Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\62A0C483-7525-45C3-9021-D9D0BAA7B779
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A032B20.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF852A535A08A1983B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC6022B2B101620FE.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\DAB5.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3B4EA5BD8BBCDF15.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEAC2A307FBF2A788.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html
|
162.241.2.78
|
|
|
|
https://playsis.com.br/viderJ
|
unknown
|
|
|
|
https://playsis.com.br/qJSi
|
unknown
|
|
|
|
https://playsis.com.br/
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html117.vn/TSh7GBeIR/tiynh.htmlink
|
unknown
|
|
|
|
https://playsis.com.br/qJSL117.
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html3W(y
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1B.b
|
unknown
|
|
|
|
https://playsis.com.br/qhtt
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BNt
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.jsone
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.comq
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.comBearer
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkeyhttps://login.windows.net/common/oau
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://cortana.ai/apihttps://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspxOneNoteCloudFilesConsumerEmbedhttps://onedrive.live.com/em
|
unknown
|
|
|
|
https://dataservice.o365filtering.com8Q
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=FlickrMBI_SSL_SHORTssl.
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false_J
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.htmlx
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFileBearer
|
unknown
|
|
|
|
https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-androidUserVoiceOf
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/queryU
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize#
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize$
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize%
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize&
|
unknown
|
|
|
|
https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13dll
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeMBI_SSL_SHORT
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groupsBearer
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://substrate.office.comk
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://noithat117.vn/N_k
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xmlL
|
unknown
|
|
|
|
https://api.onedrive.comMBI
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.jsonMBI_SSLpeople.directory.
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.html
|
108.179.192.98
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://augloop.office.comLinkRequestApiPageTitleRetrievalhttps://uci.
|
unknown
|
|
|
|
https://api.cortana.aiL
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=BingMBI_SSL_SHORTssl.
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://api.cortana.aiP
|
unknown
|
|
|
|
https://substrate.office.comP
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2Azur
|
unknown
|
|
|
|
https://devnull.onenote.comMBI_SSL_SHORT
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/StreamVideoBasehttps://web.microsoftstream.com/video/PPTQuickSta
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeX
|
unknown
|
|
|
|
https://greenflag.esp./
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeY
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFileBearer
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize_
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/workX
|
unknown
|
|
|
|
https://www.odwebp.svc.msom
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://graph.windows.net/https://graph.windows.net
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeR
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeS
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policieshttps://login.windows.net/common/oauth2/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeT
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/workhttps://login.windows.net/common/oau
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/apiT
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeH
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeI
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeJ
