil
|
|
|
|
81.0.236.90
|
unknown
|
Czech Republic
|
|
|
|
45.118.115.99
|
unknown
|
Indonesia
|
|
|
|
103.75.201.2
|
unknown
|
Thailand
|
|
|
|
216.158.226.206
|
unknown
|
United States
|
|
|
|
107.182.225.142
|
unknown
|
United States
|
|
|
|
45.118.135.203
|
unknown
|
Japan
|
|
|
|
50.116.54.215
|
unknown
|
United States
|
|
|
|
51.68.175.8
|
unknown
|
France
|
|
|
|
103.8.26.102
|
unknown
|
Malaysia
|
|
|
|
46.55.222.11
|
unknown
|
Bulgaria
|
|
|
|
41.76.108.46
|
unknown
|
South Africa
|
|
|
|
103.8.26.103
|
unknown
|
Malaysia
|
|
|
|
178.79.147.66
|
unknown
|
United Kingdom
|
|
|
|
212.237.5.209
|
unknown
|
Italy
|
|
|
|
176.104.106.96
|
unknown
|
Serbia
|
|
|
|
207.38.84.195
|
unknown
|
United States
|
|
|
|
212.237.56.116
|
unknown
|
Italy
|
|
|
|
45.142.114.231
|
unknown
|
Germany
|
|
|
|
203.114.109.124
|
unknown
|
Thailand
|
|
|
|
210.57.217.132
|
unknown
|
Indonesia
|
|
|
|
58.227.42.236
|
unknown
|
Korea Republic of
|
|
|
|
185.184.25.237
|
unknown
|
Turkey
|
|
|
|
158.69.222.101
|
unknown
|
Canada
|
|
|
|
104.251.214.46
|
unknown
|
United States
|
|
There are 19 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
|
cval
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Usage
|
MonthID
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{42C48A73-833A-4700-9EBA-66E4F61B10B7}
|
Count
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{42C48A73-833A-4700-9EBA-66E4F61B10B7}
|
From
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{42C48A73-833A-4700-9EBA-66E4F61B10B7}
|
Version
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{91961745-248B-461E-B43A-EAFDBF24E336}
|
Count
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{91961745-248B-461E-B43A-EAFDBF24E336}
|
From
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{91961745-248B-461E-B43A-EAFDBF24E336}
|
Version
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
321A000
|
heap default
|
page read and write
|
|
|
|
3365000
|
heap default
|
page read and write
|
|
|
|
293A000
|
heap default
|
page read and write
|
|
|
|
5C0000
|
stack
|
page execute and read and write
|
|
|
|
3120000
|
stack
|
page execute and read and write
|
|
|
|
2D90000
|
stack
|
page execute and read and write
|
|
|
|
3130000
|
stack
|
page execute and read and write
|
|
|
|
136B000
|
heap default
|
page read and write
|
|
|
|
F80000
|
stack
|
page execute and read and write
|
|
|
|
2FAA000
|
heap default
|
page read and write
|
|
|
|
1700000
|
unkown image
|
page readonly
|
|
|
|
2679000
|
unkown image
|
page readonly
|
|
|
|
6480000
|
unkown
|
page read and write
|
|
|
|
7DF534790000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
26C2000
|
unkown image
|
page readonly
|
|
|
|
27A2B502000
|
unkown
|
page read and write
|
|
|
|
251C000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5078C5000
|
unkown image
|
page readonly
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
7FF5899BD000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
25327835000
|
unkown
|
page read and write
|
|
|
|
7FF4F385A000
|
unkown image
|
page readonly
|
|
|
|
4CFE000
|
stack
|
page read and write
|
|
|
|
887A0FE000
|
stack
|
page read and write
|
|
|
|
267D000
|
unkown image
|
page readonly
|
|
|
|
7F080000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
7FF589679000
|
unkown image
|
page readonly
|
|
|
|
1FBA1460000
|
unkown image
|
page readonly
|
|
|
|
7F1C0000
|
unkown image
|
page readonly
|
|
|
|
7FF507506000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE7F000
|
unkown image
|
page readonly
|
|
|
|
7FF539562000
|
unkown image
|
page readonly
|
|
|
|
2AD9000
|
unkown image
|
page readonly
|
|
|
|
18A62A70000
|
unkown image
|
page readonly
|
|
|
|
7FF539014000
|
unkown image
|
page readonly
|
|
|
|
30A0000
|
unkown image
|
page readonly
|
|
|
|
25327866000
|
unkown
|
page read and write
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
7FF53932E000
|
unkown image
|
page readonly
|
|
|
|
20C45A00000
|
unkown image
|
page readonly
|
|
|
|
2B5C000
|
unkown image
|
page readonly
|
|
|
|
7FF50776D000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0C0000
|
unkown image
|
page readonly
|
|
|
|
6EFB0000
|
unkown image
|
page readonly
|
|
|
|
29A1173A000
|
unkown
|
page read and write
|
|
|
|
7F860000
|
unkown image
|
page readonly
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF539709000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
2EA1000
|
unkown
|
page read and write
|
|
|
|
2AC9000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
4A8B67F000
|
stack
|
page read and write
|
|
|
|
7F1B2000
|
unkown image
|
page readonly
|
|
|
|
7F070000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB60E000
|
unkown image
|
page readonly
|
|
|
|
2E87000
|
unkown
|
page read and write
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
18A627D0000
|
unkown image
|
page readonly
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
7FA50000
|
unkown image
|
page readonly
|
|
|
|
7F080000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
275C000
|
unkown image
|
page readonly
|
|
|
|
2E70000
|
heap default
|
page read and write
|
|
|
|
7FCA2000
|
unkown image
|
page readonly
|
|
|
|
2532784C000
|
unkown
|
page read and write
|
|
|
|
269D000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E00000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown image
|
page readonly
|
|
|
|
252F000
|
unkown image
|
page readonly
|
|
|
|
27A2B200000
|
unkown image
|
page read and write
|
|
|
|
1FBA0E3E000
|
unkown
|
page read and write
|
|
|
|
251C000
|
unkown image
|
page readonly
|
|
|
|
7F142000
|
unkown image
|
page readonly
|
|
|
|
7F890000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF534770000
|
unkown image
|
page readonly
|
|
|
|
26AD000
|
unkown image
|
page readonly
|
|
|
|
1500000
|
unkown image
|
page readonly
|
|
|
|
7FF5071DF000
|
unkown image
|
page readonly
|
|
|
|
7FF51EDE5000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0E0000
|
unkown image
|
page readonly
|
|
|
|
264A000
|
unkown image
|
page readonly
|
|
|
|
7FF5896C7000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2534000
|
unkown image
|
page readonly
|
|
|
|
31B0000
|
unkown image
|
page readonly
|
|
|
|
7F862000
|
unkown image
|
page readonly
|
|
|
|
335E000
|
unkown
|
page read and write
|
|
|
|
1FBA0F13000
|
unkown
|
page read and write
|
|
|
|
1BE000
|
stack
|
page read and write
|
|
|
|
260E000
|
unkown image
|
page readonly
|
|
|
|
2AB7000
|
unkown image
|
page readonly
|
|
|
|
25327847000
|
unkown
|
page read and write
|
|
|
|
333A000
|
heap default
|
page read and write
|
|
|
|
25327E60000
|
unkown
|
page read and write
|
|
|
|
E33EFFB000
|
stack
|
page read and write
|
|
|
|
7DF599782000
|
unkown image
|
page readonly
|
|
|
|
2CB5000
|
unkown image
|
page readonly
|
|
|
|
2CBD000
|
unkown image
|
page readonly
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
29A10EC0000
|
unkown
|
page read and write
|
|
|
|
7FF53971A000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
4CBF000
|
stack
|
page read and write
|
|
|
|
2F8F000
|
stack
|
page read and write
|
|
|
|
9A000
|
unkown
|
page read and write
|
|
|
|
268D000
|
unkown image
|
page readonly
|
|
|
|
25327843000
|
unkown
|
page read and write
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
7FF539796000
|
unkown image
|
page readonly
|
|
|
|
7FF5396C3000
|
unkown image
|
page readonly
|
|
|
|
18A627C0000
|
unkown
|
page read and write
|
|
|
|
7F892000
|
unkown image
|
page readonly
|
|
|
|
2C69000
|
unkown image
|
page readonly
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
2E84000
|
unkown
|
page read and write
|
|
|
|
1FBA0E13000
|
unkown
|
page read and write
|
|
|
|
6050000
|
unkown
|
page read and write
|
|
|
|
BB586FF000
|
stack
|
page read and write
|
|
|
|
26F5000
|
unkown image
|
page readonly
|
|
|
|
2D47000
|
unkown image
|
page readonly
|
|
|
|
7FF583E74000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E68000
|
unkown
|
page read and write
|
|
|
|
7FCD0000
|
unkown image
|
page readonly
|
|
|
|
18A627B0000
|
unkown image
|
page read and write
|
|
|
|
29E4000
|
unkown image
|
page readonly
|
|
|
|
7FF50792B000
|
unkown image
|
page readonly
|
|
|
|
2E95000
|
unkown
|
page read and write
|
|
|
|
7FF583E60000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E76000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown image
|
page readonly
|
|
|
|
25327902000
|
unkown
|
page read and write
|
|
|
|
7DF599782000
|
unkown image
|
page readonly
|
|
|
|
1FBA0D70000
|
unkown image
|
page readonly
|
|
|
|
DE17BFE000
|
stack
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7FF583C48000
|
unkown image
|
page readonly
|
|
|
|
36CA000
|
heap private
|
page read and write
|
|
|
|
2767000
|
unkown image
|
page readonly
|
|
|
|
7F070000
|
unkown image
|
page readonly
|
|
|
|
2980000
|
unkown image
|
page readonly
|
|
|
|
269C000
|
unkown image
|
page readonly
|
|
|
|
E33F2FC000
|
stack
|
page read and write
|
|
|
|
25327842000
|
unkown
|
page read and write
|
|
|
|
2621000
|
unkown image
|
page readonly
|
|
|
|
29A10D90000
|
unkown image
|
page readonly
|
|
|
|
7FF589786000
|
unkown image
|
page readonly
|
|
|
|
27A2BC02000
|
unkown
|
page read and write
|
|
|
|
7DF509212000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page readonly
|
|
|
|
2A89000
|
unkown image
|
page readonly
|
|
|
|
2EF4000
|
unkown
|
page read and write
|
|
|
|
20C45BB0000
|
unkown
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page readonly
|
|
|
|
2A90000
|
unkown image
|
page readonly
|
|
|
|
27A2B3A0000
|
unkown
|
page read and write
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
7FDE0000
|
unkown image
|
page readonly
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
7F132000
|
unkown image
|
page readonly
|
|
|
|
7DF534782000
|
unkown image
|
page readonly
|
|
|
|
1FBA0D70000
|
unkown image
|
page readonly
|
|
|
|
7F062000
|
unkown image
|
page readonly
|
|
|
|
2C3B000
|
unkown
|
page read and write
|
|
|
|
1099000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
7DF534782000
|
unkown image
|
page readonly
|
|
|
|
29A10D40000
|
unkown image
|
page read and write
|
|
|
|
27A2B990000
|
unkown image
|
page readonly
|
|
|
|
27A2B250000
|
unkown image
|
page readonly
|
|
|
|
7FF5396BC000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
26FC000
|
unkown image
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page read and write
|
|
|
|
2AC1000
|
unkown image
|
page readonly
|
|
|
|
7FF50794B000
|
unkown image
|
page readonly
|
|
|
|
20C45B80000
|
unkown image
|
page readonly
|
|
|
|
6044000
|
heap private
|
page read and write
|
|
|
|
7F060000
|
unkown image
|
page readonly
|
|
|
|
7F470000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
26FD000
|
unkown image
|
page readonly
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2B2000
|
unkown image
|
page readonly
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
7FF50795F000
|
unkown image
|
page readonly
|
|
|
|
2A6E000
|
unkown image
|
page readonly
|
|
|
|
7FF58977C000
|
unkown image
|
page readonly
|
|
|
|
29A0000
|
unkown image
|
page read and write
|
|
|
|
2CDD000
|
unkown image
|
page readonly
|
|
|
|
2FEA000
|
unkown
|
page read and write
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0D0000
|
unkown image
|
page readonly
|
|
|
|
7FF583C43000
|
unkown image
|
page readonly
|
|
|
|
7FB90000
|
unkown image
|
page readonly
|
|
|
|
2AC5000
|
unkown image
|
page readonly
|
|
|
|
25327830000
|
unkown
|
page read and write
|
|
|
|
7F062000
|
unkown image
|
page readonly
|
|
|
|
E33EC7B000
|
stack
|
page read and write
|
|
|
|
E33E87B000
|
unkown
|
page read and write
|
|
|
|
2A94000
|
unkown image
|
page readonly
|
|
|
|
20C453D0000
|
heap private
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
300C000
|
heap default
|
page read and write
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
7F470000
|
unkown image
|
page readonly
|
|
|
|
7FCA2000
|
unkown image
|
page readonly
|
|
|
|
7FF583DBD000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
2AB7000
|
unkown image
|
page readonly
|
|
|
|
2E7E000
|
unkown
|
page read and write
|
|
|
|
7FA42000
|
unkown image
|
page readonly
|
|
|
|
7FA52000
|
unkown image
|
page readonly
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
FA5000
|
stack
|
page execute and read and write
|
|
|
|
2AAA000
|
unkown image
|
page readonly
|
|
|
|
2640000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page readonly
|
|
|
|
2A05000
|
unkown image
|
page readonly
|
|
|
|
100000
|
unkown
|
page read and write
|
|
|
|
26A9000
|
unkown image
|
page readonly
|
|
|
|
24E0000
|
unkown image
|
page readonly
|
|
|
|
25327856000
|
unkown
|
page read and write
|
|
|
|
18A62800000
|
unkown image
|
page readonly
|
|
|
|
25327849000
|
unkown
|
page read and write
|
|
|
|
1360000
|
heap default
|
page read and write
|
|
|
|
7FF4F3777000
|
unkown image
|
page readonly
|
|
|
|
2AAC000
|
unkown image
|
page readonly
|
|
|
|
7FF4F3828000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
18A634B0000
|
unkown
|
page read and write
|
|
|
|
2D47000
|
unkown image
|
page readonly
|
|
|
|
26F1000
|
unkown image
|
page readonly
|
|
|
|
29A11700000
|
unkown
|
page read and write
|
|
|
|
7FF4F38D6000
|
unkown image
|
page readonly
|
|
|
|
2B4D000
|
unkown image
|
page readonly
|
|
|
|
2FA0000
|
heap default
|
page read and write
|
|
|
|
CD0000
|
unkown image
|
page readonly
|
|
|
|
3117000
|
heap private
|
page read and write
|
|
|
|
2532787C000
|
unkown
|
page read and write
|
|
|
|
2594000
|
unkown image
|
page readonly
|
|
|
|
4D1E000
|
stack
|
page read and write
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
7F150000
|
unkown image
|
page readonly
|
|
|
|
2534000
|
unkown image
|
page readonly
|
|
|
|
2664000
|
unkown image
|
page readonly
|
|
|
|
253277E0000
|
unkown image
|
page readonly
|
|
|
|
26A0000
|
unkown image
|
page readonly
|
|
|
|
25328002000
|
unkown
|
page read and write
|
|
|
|
7F892000
|
unkown image
|
page readonly
|
|
|
|
32C0000
|
heap default
|
page read and write
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5899BF000
|
unkown image
|
page readonly
|
|
|
|
7FCA2000
|
unkown image
|
page readonly
|
|
|
|
4A8B5F9000
|
stack
|
page read and write
|
|
|
|
7FF5396E8000
|
unkown image
|
page readonly
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
unkown
|
page read and write
|
|
|
|
7F132000
|
unkown image
|
page readonly
|
|
|
|
7DF599790000
|
unkown image
|
page readonly
|
|
|
|
25327844000
|
unkown
|
page read and write
|
|
|
|
7FDE2000
|
unkown image
|
page readonly
|
|
|
|
3500000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE46000
|
unkown image
|
page readonly
|
|
|
|
7FF4F390F000
|
unkown image
|
page readonly
|
|
|
|
7FF583D55000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
46D000
|
unkown
|
page read and write
|
|
|
|
7FF53902D000
|
unkown image
|
page readonly
|
|
|
|
4A8B14B000
|
unkown
|
page read and write
|
|
|
|
2E84000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown image
|
page readonly
|
|
|
|
4A8B4FE000
|
stack
|
page read and write
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
606F000
|
stack
|
page read and write
|
|
|
|
7FF5397CF000
|
unkown image
|
page readonly
|
|
|
|
26DD000
|
unkown image
|
page readonly
|
|
|
|
2721000
|
unkown image
|
page readonly
|
|
|
|
26FC000
|
unkown image
|
page readonly
|
|
|
|
E33EE7E000
|
stack
|
page read and write
|
|
|
|
20C45600000
|
unkown
|
page read and write
|
|
|
|
7FF4F38FB000
|
unkown image
|
page readonly
|
|
|
|
26CD000
|
unkown image
|
page readonly
|
|
|
|
18A63720000
|
unkown
|
page read and write
|
|
|
|
2A3D000
|
unkown image
|
page readonly
|
|
|
|
250D000
|
unkown image
|
page readonly
|
|
|
|
2428000
|
unkown image
|
page readonly
|
|
|
|
7F150000
|
unkown image
|
page readonly
|
|
|
|
27A2B210000
|
heap private
|
page read and write
|
|
|
|
7FF5397B4000
|
unkown image
|
page readonly
|
|
|
|
7FF583E56000
|
unkown image
|
page readonly
|
|
|
|
7DF509220000
|
unkown image
|
page readonly
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2D0000
|
unkown image
|
page readonly
|
|
|
|
3364000
|
unkown
|
page read and write
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
18A629BF000
|
unkown
|
page read and write
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
E70000
|
unkown image
|
page readonly
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
25327864000
|
unkown
|
page read and write
|
|
|
|
BB580FB000
|
stack
|
page read and write
|
|
|
|
269D000
|
unkown image
|
page readonly
|
|
|
|
7FF507895000
|
unkown image
|
page readonly
|
|
|
|
7FF583D9D000
|
unkown image
|
page readonly
|
|
|
|
7DF51D250000
|
unkown image
|
page readonly
|
|
|
|
26F1000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
6C9A08B000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
heap default
|
page read and write
|
|
|
|
2A11000
|
unkown image
|
page readonly
|
|
|
|
2D7A000
|