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/apiN
|
unknown
|
|
|
|
https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeechBearer
|
unknown
|
|
|
|
https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeecheJ$
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeL
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeM
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeN
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeO
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.htmlfs7y
|
unknown
|
|
|
|
http://crl.entrust.net/server1.crl0
|
unknown
|
|
|
|
http://schemas.openformatrg/drawml/2006/spreadsheetD
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
|
|
|
https://playsis.com
|
unknown
|
|
|
|
https://greenflag.esp.br/
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
https://greenflag.esp.br/~
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
https://playsis.cre
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.html
|
103.28.36.171
|
|
|
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/r
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.htmltv7y
|
unknown
|
|
|
|
https://noithat117.vn/
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
https://playsis.com.boi
|
unknown
|
|
|
|
http://ocsp.entrust.net0D
|
unknown
|
|
|
|
https://secure.comodo.com/CPS0
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
There are 130 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
greenflag.esp.br
|
108.179.192.98
|
|
|
|
playsis.com.br
|
162.241.2.78
|
|
|
|
noithat117.vn
|
103.28.36.171
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.241.2.78
|
playsis.com.br
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
108.179.192.98
|
greenflag.esp.br
|
United States
|
|
|
|
103.28.36.171
|
noithat117.vn
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
n1/
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
o1/
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\1D2CD
|
1D2CD
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
<+/
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\30774
|
30774
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\31BF6
|
31BF6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
|
FileFormatBallotBoxTelemetrySent
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
10-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E2D0
|
2E2D0
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
|<-
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3EA8D
|
3EA8D
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\40167
|
40167
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 99 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
1CA5F000
|
unkown
|
page read and write
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
7FF542D78000
|
unkown image
|
page readonly
|
|
|
|
7FF542F87000
|
unkown image
|
page readonly
|
|
|
|
1C577000
|
unkown
|
page read and write
|
|
|
|
1B72AB80000
|
unkown image
|
page read and write
|
|
|
|
380000
|
unkown image
|
page readonly
|
|
|
|
221DEE62000
|
unkown
|
page read and write
|
|
|
|
D006000
|
unkown
|
page read and write
|
|
|
|
7DF55FB60000
|
unkown image
|
page readonly
|
|
|
|
1C26D000
|
unkown
|
page read and write
|
|
|
|
2F18000
|
heap default
|
page read and write
|
|
|
|
2202FE88000
|
unkown
|
page read and write
|
|
|
|
15FEE000
|
unkown
|
page read and write
|
|
|
|
166F3000
|
unkown
|
page read and write
|
|
|
|
2A6D5F20000
|
unkown image
|
page readonly
|
|
|
|
DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D4006000
|
unkown image
|
page readonly
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
4BF3000
|
heap private
|
page read and write
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
E81D000
|
stack
|
page read and write
|
|
|
|
1747E000
|
unkown
|
page read and write
|
|
|
|
1688A000
|
unkown
|
page read and write
|
|
|
|
7FF5A897D000
|
unkown image
|
page readonly
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
1E8936C6000
|
unkown
|
page read and write
|
|
|
|
15FF1000
|
unkown
|
page read and write
|
|
|
|
EAD9000
|
unkown
|
page read and write
|
|
|
|
2FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5319AB000
|
unkown image
|
page readonly
|
|
|
|
1DC94A30000
|
heap private
|
page read and write
|
|
|
|
7FF5112B5000
|
unkown image
|
page readonly
|
|
|
|
1C3CF000
|
unkown
|
page read and write
|
|
|
|
28558930000
|
unkown image
|
page read and write
|
|
|
|
2202E9F0000
|
unkown
|
page read and write
|
|
|
|
15F5E000
|
unkown
|