heap private
|
page read and write
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
25327876000
|
unkown
|
page read and write
|
|
|
|
2DFE000
|
stack
|
page read and write
|
|
|
|
2540000
|
unkown image
|
page readonly
|
|
|
|
7FF5396B2000
|
unkown image
|
page readonly
|
|
|
|
2612000
|
unkown image
|
page readonly
|
|
|
|
334A000
|
heap default
|
page read and write
|
|
|
|
2E71000
|
unkown
|
page read and write
|
|
|
|
7F072000
|
unkown image
|
page readonly
|
|
|
|
2EA4000
|
unkown
|
page read and write
|
|
|
|
29A10D50000
|
heap private
|
page read and write
|
|
|
|
25327700000
|
heap default
|
page read and write
|
|
|
|
7DF41B120000
|
unkown image
|
page readonly
|
|
|
|
E33F1FE000
|
stack
|
page read and write
|
|
|
|
24D7000
|
unkown image
|
page readonly
|
|
|
|
66BE000
|
stack
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
2E7D000
|
unkown
|
page read and write
|
|
|
|
1FBA1450000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0C2000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
46D000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
unkown image
|
page read and write
|
|
|
|
7FF5898CC000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE6B000
|
unkown image
|
page readonly
|
|
|
|
7DF509220000
|
unkown image
|
page readonly
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
2689000
|
unkown image
|
page readonly
|
|
|
|
85A000
|
heap private
|
page read and write
|
|
|
|
7FCA2000
|
unkown image
|
page readonly
|
|
|
|
7FF583D85000
|
unkown image
|
page readonly
|
|
|
|
27A2B220000
|
unkown image
|
page readonly
|
|
|
|
6030000
|
unkown image
|
page readonly
|
|
|
|
2507000
|
unkown image
|
page readonly
|
|
|
|
27A2B43D000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
295B000
|
unkown image
|
page readonly
|
|
|
|
2AA2000
|
unkown
|
page read and write
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F38CF000
|
unkown image
|
page readonly
|
|
|
|
B60000
|
unkown image
|
page read and write
|
|
|
|
6040000
|
heap private
|
page read and write
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
7FF53979B000
|
unkown image
|
page readonly
|
|
|
|
2675000
|
unkown image
|
page readonly
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
2E06000
|
unkown
|
page read and write
|
|
|
|
7FF4F3849000
|
unkown image
|
page readonly
|
|
|
|
2E7D000
|
unkown
|
page read and write
|
|
|
|
2DBE000
|
stack
|
page read and write
|
|
|
|
18A62B45000
|
heap private
|
page read and write
|
|
|
|
2B67000
|
unkown image
|
page readonly
|
|
|
|
2E34000
|
heap private
|
page read and write
|
|
|
|
257C000
|
unkown image
|
page readonly
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
325A000
|
heap default
|
page read and write
|
|
|
|
7FF4F38E0000
|
unkown image
|
page readonly
|
|
|
|
7F132000
|
unkown image
|
page readonly
|
|
|
|
20C45500000
|
unkown image
|
page readonly
|
|
|
|
7F1C2000
|
unkown image
|
page readonly
|
|
|
|
7F072000
|
unkown image
|
page readonly
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
2A1C000
|
unkown image
|
page readonly
|
|
|
|
7F150000
|
unkown image
|
page readonly
|
|
|
|
303E000
|
unkown
|
page read and write
|
|
|
|
260E000
|
unkown image
|
page readonly
|
|
|
|
18A628F0000
|
unkown
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
29AB000
|
unkown
|
page read and write
|
|
|
|
2C10000
|
unkown
|
page read and write
|
|
|
|
7FF53932A000
|
unkown image
|
page readonly
|
|
|
|
2CA5000
|
unkown image
|
page readonly
|
|
|
|
2679000
|
unkown image
|
page readonly
|
|
|
|
267D000
|
unkown image
|
page readonly
|
|
|
|
3351000
|
unkown
|
page read and write
|
|
|
|
600000
|
heap private
|
page read and write
|
|
|
|
4A8B47E000
|
stack
|
page read and write
|
|
|
|
29DC000
|
unkown
|
page read and write
|
|
|
|
7F1B2000
|
unkown image
|
page readonly
|
|
|
|
8D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51ED8D000
|
unkown image
|
page readonly
|
|
|
|
7DF509200000
|
unkown image
|
page readonly
|
|
|
|
7F880000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E29000
|
unkown
|
page read and write
|
|
|
|
253276E0000
|
unkown image
|
page readonly
|
|
|
|
26D5000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
26F4000
|
unkown image
|
page readonly
|
|
|
|
2548000
|
unkown image
|
page readonly
|
|
|
|
7F132000
|
unkown image
|
page readonly
|
|
|
|
1AC000
|
unkown
|
page read and write
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
BB57CDB000
|
unkown
|
page read and write
|
|
|
|
7FF51EE50000
|
unkown image
|
page readonly
|
|
|
|
18A62B40000
|
heap private
|
page read and write
|
|
|
|
1FBA12D0000
|
unkown image
|
page readonly
|
|
|
|
2532787F000
|
unkown
|
page read and write
|
|
|
|
2AFD000
|
unkown image
|
page readonly
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
7F060000
|
unkown image
|
page readonly
|
|
|
|
719000
|
unkown
|
page read and write
|
|
|
|
20C45400000
|
unkown image
|
page readonly
|
|
|
|
7FF5076EA000
|
unkown image
|
page readonly
|
|
|
|
4E0E000
|
stack
|
page read and write
|
|
|
|
BCC000
|
unkown
|
page read and write
|
|
|
|
7FF583E7B000
|
unkown image
|
page readonly
|
|
|
|
2675000
|
unkown image
|
page readonly
|
|
|
|
250D000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
79A000
|
heap default
|
page read and write
|
|
|
|
2660000
|
unkown image
|
page readonly
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
3359000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown image
|
page readonly
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
7FF50786C000
|
unkown image
|
page readonly
|
|
|
|
4E4F000
|
stack
|
page read and write
|
|
|
|
7FF5899A4000
|
unkown image
|
page readonly
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
6C9A7FF000
|
stack
|
page read and write
|
|
|
|
2A4D000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
2E5A000
|
heap default
|
page read and write
|
|
|
|
25327885000
|
unkown
|
page read and write
|
|
|
|
4D8C000
|
stack
|
page read and write
|
|
|
|
274B000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
150000
|
unkown image
|
page readonly
|
|
|
|
2940000
|
unkown image
|
page read and write
|
|
|
|
7FF583E5B000
|
unkown image
|
page readonly
|
|
|
|
2E91000
|
unkown
|
page read and write
|
|
|
|
25327850000
|
unkown
|
page read and write
|
|
|
|
7FF5395F2000
|
unkown image
|
page readonly
|
|
|
|
29A10D80000
|
unkown image
|
page readonly
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE3F000
|
unkown image
|
page readonly
|
|
|
|
7F142000
|
unkown image
|
page readonly
|
|
|
|
3320000
|
unkown image
|
page readonly
|
|
|
|
DE17D7E000
|
stack
|
page read and write
|
|
|
|
7F060000
|
unkown image
|
page readonly
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
7F070000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EB28000
|
unkown image
|
page readonly
|
|
|
|
5E5000
|
stack
|
page execute and read and write
|
|
|
|
3155000
|
stack
|
page execute and read and write
|
|
|
|
2679000
|
unkown image
|
page readonly
|
|
|
|
7FF51EC16000
|
unkown image
|
page readonly
|
|
|
|
2ACC000
|
unkown image
|
page readonly
|
|
|
|
1FBA10D0000
|
unkown image
|
page readonly
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
2AA6000
|
unkown
|
page read and write
|
|
|
|
18A62B50000
|
unkown
|
page read and write
|
|
|
|
7FF4F3875000
|
unkown image
|
page readonly
|
|
|
|
6C9A6FF000
|
stack
|
page read and write
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
7F852000
|
unkown image
|
page readonly
|
|
|
|
3359000
|
unkown
|
page read and write
|
|
|
|
2A72000
|
unkown image
|
page readonly
|
|
|
|
8879B4F000
|
stack
|
page read and write
|
|
|
|
470000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
7DF509202000
|
unkown image
|
page readonly
|
|
|
|
3680000
|
unkown image
|
page readonly
|
|
|
|
7FF539496000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E5E000
|
unkown
|
page read and write
|
|
|
|
2D5D000
|
unkown
|
page read and write
|
|
|
|
5770000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE6E000
|
unkown image
|
page readonly
|
|
|
|
7FF5396A4000
|
unkown image
|
page readonly
|
|
|
|
6080000
|
unkown
|
page read and write
|
|
|
|
7F062000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F38DB000
|
unkown image
|
page readonly
|
|
|
|
7DF599792000
|
unkown image
|
page readonly
|
|
|
|
7F852000
|
unkown image
|
page readonly
|
|
|
|
465000
|
unkown
|
page read and write
|
|
|
|
2532787B000
|
unkown
|
page read and write
|
|
|
|
7FF539788000