page read and write
|
|
|
|
1DC94B90000
|
unkown
|
page read and write
|
|
|
|
19676DC0000
|
unkown image
|
page readonly
|
|
|
|
7FF511353000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7100000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA83000
|
unkown image
|
page readonly
|
|
|
|
F20000
|
unkown image
|
page readonly
|
|
|
|
168AF000
|
unkown
|
page read and write
|
|
|
|
7FF531980000
|
unkown image
|
page readonly
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown image
|
page readonly
|
|
|
|
28558A3C000
|
unkown
|
page read and write
|
|
|
|
133CD000
|
unkown
|
page read and write
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
2202FE8B000
|
unkown
|
page read and write
|
|
|
|
EB61000
|
unkown
|
page read and write
|
|
|
|
DD7D000
|
unkown
|
page read and write
|
|
|
|
3020000
|
stack
|
page read and write
|
|
|
|
1E893F1F000
|
unkown
|
page read and write
|
|
|
|
7FF547793000
|
unkown image
|
page readonly
|
|
|
|
28558A29000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
2DF74E67000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
FEEF1FE000
|
stack
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
2D96000
|
unkown image
|
page readonly
|
|
|
|
EB7A000
|
unkown
|
page read and write
|
|
|
|
7DF5E9930000
|
unkown image
|
page readonly
|
|
|
|
7FF54305D000
|
unkown image
|
page readonly
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
1C3CC000
|
unkown
|
page read and write
|
|
|
|
166F6000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
7DF5E9942000
|
unkown image
|
page readonly
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
7FF54A230000
|
unkown image
|
page readonly
|
|
|
|
2EA1000
|
unkown image
|
page readonly
|
|
|
|
2F1D000
|
unkown image
|
page readonly
|
|
|
|
1E893D00000
|
unkown
|
page read and write
|
|
|
|
166CD000
|
unkown
|
page read and write
|
|
|
|
F9F287E000
|
stack
|
page read and write
|
|
|
|
7FF5D3B18000
|
unkown image
|
page readonly
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
7FF5A82B3000
|
unkown image
|
page readonly
|
|
|
|
7FF51138D000
|
unkown image
|
page readonly
|
|
|
|
20D3E4E0000
|
unkown image
|
page readonly
|
|
|
|
EB84000
|
unkown
|
page read and write
|
|
|
|
1CB02000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1312D000
|
unkown
|
page read and write
|
|
|
|
167AB000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
2202E820000
|
heap private
|
page read and write
|
|
|
|
7FF53197B000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
16829000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
132D3000
|
unkown
|
page read and write
|
|
|
|
28558950000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8A3E000
|
unkown image
|
page readonly
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
CF25000
|
unkown
|
page read and write
|
|
|
|
15BE0000
|
unkown
|
page read and write
|
|
|
|
1DC95180000
|
unkown image
|
page readonly
|
|
|
|
13231000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E4D000
|
unkown image
|
page readonly
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
26030C02000
|
unkown
|
page read and write
|
|
|
|
7DF526D60000
|
unkown image
|
page readonly
|
|
|
|
2202EA5A000
|
unkown
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
7DF532172000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8A4F000
|
unkown image
|
page readonly
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
7DF532160000
|
unkown image
|
page readonly
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
26030A70000
|
unkown image
|
page readonly
|
|
|
|
EE1C000
|
stack
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
1DC94C3C000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
16623000
|
unkown
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
1DC94C8C000
|
unkown
|
page read and write
|
|
|
|
D085000
|
unkown
|
page read and write
|
|
|
|
7FF5318E5000
|
unkown image
|
page readonly
|
|
|
|
1C518000
|
unkown
|
page read and write
|
|
|
|
7FF5470D6000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3D31000
|
unkown image
|
page readonly
|
|
|
|
19676E51000
|
unkown
|
page read and write
|
|
|
|
1DC94A40000
|
unkown image
|
page readonly
|
|
|
|
1C904000
|
unkown
|
page read and write
|
|
|
|
16820000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
7FF511418000
|
unkown image
|
page readonly
|
|
|
|
26030D02000
|
unkown
|
page read and write
|
|
|
|
1E89368B000
|
unkown
|
page read and write
|
|
|
|
131C7000
|
unkown
|
page read and write
|
|
|
|
1C2D1000
|
unkown
|
page read and write
|
|
|
|
28558A58000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
EB4A000
|
unkown
|
page read and write
|
|
|
|
7FF54A25F000
|
unkown image
|
page readonly
|
|
|
|
118F000
|
stack
|
page read and write
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
28558A66000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1C9BE000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
236DF7E000
|
stack
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
7FF547858000
|
unkown image
|
page readonly
|
|
|
|
131C0000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
7DF526D62000
|
unkown image
|
page readonly
|
|
|
|
221DEE5F000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
1E893F6F000
|
unkown
|
page read and write
|
|
|
|
16A59000
|
unkown
|
page read and write
|
|
|
|
7DF5B7110000
|
unkown image
|
page readonly
|
|
|
|
7FF51C720000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8610000
|
unkown image
|
page readonly
|
|
|
|
EB85000
|
unkown
|
page read and write
|
|
|
|
16929000
|
unkown
|
page read and write
|
|
|
|
166FC000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
7FF51C82F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3D63000
|
unkown image
|
page readonly
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
7FF51C577000
|
unkown image
|
page readonly
|
|
|
|
548EC7C000
|
stack
|
page read and write
|
|
|
|
2DF74CE0000
|
heap private
|
page read and write
|
|
|
|
7FF5113A3000
|
unkown image
|
page readonly
|
|
|
|
166F0000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
1E893B90000
|
unkown image
|
page readonly
|
|
|
|
16841000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
EB0F000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
EB32000
|
unkown
|
page read and write
|
|
|
|
2202FEFC000
|
unkown
|
page read and write
|
|
|
|
2FA9000
|
heap default
|
page read and write
|
|
|
|
1C986000
|
unkown
|
page read and write
|
|
|
|
1C99E000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
16628000
|
unkown
|
page read and write
|
|
|
|
138F0000
|
unkown
|
page read and write
|
|
|
|
7DF532172000
|
unkown image
|
page readonly
|
|
|
|
221DEE42000
|
unkown
|
page read and write
|
|
|
|
1C2F9000
|
unkown
|
page read and write
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
221DEF02000
|
unkown
|
page read and write
|
|
|
|
19676F13000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
7FF5D3CF9000
|
unkown image
|
page readonly
|
|
|
|
221DEE63000
|
unkown
|
page read and write
|
|
|
|
1C2D6000
|
unkown
|
page read and write
|
|
|
|
1081000
|
unkown
|
page read and write
|
|
|
|
7DF558970000
|
unkown image
|
page readonly
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
132E8000
|
unkown
|
page read and write
|
|
|
|
19676DD0000
|
unkown image
|
page readonly
|
|
|
|
1C26F000
|
unkown
|
page read and write
|
|
|
|
1341F000
|
unkown
|
page read and write
|
|
|
|
221DEE49000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CD0000
|
unkown image
|
page readonly
|
|
|
|
68A000
|
heap default
|
page read and write
|
|
|
|
2DF74DB0000
|
unkown image
|
page write copy
|
|
|
|
3330000
|
unkown image
|
page readonly
|
|
|
|
1E893C90000
|
unkown image
|
page write copy
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
F9F28FB000
|
stack
|
page read and write
|
|
|
|
7FF54A24B000
|
unkown image
|
page readonly
|
|
|
|
EB86000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
5976F7D000
|
stack
|
page read and write
|
|
|
|
DFCE000
|
stack
|
page read and write
|
|
|
|
15EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5A12D9000
|
unkown image
|
page readonly
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
30B733E000
|
stack
|
page read and write
|
|
|
|
1B72ABF6000
|
unkown
|
page read and write
|
|
|
|
28558A13000
|
unkown
|
page read and write
|
|
|
|
9B7000
|
heap private
|
page read and write
|
|
|
|
1C472000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
FBC4000
|
unkown
|
page read and write
|
|
|
|
1E893F5B000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
19676F02000
|
unkown
|
page read and write
|
|
|
|
7DF55D1A2000
|
unkown image
|
page readonly
|
|
|
|
136F0000
|
unkown
|
page read and write
|
|
|
|
16829000
|
unkown
|
page read and write
|
|
|
|
2DF74CD0000
|
unkown image
|
page read and write
|
|
|
|
7FF5C2C39000
|
unkown image
|
page readonly
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
7FF51C52F000
|
unkown image
|
page readonly
|
|
|
|
221DF602000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown image