|
unkown image
|
page readonly
|
|
|
|
2651000
|
unkown image
|
page readonly
|
|
|
|
29A10DE0000
|
unkown
|
page read and write
|
|
|
|
20C45602000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
2E81000
|
unkown
|
page read and write
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
7FF50793D000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
27A2B458000
|
unkown
|
page read and write
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
7DF509200000
|
unkown image
|
page readonly
|
|
|
|
28AB000
|
unkown image
|
page readonly
|
|
|
|
25327879000
|
unkown
|
page read and write
|
|
|
|
2767000
|
unkown image
|
page readonly
|
|
|
|
2501000
|
unkown image
|
page readonly
|
|
|
|
7F860000
|
unkown image
|
page readonly
|
|
|
|
7FF51EDB9000
|
unkown image
|
page readonly
|
|
|
|
2AA1000
|
unkown image
|
page readonly
|
|
|
|
2DB5000
|
stack
|
page execute and read and write
|
|
|
|
BB588FF000
|
stack
|
page read and write
|
|
|
|
2510000
|
unkown image
|
page readonly
|
|
|
|
7FF589212000
|
unkown image
|
page readonly
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
465000
|
unkown
|
page read and write
|
|
|
|
7FF583D04000
|
unkown image
|
page readonly
|
|
|
|
7FF51EDC3000
|
unkown image
|
page readonly
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
2DA0000
|
unkown image
|
page read and write
|
|
|
|
26A5000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
heap default
|
page read and write
|
|
|
|
24E0000
|
unkown image
|
page readonly
|
|
|
|
3020000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown image
|
page read and write
|
|
|
|
7EF60000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0D2000
|
unkown image
|
page readonly
|
|
|
|
37C0000
|
unkown image
|
page readonly
|
|
|
|
268D000
|
unkown image
|
page readonly
|
|
|
|
26F5000
|
unkown image
|
page readonly
|
|
|
|
18A629B7000
|
unkown
|
page read and write
|
|
|
|
7FF53979E000
|
unkown image
|
page readonly
|
|
|
|
266E000
|
unkown image
|
page readonly
|
|
|
|
477000
|
unkown
|
page read and write
|
|
|
|
269D000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown image
|
page readonly
|
|
|
|
1FBA0D90000
|
unkown image
|
page readonly
|
|
|
|
20C45510000
|
unkown image
|
page readonly
|
|
|
|
25327C00000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DF534770000
|
unkown image
|
page readonly
|
|
|
|
4A8B1CF000
|
stack
|
page read and write
|
|
|
|
37C0000
|
unkown image
|
page readonly
|
|
|
|
335D000
|
unkown
|
page read and write
|
|
|
|
7F462000
|
unkown image
|
page readonly
|
|
|
|
471000
|
unkown
|
page read and write
|
|
|
|
2AF4000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
7F882000
|
unkown image
|
page readonly
|
|
|
|
2640000
|
unkown image
|
page readonly
|
|
|
|
26C5000
|
unkown image
|
page readonly
|
|
|
|
7DF51D270000
|
unkown image
|
page readonly
|
|
|
|
7F862000
|
unkown image
|
page readonly
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
3420000
|
unkown image
|
page readonly
|
|
|
|
2630000
|
unkown image
|
page readonly
|
|
|
|
7FF507531000
|
unkown image
|
page readonly
|
|
|
|
27A2B413000
|
unkown
|
page read and write
|
|
|
|
7FF5899AE000
|
unkown image
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page read and write
|
|
|
|
2532787D000
|
unkown
|
page read and write
|
|
|
|
3367000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5898F5000
|
unkown image
|
page readonly
|
|
|
|
7FF4FB60E000
|
unkown image
|
page readonly
|
|
|
|
7FF51ED87000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
26BB000
|
unkown image
|
page readonly
|
|
|
|
29A10EDE000
|
unkown
|
page read and write
|
|
|
|
7F8A0000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown
|
page read and write
|
|
|
|
323B000
|
unkown
|
page read and write
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
28E4000
|
unkown image
|
page readonly
|
|
|
|
6070000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown image
|
page readonly
|
|
|
|
2671000
|
unkown image
|
page readonly
|
|
|
|
2B20000
|
unkown image
|
page readonly
|
|
|
|
150000
|
unkown image
|
page readonly
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
2E95000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown image
|
page readonly
|
|
|
|
7FF5396C7000
|
unkown image
|
page readonly
|
|
|
|
2C51000
|
unkown image
|
page readonly
|
|
|
|
BB585FF000
|
stack
|
page read and write
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
7FF507899000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
8E0000
|
unkown image
|
page readonly
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
29D9000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5899BB000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE4B000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
26C9000
|
unkown image
|
page readonly
|
|
|
|
BB582FD000
|
stack
|
page read and write
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
7FF4F38C8000
|
unkown image
|
page readonly
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
7FF51ED77000
|
unkown image
|
page readonly
|
|
|
|
2661000
|
unkown image
|
page readonly
|
|
|
|
25327863000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
2980000
|
unkown image
|
page readonly
|
|
|
|
6700000
|
unkown
|
page read and write
|
|
|
|
7FF51EDAD000
|
unkown image
|
page readonly
|
|
|
|
268B000
|
unkown image
|
page readonly
|
|
|
|
3210000
|
heap default
|
page read and write
|
|
|
|
2690000
|
unkown image
|
page readonly
|
|
|
|
7DF51D262000
|
unkown image
|
page readonly
|
|
|
|
24FB000
|
unkown image
|
page readonly
|
|
|
|
2A0B000
|
unkown image
|
page readonly
|
|
|
|
7FF5394A8000
|
unkown image
|
page readonly
|
|
|
|
2E0A000
|
unkown
|
page read and write
|
|
|
|
7FF539735000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
25327848000
|
unkown
|
page read and write
|
|
|
|
1039000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
1FBA1602000
|
unkown
|
page read and write
|
|
|
|
7FF507944000
|
unkown image
|
page readonly
|
|
|
|
7FF51EDB5000
|
unkown image
|
page readonly
|
|
|
|
29A10F02000
|
unkown
|
page read and write
|
|
|
|
36D0000
|
unkown image
|
page readonly
|
|
|
|
27A2B270000
|
heap default
|
page read and write
|
|
|
|
2CB9000
|
unkown image
|
page readonly
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
2686000
|
unkown image
|
page readonly
|
|
|
|
27A2B350000
|
unkown image
|
page readonly
|
|
|
|
2AA0000
|
unkown image
|
page readonly
|
|
|
|
26B5000
|
unkown image
|
page readonly
|
|
|
|
4E8D000
|
stack
|
page read and write
|
|
|
|
335D000
|
unkown
|
page read and write
|
|
|
|
2D9B000
|
unkown
|
page read and write
|
|
|
|
7FCA2000
|
unkown image
|
page readonly
|
|
|
|
303D000
|
unkown
|
page read and write
|
|
|
|
27A2B3A0000
|
unkown
|
page read and write
|
|
|
|
7F350000
|
unkown image
|
page readonly
|
|
|
|
6C9A5FE000
|
stack
|
page read and write
|
|
|
|
20C4563D000
|
unkown
|
page read and write
|
|
|
|
18A627D0000
|
unkown image
|
page readonly
|
|
|
|
7FF583657000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
18A62996000
|
heap default
|
page read and write
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
7FDD2000
|
unkown image
|
page readonly
|
|
|
|
7F780000
|
unkown image
|
page readonly
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
7FF4F383D000
|
unkown image
|
page readonly
|
|
|
|
7F1C0000
|
unkown image
|
page readonly
|
|
|
|
4DCD000
|
stack
|
page read and write
|
|
|
|
44A000
|
heap default
|
page read and write
|
|
|
|
7DF51D250000
|
unkown image
|
page readonly
|
|
|
|
7FF589894000
|
unkown image
|
page readonly
|
|
|
|
7FF5898F9000
|
unkown image
|
page readonly
|
|
|
|
18A62D60000
|
unkown image
|
page readonly
|
|
|
|
3040000
|
heap default
|
page read and write
|
|
|
|
667E000
|
stack
|
page read and write
|
|
|
|
7FF4F35B5000
|
unkown image
|
page readonly
|
|
|
|
2767000
|
unkown image
|
page readonly
|
|
|
|
2C95000
|
unkown image
|
page readonly
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
7FF583C2B000
|
unkown image
|
page readonly
|
|
|
|
20C45702000
|
unkown
|
page read and write
|
|
|
|
2B4B000
|
unkown image
|
page readonly
|
|
|
|
27A2B220000
|
unkown image
|
page readonly
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
27A2B980000
|
unkown image
|
page readonly
|
|
|
|
8879ACC000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
stack
|
page read and write
|
|
|
|
29A110D0000
|
unkown image
|
page readonly