|
page readonly
|
|
|
|
17481000
|
unkown
|
page read and write
|
|
|
|
2A6D5FAF000
|
heap default
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
1C581000
|
unkown
|
page read and write
|
|
|
|
15F83000
|
unkown
|
page read and write
|
|
|
|
2F81000
|
heap default
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
168DB000
|
unkown
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
2202EC00000
|
unkown image
|
page readonly
|
|
|
|
236DAFB000
|
stack
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
1C26D000
|
unkown
|
page read and write
|
|
|
|
17340000
|
unkown
|
page read and write
|
|
|
|
C1E8D7E000
|
stack
|
page read and write
|
|
|
|
1682B000
|
unkown
|
page read and write
|
|
|
|
16A4F000
|
unkown
|
page read and write
|
|
|
|
7FF542FCA000
|
unkown image
|
page readonly
|
|
|
|
168D2000
|
unkown
|
page read and write
|
|
|
|
1DC94A20000
|
unkown image
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
16873000
|
unkown
|
page read and write
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
1C57F000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
F89D000
|
stack
|
page read and write
|
|
|
|
1CB0A000
|
unkown
|
page read and write
|
|
|
|
168A0000
|
unkown
|
page read and write
|
|
|
|
7FF51C42B000
|
unkown image
|
page readonly
|
|
|
|
1313E000
|
unkown
|
page read and write
|
|
|
|
16A52000
|
unkown
|
page read and write
|
|
|
|
7FF5A180B000
|
unkown image
|
page readonly
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
1C2D4000
|
unkown
|
page read and write
|
|
|
|
131B9000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
FD13000
|
unkown
|
page read and write
|
|
|
|
D41377F000
|
stack
|
page read and write
|
|
|
|
7FF5A89B5000
|
unkown image
|
page readonly
|
|
|
|
131D7000
|
unkown
|
page read and write
|
|
|
|
167B6000
|
unkown
|
page read and write
|
|
|
|
167B6000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
131A1000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
7FF51C6A7000
|
unkown image
|
page readonly
|
|
|
|
168E6000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
heap default
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
E360000
|
unkown
|
page read and write
|
|
|
|
7F392000
|
unkown image
|
page readonly
|
|
|
|
F99D000
|
stack
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
7DF5818C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3BE4000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
7FF54306E000
|
unkown image
|
page readonly
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
1C32C000
|
unkown
|
page read and write
|
|
|
|
2B8C000
|
unkown image
|
page readonly
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
2DF74D50000
|
unkown image
|
page readonly
|
|
|
|
7FF5A171C000
|
unkown image
|
page readonly
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
EB3F000
|
unkown
|
page read and write
|
|
|
|
1310000
|
unkown
|
page read and write
|
|
|
|
15640000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
131D5000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown image
|
page read and write
|
|
|
|
EB33000
|
unkown
|
page read and write
|
|
|
|
1C961000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
C1E8CFE000
|
stack
|
page read and write
|
|
|
|
7FF5112D4000
|
unkown image
|
page readonly
|
|
|
|
2EF5000
|
unkown image
|
page readonly
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
7FF51144B000
|
unkown image
|
page readonly
|
|
|
|
221DEE2F000
|
unkown
|
page read and write
|
|
|
|
106B000
|
unkown
|
page read and write
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
1C2FE000
|
unkown
|
page read and write
|
|
|
|
1C2D9000
|
unkown
|
page read and write
|
|
|
|
E720000
|
heap private
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
1669B000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
221DEC70000
|
heap default
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
7DF526D52000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8610000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
7FF51C56D000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2C35000
|
unkown image
|
page readonly
|
|
|
|
A82B79E000
|
stack
|
page read and write
|
|
|
|
7FF54A01C000
|
unkown image
|
page readonly
|
|
|
|
EB67000
|
unkown
|
page read and write
|
|
|
|
FFF12000
|
unkown image
|
page readonly
|
|
|
|
2202EA00000
|
unkown
|
page read and write
|
|
|
|
2202EA78000
|
unkown
|
page read and write
|
|
|
|
7FF5D4024000
|
unkown image
|
page readonly
|
|
|
|
FC52000
|
unkown
|
page read and write
|
|
|
|
1DC94B70000
|
unkown image
|
page readonly
|
|
|
|
EB3B000
|
unkown
|
page read and write
|
|
|
|
7FF5D402E000
|
unkown image
|
page readonly
|
|
|
|
16873000
|
unkown
|
page read and write
|
|
|
|
15FC9000
|
unkown
|
page read and write
|
|
|
|
35A0000
|
heap default
|
page read and write
|
|
|
|
1B72ADD0000
|
unkown
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
26030D13000
|
unkown
|
page read and write
|
|
|
|
EB52000
|
unkown
|
page read and write
|
|
|
|
7FF51C628000
|
unkown image
|
page readonly
|
|
|
|
7DF526D60000
|
unkown image
|
page readonly
|
|
|
|
1C47A000
|
unkown
|
page read and write
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
2DF74CF0000
|
unkown image
|
page readonly
|
|
|
|
7FF542D36000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
16A17000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F33000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
stack
|
page read and write
|
|
|
|
166B4000
|
unkown
|
page read and write
|
|
|
|
2202F800000
|
unkown image
|
page read and write
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
137B0000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
EB77000
|
unkown
|
page read and write
|
|
|
|
7FF5D3DDD000
|
unkown image
|
page readonly
|
|
|
|
19676E4D000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
DD40000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D3CC8000
|
unkown image
|
page readonly
|
|
|
|
7FF51C86B000
|
unkown image
|
page readonly
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
13640000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
1E893C60000
|
unkown image
|
page readonly
|
|
|
|
20D3EB90000
|
unkown image
|
page readonly
|
|
|
|
221DEE4E000
|
unkown
|
page read and write
|
|
|
|
7DF5472B0000
|
unkown image
|
page readonly
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
EB67000
|
unkown
|
page read and write
|
|
|
|
2202FEF3000
|
unkown
|
page read and write
|
|
|
|
EADE000
|
unkown
|
page read and write
|
|
|
|
7DF526D62000
|
unkown image
|
page readonly
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
1098000
|
unkown
|
page read and write
|
|
|
|
1B72AAF0000
|
unkown image
|
page readonly
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
7DF4D64C0000
|
unkown image
|
page readonly
|
|
|
|
13700000
|
unkown
|
page read and write
|
|
|
|
7FF54A168000
|
unkown image
|
page readonly
|
|
|
|
1C57C000
|
unkown
|
page read and write
|
|
|
|
1E8936E9000
|
unkown
|
page read and write
|
|
|
|
1DC94C76000
|
unkown
|
page read and write
|
|
|
|
548EDFE000
|
stack
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
372C000
|
unkown
|
page read and write
|
|
|
|
2202FE47000
|
unkown
|
page read and write
|
|
|
|
1C26F000
|
unkown
|
page read and write
|
|
|
|
16929000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F4C000
|
unkown image
|
page readonly
|
|
|
|
196772D0000
|
unkown image
|
page readonly
|
|
|
|
370A000
|
heap default
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
2EB6000
|
unkown image
|
page readonly
|
|
|
|
34E0000
|
unkown image
|
page readonly
|
|
|
|
131BE000
|
unkown
|
page read and write
|
|
|
|
26030C41000
|
unkown
|
page read and write
|
|
|
|
1C477000
|
unkown
|
page read and write
|
|
|
|
221DEE2D000
|
unkown
|
page read and write
|
|
|
|
7DF5818C0000
|
unkown image
|
page readonly
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
131CA000
|
unkown
|
page read and write
|
|
|
|
1682B000
|
unkown
|
page read and write
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
2202F359000
|
unkown
|
page read and write
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
168DD000
|
unkown
|
page read and write
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A3B000
|
unkown image
|
page readonly
|
|
|
|
7198F79000
|
stack
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
1E893600000
|
unkown
|
page read and write
|
|
|
|
2DF74E44000
|
unkown
|
page read and write
|
|
|
|
1671B000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
136B0000
|
unkown
|
page read and write
|
|
|
|
1C2D4000
|
unkown
|
page read and write
|
|
|
|
7DF55D1A2000
|
unkown image
|
page readonly
|
|
|
|
221DED70000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
1341F000
|
unkown
|
page read and write
|
|
|
|
16929000
|
unkown
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
2E9C000
|
unkown image
|
page readonly
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
7DF55FB62000
|
unkown image
|
page readonly
|
|
|
|
1E893F52000
|
unkown
|