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
2640000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
unkown image
|
page readonly
|
|
|
|
7FF4F38FE000
|
unkown image
|
page readonly
|
|
|
|
2630000
|
unkown image
|
page readonly
|
|
|
|
26F1000
|
unkown image
|
page readonly
|
|
|
|
7DF534790000
|
unkown image
|
page readonly
|
|
|
|
25327880000
|
unkown
|
page read and write
|
|
|
|
7FF51EE64000
|
unkown image
|
page readonly
|
|
|
|
7FDE0000
|
unkown image
|
page readonly
|
|
|
|
2CA1000
|
unkown image
|
page readonly
|
|
|
|
46D000
|
unkown
|
page read and write
|
|
|
|
1FBA0DF0000
|
unkown
|
page read and write
|
|
|
|
7FF51EC1D000
|
unkown image
|
page readonly
|
|
|
|
7FF589986000
|
unkown image
|
page readonly
|
|
|
|
2B55000
|
unkown image
|
page readonly
|
|
|
|
26F5000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
7DF51D252000
|
unkown image
|
page readonly
|
|
|
|
2A2D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F3807000
|
unkown image
|
page readonly
|
|
|
|
7FF4F38F4000
|
unkown image
|
page readonly
|
|
|
|
2D3C000
|
unkown image
|
page readonly
|
|
|
|
7DF5997A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE7D000
|
unkown image
|
page readonly
|
|
|
|
2EA0000
|
unkown image
|
page readonly
|
|
|
|
7F150000
|
unkown image
|
page readonly
|
|
|
|
18A63780000
|
unkown
|
page read and write
|
|
|
|
7FF5898AC000
|
unkown image
|
page readonly
|
|
|
|
46D000
|
unkown
|
page read and write
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
7FF4F390B000
|
unkown image
|
page readonly
|
|
|
|
2E60000
|
unkown
|
page read and write
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
7FF5397AD000
|
unkown image
|
page readonly
|
|
|
|
7FF58975D000
|
unkown image
|
page readonly
|
|
|
|
7F130000
|
unkown image
|
page readonly
|
|
|
|
2532784D000
|
unkown
|
page read and write
|
|
|
|
E33EF7C000
|
stack
|
page read and write
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5397CD000
|
unkown image
|
page readonly
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
2937000
|
unkown image
|
page readonly
|
|
|
|
3110000
|
heap private
|
page read and write
|
|
|
|
2E0D000
|
stack
|
page read and write
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
29A10ECF000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown
|
page read and write
|
|
|
|
2532783E000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown image
|
page readonly
|
|
|
|
27A2B429000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
heap default
|
page read and write
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE38000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
36C0000
|
heap private
|
page read and write
|
|
|
|
580000
|
heap default
|
page read and write
|
|
|
|
25327877000
|
unkown
|
page read and write
|
|
|
|
1FBA0D60000
|
heap private
|
page read and write
|
|
|
|
264A000
|
unkown image
|
page readonly
|
|
|
|
46E000
|
unkown
|
page read and write
|
|
|
|
266C000
|
unkown image
|
page readonly
|
|
|
|
57E000
|
stack
|
page read and write
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
2930000
|
heap default
|
page read and write
|
|
|
|
7F850000
|
unkown image
|
page readonly
|
|
|
|
8F0000
|
heap private
|
page read and write
|
|
|
|
29D6000
|
unkown image
|
page readonly
|
|
|
|
2B5C000
|
unkown image
|
page readonly
|
|
|
|
2691000
|
unkown image
|
page readonly
|
|
|
|
7FF5896BD000
|
unkown image
|
page readonly
|
|
|
|
7F890000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
307B000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
649E000
|
stack
|
page read and write
|
|
|
|
7F1C2000
|
unkown image
|
page readonly
|
|
|
|
3690000
|
unkown
|
page read and write
|
|
|
|
29A10D60000
|
unkown image
|
page readonly
|
|
|
|
20C455F0000
|
unkown
|
page read and write
|
|
|
|
260E000
|
unkown image
|
page readonly
|
|
|
|
252B000
|
unkown image
|
page readonly
|
|
|
|
2669000
|
unkown image
|
page readonly
|
|
|
|
7FF583C2D000
|
unkown image
|
page readonly
|
|
|
|
32A0000
|
unkown image
|
page readonly
|
|
|
|
2665000
|
unkown image
|
page readonly
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
7F852000
|
unkown image
|
page readonly
|
|
|
|
18A63440000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
7FF539644000
|
unkown image
|
page readonly
|
|
|
|
2555000
|
unkown image
|
page readonly
|
|
|
|
7FF58999D000
|
unkown image
|
page readonly
|
|
|
|
7F850000
|
unkown image
|
page readonly
|
|
|
|
3145000
|
stack
|
page execute and read and write
|
|
|
|
DE17FFD000
|
stack
|
page read and write
|
|
|
|
253276B0000
|
unkown image
|
page readonly
|
|
|
|
3440000
|
unkown image
|
page readonly
|
|
|
|
7FF58364A000
|
unkown image
|
page readonly
|
|
|
|
255C000
|
unkown image
|
page readonly
|
|
|
|
29FA000
|
unkown image
|
page readonly
|
|
|
|
26CC000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
4820000
|
unkown
|
page read and write
|
|
|
|
20C45C15000
|
unkown
|
page read and write
|
|
|
|
7DF51D260000
|
unkown image
|
page readonly
|
|
|
|
7FA40000
|
unkown image
|
page readonly
|
|
|
|
2659000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
29A11602000
|
unkown
|
page read and write
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
7DF599790000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2C0000
|
unkown image
|
page readonly
|
|
|
|
2612000
|
unkown image
|
page readonly
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
2BB4000
|
unkown
|
page read and write
|
|
|
|
7FF5071E6000
|
unkown image
|
page readonly
|
|
|
|
2E78000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown image
|
page readonly
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
CCB000
|
unkown
|
page read and write
|
|
|
|
29A10E71000
|
unkown
|
page read and write
|
|
|
|
7FA60000
|
unkown image
|
page readonly
|
|
|
|
7F940000
|
unkown image
|
page readonly
|
|
|
|
7F860000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
18A63450000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
heap private
|
page read and write
|
|
|
|
2534000
|
unkown image
|
page readonly
|
|
|
|
267D000
|
unkown image
|
page readonly
|
|
|
|
25327829000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page read and write
|
|
|
|
7DF534772000
|
unkown image
|
page readonly
|
|
|
|
20C45629000
|
unkown
|
page read and write
|
|
|
|
20C45BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5898B7000
|
unkown image
|
page readonly
|
|
|
|
2661000
|
unkown image
|
page readonly
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5071A6000
|
unkown image
|
page readonly
|
|
|
|
4B80000
|
unkown image
|
page readonly
|
|
|
|
7FF583D33000
|
unkown image
|
page readonly
|
|
|
|
7FF51EDCA000
|
unkown image
|
page readonly
|
|
|
|
26D9000
|
unkown image
|
page readonly
|
|
|
|
29A10E29000
|
unkown
|
page read and write
|
|
|
|
2695000
|
unkown image
|
page readonly
|
|
|
|
3016000
|
heap default
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
7FF589925000
|
unkown image
|
page readonly
|
|
|
|
3340000
|
heap default
|
page read and write
|
|
|
|
2C61000
|
unkown image
|
page readonly
|
|
|
|
24D7000
|
unkown image
|
page readonly
|
|
|
|
25327841000
|
unkown
|
page read and write
|
|
|
|
7FF539705000
|
unkown image
|
page readonly
|
|
|
|
7FF5396DC000
|
unkown image
|
page readonly
|
|
|
|
887A1FE000
|
stack
|
page read and write
|
|
|
|
DE1774C000
|
unkown
|
page read and write
|
|
|
|
6560000
|
unkown image
|
page readonly
|
|
|
|
2537000
|
unkown image
|
page readonly
|
|
|
|
2AD5000
|
unkown image
|
page readonly
|
|
|
|
7FF5898D8000
|
unkown image
|
page readonly
|
|
|
|
2A44000
|
unkown image
|
page readonly
|
|
|
|
7FF58990A000
|
unkown image
|
page readonly
|
|
|
|
7FF583A3F000
|
unkown image
|
page readonly
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
1FBA0D50000
|
unkown image
|
page read and write
|
|
|
|
7FF58964A000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E02000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown image
|
page readonly
|
|
|
|
7FF5395E6000
|
unkown image
|
page readonly
|
|
|
|
8879EFD000
|
stack
|
page read and write
|
|
|
|
7DF54F0D0000
|
unkown image
|
page readonly
|
|
|
|
2D77000
|
heap private
|
page read and write
|
|
|
|
18A629C1000
|
unkown
|
page read and write
|
|
|
|
BB581FE000
|
stack
|
page read and write
|
|
|
|
BB587FF000
|
stack
|
page read and write
|
|
|
|
25327846000
|
unkown
|
page read and write
|
|
|
|
7DF509210000
|
unkown image
|
page readonly
|
|
|
|
7FF4F390F000
|
unkown image