page read and write
|
|
|
|
7FF54788E000
|
unkown image
|
page readonly
|
|
|
|
E350000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown image
|
page readonly
|
|
|
|
7FF5A12E8000
|
unkown image
|
page readonly
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
7DF5D85F2000
|
unkown image
|
page readonly
|
|
|
|
7198EFE000
|
stack
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
16611000
|
unkown
|
page read and write
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
1C993000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
1B72ADF5000
|
heap private
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
7FF56BF25000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFA4000
|
unkown image
|
page readonly
|
|
|
|
7FF5A15FE000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF54A026000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8246000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3CC4000
|
unkown image
|
page readonly
|
|
|
|
236D8F7000
|
stack
|
page read and write
|
|
|
|
7DF4B4FD0000
|
unkown image
|
page readonly
|
|
|
|
F71A000
|
stack
|
page read and write
|
|
|
|
7F290000
|
unkown image
|
page readonly
|
|
|
|
19676DA0000
|
unkown image
|
page readonly
|
|
|
|
F9F2CFF000
|
stack
|
page read and write
|
|
|
|
7FF54304B000
|
unkown image
|
page readonly
|
|
|
|
1663C000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
22034200000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
20D3ECA0000
|
unkown
|
page read and write
|
|
|
|
7FF5311E6000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
F9F2AFE000
|
stack
|
page read and write
|
|
|
|
15BF3000
|
unkown
|
page read and write
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
2202F302000
|
unkown
|
page read and write
|
|
|
|
168A0000
|
unkown
|
page read and write
|
|
|
|
2EB9000
|
unkown image
|
page readonly
|
|
|
|
2F7B000
|
unkown image
|
page readonly
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
168D8000
|
unkown
|
page read and write
|
|
|
|
1C8FF000
|
unkown
|
page read and write
|
|
|
|
2202FE65000
|
unkown
|
page read and write
|
|
|
|
1679A000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
2C01000
|
unkown image
|
page readonly
|
|
|
|
15BD5000
|
unkown
|
page read and write
|
|
|
|
EB42000
|
unkown
|
page read and write
|
|
|
|
1C2FE000
|
unkown
|
page read and write
|
|
|
|
7DF55D1A0000
|
unkown image
|
page readonly
|
|
|
|
16882000
|
unkown
|
page read and write
|
|
|
|
5976E7F000
|
stack
|
page read and write
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
168AF000
|
unkown
|
page read and write
|
|
|
|
1333E000
|
unkown
|
page read and write
|
|
|
|
1C277000
|
unkown
|
page read and write
|
|
|
|
EB31000
|
unkown
|
page read and write
|
|
|
|
FFF20000
|
unkown image
|
page readonly
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
DD73000
|
unkown
|
page read and write
|
|
|
|
1E8936E3000
|
unkown
|
page read and write
|
|
|
|
167F2000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
2BA000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
7F3B0000
|
unkown image
|
page readonly
|
|
|
|
1738F000
|
unkown
|
page read and write
|
|
|
|
1B72B8F0000
|
unkown
|
page read and write
|
|
|
|
2F24000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
3020000
|
stack
|
page read and write
|
|
|
|
2F09000
|
unkown image
|
page readonly
|
|
|
|
2EF9000
|
unkown image
|
page readonly
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
1E893F6F000
|
unkown
|
page read and write
|
|
|
|
1DC94C4F000
|
unkown
|
page read and write
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
2E9C000
|
unkown image
|
page readonly
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
7DF55FB50000
|
unkown image
|
page readonly
|
|
|
|
7DF55D1B0000
|
unkown image
|
page readonly
|
|
|
|
2F09000
|
unkown image
|
page readonly
|
|
|
|
26030C60000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page read and write
|
|
|
|
221DEE41000
|
unkown
|
page read and write
|
|
|
|
131B5000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
7FF56BE15000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
118A000
|
unkown image
|
page read and write
|
|
|
|
7FF5D3866000
|
unkown image
|
page readonly
|
|
|
|
EB33000
|
unkown
|
page read and write
|
|
|
|
7DF532180000
|
unkown image
|
page readonly
|
|
|
|
DC60000
|
unkown image
|
page readonly
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A4F000
|
unkown image
|
page readonly
|
|
|
|
15B91000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