|
page readonly
|
|
|
|
66F3000
|
heap private
|
page read and write
|
|
|
|
2994000
|
unkown image
|
page readonly
|
|
|
|
267D000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
2B17000
|
unkown image
|
page readonly
|
|
|
|
29A10F13000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
1880000
|
unkown image
|
page readonly
|
|
|
|
3240000
|
unkown image
|
page readonly
|
|
|
|
2C70000
|
unkown image
|
page readonly
|
|
|
|
2699000
|
unkown image
|
page readonly
|
|
|
|
14F0000
|
heap private
|
page read and write
|
|
|
|
7DF51D262000
|
unkown image
|
page readonly
|
|
|
|
7FF583E7E000
|
unkown image
|
page readonly
|
|
|
|
7F060000
|
unkown image
|
page readonly
|
|
|
|
7FF5397BB000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5898ED000
|
unkown image
|
page readonly
|
|
|
|
29A10DB0000
|
heap default
|
page read and write
|
|
|
|
18A63710000
|
unkown
|
page readonly
|
|
|
|
2C66000
|
unkown image
|
page readonly
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
7FF4F3845000
|
unkown image
|
page readonly
|
|
|
|
2661000
|
unkown image
|
page readonly
|
|
|
|
7FF4F35C3000
|
unkown image
|
page readonly
|
|
|
|
7FF583BB5000
|
unkown image
|
page readonly
|
|
|
|
7FF583DDA000
|
unkown image
|
page readonly
|
|
|
|
3640000
|
unkown image
|
page readonly
|
|
|
|
2E9D000
|
unkown
|
page read and write
|
|
|
|
7FCB0000
|
unkown image
|
page readonly
|
|
|
|
7F072000
|
unkown image
|
page readonly
|
|
|
|
29A10D60000
|
unkown image
|
page readonly
|
|
|
|
2A15000
|
unkown image
|
page readonly
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
18A62978000
|
heap default
|
page read and write
|
|
|
|
7DF59F2D0000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2B0000
|
unkown image
|
page readonly
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
18A62930000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF58364E000
|
unkown image
|
page readonly
|
|
|
|
2E7A000
|
unkown
|
page read and write
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
20C45C02000
|
unkown
|
page read and write
|
|
|
|
2CCD000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
7DF509210000
|
unkown image
|
page readonly
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
26ED000
|
unkown image
|
page readonly
|
|
|
|
2920000
|
unkown image
|
page readonly
|
|
|
|
271B000
|
unkown image
|
page readonly
|
|
|
|
7FF5396D7000
|
unkown image
|
page readonly
|
|
|
|
2D35000
|
unkown image
|
page readonly
|
|
|
|
E60000
|
unkown
|
page read and write
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
253276D0000
|
unkown image
|
page readonly
|
|
|
|
18A629BF000
|
unkown
|
page read and write
|
|
|
|
20C45410000
|
unkown image
|
page readonly
|
|
|
|
2675000
|
unkown image
|
page readonly
|
|
|
|
3330000
|
heap default
|
page read and write
|
|
|
|
20C45636000
|
unkown
|
page read and write
|
|
|
|
27A2B3A0000
|
unkown
|
page read and write
|
|
|
|
18A634C0000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
2C3D000
|
unkown image
|
page readonly
|
|
|
|
7FDD0000
|
unkown image
|
page readonly
|
|
|
|
3361000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
1FE000
|
stack
|
page read and write
|
|
|
|
7FF583D87000
|
unkown image
|
page readonly
|
|
|
|
7F860000
|
unkown image
|
page readonly
|
|
|
|
82E000
|
stack
|
page read and write
|
|
|
|
DE17C7D000
|
stack
|
page read and write
|
|
|
|
7FF589903000
|
unkown image
|
page readonly
|
|
|
|
2D47000
|
unkown image
|
page readonly
|
|
|
|
29B0000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE5D000
|
unkown image
|
page readonly
|
|
|
|
640000
|
heap default
|
page read and write
|
|
|
|
7DF54F0D2000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
heap default
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
6ED70000
|
unkown image
|
page readonly
|
|
|
|
2CA0000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2C0000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2B2000
|
unkown image
|
page readonly
|
|
|
|
7FA42000
|
unkown image
|
page readonly
|
|
|
|
20C45613000
|
unkown
|
page read and write
|
|
|
|
2B41000
|
unkown image
|
page readonly
|
|
|
|
7FF5071F9000
|
unkown image
|
page readonly
|
|
|
|
50B000
|
unkown
|
page read and write
|
|
|
|
26F5000
|
unkown image
|
page readonly
|
|
|
|
2669000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF507789000
|
unkown image
|
page readonly
|
|
|
|
2B33000
|
unkown
|
page read and write
|
|
|
|
7FF5898C8000
|
unkown image
|
page readonly
|
|
|
|
18A62970000
|
heap default
|
page read and write
|
|
|
|
4A8B6F9000
|
stack
|
page read and write
|
|
|
|
4D40000
|
heap private
|
page read and write
|
|
|
|
8879FFE000
|
stack
|
page read and write
|
|
|
|
2C4E000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
heap private
|
page read and write
|
|
|
|
7FF5397CB000
|
unkown image
|
page readonly
|
|
|
|
7DF51D270000
|
unkown image
|
page readonly
|
|
|
|
7FC92000
|
unkown image
|
page readonly
|
|
|
|
2E9D000
|
unkown
|
page read and write
|
|
|
|
20C4561F000
|
unkown
|
page read and write
|
|
|
|
7FF51ED63000
|
unkown image
|
page readonly
|
|
|
|
27A2BA60000
|
unkown
|
page read and write
|
|
|
|
25327855000
|
unkown
|
page read and write
|
|
|
|
18A62F60000
|
unkown image
|
page readonly
|
|
|
|
2D2B000
|
unkown image
|
page readonly
|
|
|
|
26AA000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
7FF51ED40000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
6C9A10F000
|
stack
|
page read and write
|
|
|
|
BB589FF000
|
stack
|
page read and write
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
7F070000
|
unkown image
|
page readonly
|
|
|
|
7FA40000
|
unkown image
|
page readonly
|
|
|
|
2940000
|
unkown image
|
page readonly
|
|
|
|
36B0000
|
unkown image
|
page readonly
|
|
|
|
7F060000
|
unkown image
|
page readonly
|
|
|
|
25327861000
|
unkown
|
page read and write
|
|
|
|
2681000
|
unkown image
|
page readonly
|
|
|
|
2A25000
|
unkown image
|
page readonly
|
|
|
|
261B000
|
unkown image
|
page readonly
|
|
|
|
7F862000
|
unkown image
|
page readonly
|
|
|
|
2890000
|
unkown image
|
page readonly
|
|
|
|
7FF539713000
|
unkown image
|
page readonly
|
|
|
|
29A11550000
|
unkown image
|
page write copy
|
|
|
|
2D47000
|
unkown image
|
page readonly
|
|
|
|
590000
|
heap private
|
page read and write
|
|
|
|
2E55000
|
heap default
|
page read and write
|
|
|
|
850000
|
heap private
|
page read and write
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
24FB000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page readonly
|
|
|
|
7F070000
|
unkown image
|
page readonly
|
|
|
|
331E000
|
stack
|
page read and write
|
|
|
|
7F8A0000
|
unkown image
|
page readonly
|
|
|
|
461000
|
unkown
|
page read and write
|
|
|
|
29A10E41000
|
unkown
|
page read and write
|
|
|
|
7FF53927F000
|
unkown image
|
page readonly
|
|
|
|
7FDE2000
|
unkown image
|
page readonly
|
|
|
|
24E0000
|
unkown image
|
page readonly
|
|
|
|
2F40000
|
heap private
|
page read and write
|
|
|
|
7FF5396FD000
|
unkown image
|
page readonly
|
|
|
|
A21000
|
unkown image
|
page readonly
|
|
|
|
7DF4070D0000
|
unkown image
|
page readonly
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
7FF583E4F000
|
unkown image
|
page readonly
|
|
|
|
7DF44CF90000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
2532784A000
|
unkown
|
page read and write
|
|
|
|
7FF5899BF000
|
unkown image
|
page readonly
|
|
|
|
2679000
|
unkown image
|
page readonly
|
|
|
|
25327860000
|
unkown
|
page read and write
|
|
|
|
2B51000
|
unkown image
|
page readonly
|
|
|
|
7FF589752000
|
unkown image
|
page readonly
|
|
|
|
2CF0000
|
unkown image
|
page read and write
|
|
|
|
253276B0000
|
unkown image
|
page readonly
|
|
|
|
8F4000
|
heap private
|
page read and write
|
|
|
|
2C38000
|
unkown
|
page read and write
|
|
|
|
4A8B57C000
|
stack
|
page read and write
|
|
|
|
7FF51EB78000
|
unkown image
|
page readonly
|
|
|
|
4ECC000
|
stack
|
page read and write
|
|
|
|
7FF5071AE000
|
unkown image
|
page readonly
|
|
|
|
7F080000
|
unkown image
|
page readonly
|
|
|
|
29A10E00000
|
unkown
|
page read and write
|
|
|
|
18A63730000
|
unkown
|
page read and write
|
|
|
|
268D000
|
unkown image
|
page readonly
|
|
|
|
3100000
|
unkown image
|
page readonly
|
|
|
|
3640000
|
unkown image
|
page readonly
|
|
|
|
2E9D000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
7FF583DC9000
|
unkown image
|
page readonly
|
|
|
|
1EB000
|
unkown
|
page read and write
|
|
|
|
272C000
|
unkown image
|
page readonly
|
|
|
|
24D7000
|
unkown image
|
page readonly
|
|
|
|
260E000
|
unkown image
|
page readonly
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
7DF59F2B0000
|
unkown image
|
page readonly
|
|
|
|
3024000
|
unkown
|
page read and write
|
|
|
|
4C7E000
|
stack
|
page read and write
|
|
|
|
7F862000
|
unkown image
|
page readonly
|
|
|
|
29BE000
|
unkown image
|
page readonly
|
|
|
|
26FC000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
E33ECFE000
|
stack
|
page read and write
|
|
|
|
7FF4F36AD000
|
unkown image
|
page readonly
|
|
|
|
2C7B000
|
unkown
|
page read and write
|
|
|
|
29A112D0000
|
unkown image
|
page readonly
|
|
|
|
335D000
|
unkown
|
page read and write
|
|
|
|
20C453E0000
|
unkown image
|
page readonly
|
|
|
|
2501000
|
unkown image
|
page readonly
|
|
|
|
2C9B000
|
unkown image
|
page readonly
|
|
|
|
2A19000
|
unkown image
|
page readonly
|
|
|
|
2665000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2E9D000
|
unkown
|
page read and write
|
|
|
|
7F132000
|
unkown image
|
page readonly
|
|
|
|
2685000
|
unkown image
|
page readonly
|
|
|
|
3359000
|
unkown
|
page read and write
|
|
|
|
7FF50791F000
|
unkown image
|
page readonly
|
|
|
|
29A10E13000
|
unkown
|
page read and write
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
2E7A000
|
heap default
|
page read and write
|
|
|
|
2C8A000
|
unkown image
|
page readonly
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7F6E0000
|
unkown image
|
page readonly
|
|
|
|
2BB8000
|
unkown
|
page read and write
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
267A000
|
unkown image
|
page readonly
|
|
|
|
29A11713000
|
unkown
|
page read and write
|
|
|
|
2A86000
|
unkown image
|
page readonly
|
|
|
|
7DF51D252000
|
unkown image
|
page readonly
|
|
|
|
47E0000
|
unkown
|
page read and write
|
|
|
|
27A2B800000
|
unkown image
|
page readonly
|
|
|
|
18A629BF000
|
unkown
|
page read and write
|
|
|
|
27A2B240000
|
unkown image
|
page readonly
|
|
|
|
7F850000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
unkown image
|
page readonly
|
|
|
|
7DF599792000
|
unkown image
|
page readonly
|
|
|
|
7F140000
|
unkown image
|
page readonly
|
|
|
|
20C45800000
|
unkown image
|
page readonly
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
7FDD0000
|
unkown image
|
page readonly
|
|
|
|
7FF53964E000
|
unkown image
|
page readonly
|
|
|
|
29A10ED1000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
8879BCF000
|
stack
|
page read and write
|
|
|
|
7FF507797000
|
unkown image
|
page readonly
|
|
|
|
2621000
|
unkown image
|
page readonly
|
|
|
|
318000
|
unkown
|
page read and write
|
|
|
|
2E9E000
|
unkown
|
page read and write
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF507926000
|
unkown image
|
page readonly
|
|
|
|
307C000
|
unkown
|
page read and write
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
7F5C0000
|
unkown image
|
page readonly
|
|
|
|
7FF507930000
|
unkown image
|
page readonly
|
|
|
|
2C74000
|
unkown image
|
page readonly
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
2887000
|
unkown image
|
page readonly
|
|
|
|
2CA9000
|
unkown image
|
page readonly
|
|
|
|
18A627F0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F3853000
|
unkown image
|
page readonly
|
|
|
|
7F030000
|
unkown image
|
page readonly
|
|
|
|
1FBA0F02000
|
unkown
|
page read and write
|
|
|
|
25327868000
|
unkown
|
page read and write
|
|
|
|
265B000
|
unkown image
|
page readonly
|
|
|
|
29AD000
|
unkown image
|
page readonly
|
|
|
|
25327800000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown image
|
page readonly
|
|
|
|
7F062000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown
|
page read and write
|
|
|
|
20C453C0000
|
unkown image
|
page read and write
|
|
|
|
3430000
|
heap private
|
page read and write
|
|
|
|
7FF51EB36000
|
unkown image
|
page readonly
|
|
|
|
7DF5997A0000
|
unkown image
|
page readonly
|
|
|
|
2640000
|
unkown image
|
page readonly
|
|
|
|
2F50000
|
unkown image
|
page readonly
|
|
|
|
6B00000
|
unkown
|
page read and write
|
|
|
|
2669000
|
unkown image
|
page readonly
|
|
|
|
3150000
|
unkown image
|
page readonly
|
|
|
|
1FBA0DA0000
|
unkown image
|
page readonly
|
|
|
|
2641000
|
unkown image
|
page readonly
|
|
|
|
26FC000
|
unkown image
|
page readonly
|
|
|
|
25327865000
|
unkown
|
page read and write
|
|
|
|
2630000
|
unkown image
|
page readonly
|
|
|
|
7FF583DC5000
|
unkown image
|
page readonly
|
|
|
|
790000
|
heap default
|
page read and write
|
|
|
|
2DA0000
|
heap default
|
page read and write
|
|
|
|
64E0000
|
unkown
|
page read and write
|
|
|
|
7FF5071E1000
|
unkown image
|
page readonly
|
|
|
|
150000
|
unkown image
|
page readonly
|
|
|
|
7F852000
|
unkown image
|
page readonly
|
|
|
|
2B37000
|
unkown
|
page read and write
|
|
|
|
7DF59F2C2000
|
unkown image
|
page readonly
|
|
|
|
E33F3FF000
|
stack
|
page read and write
|
|
|
|
7FF58983E000
|
unkown image
|
page readonly
|
|
|
|
36C7000
|
heap private
|
page read and write
|
|
|
|
BB584FD000
|
stack
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
64DE000
|
stack
|
page read and write
|
|
|
|
7FF507918000
|
unkown image
|
page readonly
|
|
|
|
7DF432640000
|
unkown image
|
page readonly
|
|
|
|
3355000
|
unkown
|
page read and write
|
|
|
|
2532782F000
|
unkown
|
page read and write
|
|
|
|
3440000
|
unkown image
|
page readonly
|
|
|
|
18A62B49000
|
heap private
|
page read and write
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
7FF50788D000
|
unkown image
|
page readonly
|
|
|
|
2CAC000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
unkown image
|
page readonly
|
|
|
|
3364000
|
unkown
|
page read and write
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
2630000
|
unkown image
|
page readonly
|
|
|
|
2564000
|
unkown image
|
page readonly
|
|
|
|
335A000
|
unkown
|
page read and write
|
|
|
|
7F6C2000
|
unkown image
|
page readonly
|
|
|
|
66F0000
|
heap private
|
page read and write
|
|
|
|
25327813000
|
unkown
|
page read and write
|
|
|
|
311A000
|
heap private
|
page read and write
|
|
|
|
3240000
|
unkown image
|
page readonly
|
|
|
|
7FF58997F000
|
unkown image
|
page readonly
|
|
|
|
2920000
|
unkown image
|
page readonly
|
|
|
|
2E50000
|
unkown image
|
page readonly
|
|
|
|
7FF583E48000
|
unkown image
|
page readonly
|
|
|
|
2737000
|
unkown image
|
page readonly
|
|
|
|
7DF599780000
|
unkown image
|
page readonly
|
|
|
|
27A2B400000
|
unkown
|
page read and write
|
|
|
|
2661000
|
unkown image
|
page readonly
|
|
|
|
2E98000
|
unkown
|
page read and write
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
2534000
|
unkown image
|
page readonly
|
|
|
|
6ED21000
|
unkown image
|
page execute read
|
|
|
|
2F1E000
|
stack
|
page read and write
|
|
|
|
7FF5899AB000
|
unkown image
|
page readonly
|
|
|
|
18A63700000
|
unkown
|
page read and write
|
|
|
|
26F1000
|
unkown image
|
page readonly
|
|
|
|
20C45C00000
|
unkown
|
page read and write
|
|
|
|
5F30000
|
unkown image
|
page readonly
|
|
|
|
7FF5898B3000
|
unkown image
|
page readonly
|
|
|
|
24D7000
|
unkown image
|
page readonly
|
|
|
|
7FF50795F000
|
unkown image
|
page readonly
|
|
|
|
20C453E0000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
2D47000
|
unkown image
|
page readonly
|
|
|
|
29A11460000
|
unkown image
|
page readonly
|
|
|
|
7FF58998B000
|
unkown image
|
page readonly
|
|
|
|
27A2B402000
|
unkown
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
4D3F000
|
stack
|
page read and write
|
|
|
|
E33F0FC000
|
stack
|
page read and write
|
|
|
|
7DF54F0E0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F358F000
|
unkown image
|
page readonly
|
|
|
|
7FF50794E000
|
unkown image
|
page readonly
|
|
|
|
7F462000
|
unkown image
|
page readonly
|
|
|
|
7FDD2000
|
unkown image
|
page readonly
|
|
|
|
26BD000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
150000
|
unkown image
|
page readonly
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
6C9A18E000
|
stack
|
page read and write
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown image
|
page readonly
|
|
|
|
2AA5000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
26C1000
|
unkown image
|
page readonly
|
|
|
|
DE17E7D000
|
stack
|
page read and write
|
|
|
|
3355000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
heap default
|
page read and write
|
|
|
|
264A000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
7DF509212000
|
unkown image
|
page readonly
|
|
|
|
7FF583DD3000
|
unkown image
|
page readonly
|
|
|
|
2D31000
|
unkown image
|
page readonly
|
|
|
|
262D000
|
unkown image
|
page readonly
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E37000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown image
|
page readonly
|
|
|
|
7DF534772000
|
unkown image
|
page readonly
|
|
|
|
46A000
|
unkown
|
page read and write
|
|
|
|
7FF583E8F000
|
unkown image
|
page readonly
|
|
|
|
7F080000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
2CB0000
|
unkown image
|
page readonly
|
|
|
|
7FF51ED50000
|
unkown image
|
page readonly
|
|
|
|
470000
|
unkown image
|
page readonly
|
|
|
|
2AED000
|
unkown image
|
page readonly
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
2EA7000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown image
|
page readonly
|
|
|
|
2D00000
|
unkown image
|
page readonly
|
|
|
|
7F142000
|
unkown image
|
page readonly
|
|
|
|
18A62910000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
7DF534780000
|
unkown image
|
page readonly
|
|
|
|
2E20000
|
unkown image
|
page readonly
|
|
|
|
7F1D0000
|
unkown image
|
page readonly
|
|
|
|
2C80000
|
unkown image
|
page readonly
|
|
|
|
DE177CE000
|
stack
|
page read and write
|
|
|
|
7DF59F2C2000
|
unkown image
|
page readonly
|
|
|
|
2970000
|
unkown image
|
page read and write
|
|
|
|
3170000
|
heap default
|
page read and write
|
|
|
|
7F1D0000
|
unkown image
|
page readonly
|
|
|
|
2634000
|
unkown image
|
page readonly
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
7F880000
|
unkown image
|
page readonly
|
|
|
|
2561000
|
unkown image
|
page readonly
|
|
|
|
3240000
|
unkown image
|
page readonly
|
|
|
|
2A5D000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
7F072000
|
unkown image
|
page readonly
|
|
|
|
7F850000
|
unkown image
|
page readonly
|
|
|
|
6ED20000
|
unkown image
|
page readonly
|
|
|
|
7F080000
|
unkown image
|
page readonly
|
|
|
|
2CD4000
|
unkown image
|
page readonly
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
29EB000
|
unkown
|
page read and write
|
|
|
|
2E75000
|
unkown
|
page read and write
|
|
|
|
6ED6D000
|
unkown image
|
page read and write
|
|
|
|
7F6D0000
|
unkown image
|
page readonly
|
|
|
|
29A10E88000
|
unkown
|
page read and write
|
|
|
|
7FF583D98000
|
unkown image
|
page readonly
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
7F142000
|
unkown image
|
page readonly
|
|
|
|
7DF599780000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
265D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F381C000
|
unkown image
|
page readonly
|
|
|
|
7F852000
|
unkown image
|
page readonly
|
|
|
|
268D000
|
unkown image
|
page readonly
|
|
|
|
263E000
|
unkown image
|
page readonly
|
|
|
|
2B67000
|
unkown image
|
page readonly
|
|
|
|
2767000
|
unkown image
|
page readonly
|
|
|
|
29A10DC0000
|
unkown image
|
page readonly
|
|
|
|
2A29000
|
unkown image
|
page readonly
|
|
|
|
7FF5396C5000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0C0000
|
unkown image
|
page readonly
|
|
|
|
7FF583D64000
|
unkown image
|
page readonly
|
|
|
|
2EA4000
|
unkown
|
page read and write
|
|
|
|
2665000
|
unkown image
|
page readonly
|
|
|
|
25327D80000
|
unkown image
|
page readonly
|
|
|
|
6630000
|
unkown
|
page read and write
|
|
|
|
3120000
|
unkown image
|
page readonly
|
|
|
|
31C000
|
unkown
|
page read and write
|
|
|
|
7FF589990000
|
unkown image
|
page readonly
|
|
|
|
7F850000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
7DF51D260000
|
unkown image
|
page readonly
|
|
|
|
3120000
|
heap private
|
page read and write
|
|
|
|
2611000
|
unkown image
|
page readonly
|
|
|
|
6060000
|
unkown
|
page read and write
|
|
|
|
7DF497650000
|
unkown image
|
page readonly
|
|
|
|
7F072000
|
unkown image
|
page readonly
|
|
|
|
1035000
|
unkown
|
page read and write
|
|
|
|
7FF589978000
|
unkown image
|
page readonly
|
|
|
|
E33EDFF000
|
stack
|
page read and write
|
|
|
|
7FA60000
|
unkown image
|
page readonly
|
|
|
|
2532786B000
|
unkown
|
page read and write
|
|
|
|
25327690000
|
unkown image
|
page read and write
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
2665000
|
unkown image
|
page readonly
|
|
|
|
2EF8000
|
unkown
|
page read and write
|
|
|
|
7DF509202000
|
unkown image
|
page readonly
|
|
|
|
5F70000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
474000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF583E6D000
|
unkown image
|
page readonly
|
|
|
|
29F0000
|
unkown image
|
page readonly
|
|
|
|
26EB000
|
unkown image
|
page readonly
|
|
|
|
29A11450000
|
unkown image
|
page readonly
|
|
|
|
2675000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
7FF5395DD000
|
unkown image
|
page readonly
|
|
|
|
2767000
|
unkown image
|
page readonly
|
|
|
|
7FF53956D000
|
unkown image
|
page readonly
|
|
|
|
4CC000
|
unkown
|
page read and write
|
|
|
|
2656000
|
unkown image
|
page readonly
|
|
|
|
1FBA0E41000
|
unkown
|
page read and write
|
|
|
|
7F062000
|
unkown image
|
page readonly
|
|
|
|
2E4F000
|
stack
|
page read and write
|
|
|
|
2E7D000
|
unkown
|
page read and write
|
|
|
|
468000
|
unkown
|
page read and write
|
|
|
|
20C45420000
|
heap default
|
page read and write
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page readonly
|
|
|
|
7FF507864000
|
unkown image
|
page readonly
|
|
|
|
2737000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
2755000
|
unkown image
|
page readonly
|
|
|
|
2B74000
|
unkown image
|
page readonly
|
|
|
|
7F142000
|
unkown image
|
page readonly
|
|
|
|
2669000
|
unkown image
|
page readonly
|
|
|
|
24E0000
|
unkown image
|
page readonly
|
|
|
|
25327869000
|
unkown
|
page read and write
|
|
|
|
18A630E0000
|
unkown image
|
page readonly
|
|
|
|
32B0000
|
unkown image
|
page readonly
|
|
|
|
7FA52000
|
unkown image
|
page readonly
|
|
|
|
7F882000
|
unkown image
|
page readonly
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
7F862000
|
unkown image
|
page readonly
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
E80000
|
unkown image
|
page readonly
|
|
|
|
857000
|
heap private
|
page read and write
|
|
|
|
2751000
|
unkown image
|
page readonly
|
|
|
|
7FF51EE7F000
|
unkown image
|
page readonly
|
|
|
|
7FA50000
|
unkown image
|
page readonly
|
|
|
|
7DF534780000
|
unkown image
|
page readonly
|
|
|
|
7F6D2000
|
unkown image
|
page readonly
|
|
|
|
2AB5000
|
unkown image
|
page readonly
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
29C2000
|
unkown image
|
page readonly
|
|
|
|
2626000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2950000
|
unkown image
|
page readonly
|
|
|
|
4E10000
|
unkown
|
page read and write
|
|
|
|
7FF53978F000
|
unkown image
|
page readonly
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
7F150000
|
unkown image
|
page readonly
|
|
|
|
6ED5A000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
DE17EFE000
|
stack
|
page read and write
|
|
|
|
7F860000
|
unkown image
|
page readonly
|
|
|
|
2ADD000
|
unkown image
|
page readonly
|
|
|
|
335D000
|
unkown
|
page read and write
|
|
|
|
7FF5397CF000
|
unkown image
|
page readonly
|
|
|
|
1FBA0DC0000
|
heap default
|
page read and write
|
|
|
|
7FF583E8F000
|
unkown image
|
page readonly
|
|
|
|
253276A0000
|
heap private
|
page read and write
|
|
|
|
264A000
|
unkown image
|
page readonly
|
|
|
|
25327A00000
|
unkown image
|
page readonly
|
|
|
|
1FBA0DD0000
|
unkown image
|
page readonly
|
|
|
|
7FF58978F000
|
unkown image
|
page readonly
|
|
|
|
460000
|
unkown image
|
page read and write
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
2E7D000
|
unkown
|
page read and write
|
|
|
|
2629000
|
unkown image
|
page readonly
|
|
|
|
7FF5898A2000
|
unkown image
|
page readonly
|
|
|
|
440000
|
heap default
|
page read and write
|
|
|
|
7DF49D180000
|
unkown image
|
page readonly
|
|
|
|
27A2B600000
|
unkown image
|
page readonly
|
|
|
|
7DF54F0C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5078A3000
|
unkown image
|
page readonly
|
|
|
|
27A2B370000
|
unkown
|
page read and write
|
|
|
|
602E000
|
stack
|
page read and write
|
|
|
|
7FF5397BE000
|
unkown image
|
page readonly
|
|
|
|
7F6C0000
|
unkown image
|
page readonly
|
|
|
|
2D50000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
7FC90000
|
unkown image
|
page readonly
|
|
|
|
269D000
|
unkown image
|
page readonly
|
|
|
|
2707000
|
unkown image
|
page readonly
|
|
|
|
362000
|
unkown
|
page read and write
|
|
There are 1435 hidden memdumps, click here to show them.