unkown image
|
page readonly
|
|
|
|
E20F000
|
stack
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
173EE000
|
unkown
|
page read and write
|
|
|
|
6A9000
|
unkown
|
page read and write
|
|
|
|
FFF30000
|
unkown image
|
page readonly
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
28558A63000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
7FF5A17D6000
|
unkown image
|
page readonly
|
|
|
|
E390000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
2202EA73000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
7DF532160000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
28558A5A000
|
unkown
|
page read and write
|
|
|
|
2F85000
|
unkown image
|
page readonly
|
|
|
|
EB39000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
1679F000
|
unkown
|
page read and write
|
|
|
|
13222000
|
unkown
|
page read and write
|
|
|
|
1680D000
|
unkown
|
page read and write
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
1679F000
|
unkown
|
page read and write
|
|
|
|
D75000
|
unkown
|
page read and write
|
|
|
|
26030C5B000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
1DC94C54000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
73DE000
|
stack
|
page read and write
|
|
|
|
1E893E02000
|
unkown
|
page read and write
|
|
|
|
E0CF000
|
stack
|
page read and write
|
|
|
|
13176000
|
unkown
|
page read and write
|
|
|
|
7FF543050000
|
unkown image
|
page readonly
|
|
|
|
1B72AB50000
|
unkown
|
page read and write
|
|
|
|
2B3DC7B000
|
unkown
|
page read and write
|
|
|
|
7FF51C744000
|
unkown image
|
page readonly
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
7FF5A8954000
|
unkown image
|
page readonly
|
|
|
|
11F0000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
132E0000
|
unkown
|
page read and write
|
|
|
|
7F0D0000
|
unkown image
|
page readonly
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
7FF90000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
7FF547805000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7120000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEB7000
|
unkown image
|
page readonly
|
|
|
|
DD5F000
|
unkown
|
page read and write
|
|
|
|
166D4000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
131AE000
|
unkown
|
page read and write
|
|
|
|
7FF54A18D000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEED000
|
unkown image
|
page readonly
|
|
|
|
7FF51C414000
|
unkown image
|
page readonly
|
|
|
|
1C2F6000
|
unkown
|
page read and write
|
|
|
|
F85E000
|
stack
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
2F85000
|
unkown image
|
page readonly
|
|
|
|
D41347A000
|
unkown
|
page read and write
|
|
|
|
F50000
|
unkown
|
page read and write
|
|
|
|
2202FEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D3B09000
|
unkown image
|
page readonly
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown image
|
page readonly
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
EB3E000
|
unkown
|
page read and write
|
|
|
|
6AC000
|
unkown
|
page read and write
|
|
|
|
165E9000
|
unkown
|
page read and write
|
|
|
|
1C2E1000
|
unkown
|
page read and write
|
|
|
|
7FF549FF2000
|
unkown image
|
page readonly
|
|
|
|
12060000
|
unkown
|
page read and write
|
|
|
|
2202EAD2000
|
unkown
|
page read and write
|
|
|
|
1C50E000
|
unkown
|
page read and write
|
|
|
|
1C3C4000
|
unkown
|
page read and write
|
|
|
|
7DF5E9932000
|
unkown image
|
page readonly
|
|
|
|
28558980000
|
unkown image
|
page readonly
|
|
|
|
1317E000
|
unkown
|
page read and write
|
|
|
|
FBA0000
|
unkown
|
page read and write
|
|
|
|
1C57F000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
53C000
|
unkown
|
page read and write
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
7FF5D3FFF000
|
unkown image
|
page readonly
|
|
|
|
1C02A000
|
unkown
|
page read and write
|
|
|
|
EB6B000
|
unkown
|
page read and write
|
|
|
|
2DF74D70000
|
unkown
|
page read and write
|
|
|
|
7FF56BDD3000
|
unkown image
|
page readonly
|
|
|
|
16DBA000
|
unkown
|
page read and write
|
|
|
|
EB7F000
|
unkown
|
page read and write
|
|
|
|
7FF51C788000
|
unkown image
|
page readonly
|
|
|
|
2202E990000
|
unkown image
|
page read and write
|
|
|
|
8110000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CEE000
|
unkown image
|
page readonly
|
|
|
|
7FF511223000
|
unkown image
|
page readonly
|
|
|
|
7FF54307D000
|
unkown image
|
page readonly
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
7FF547797000
|
unkown image
|
page readonly
|
|
|
|
7198C7B000
|
unkown
|
page read and write
|
|
|
|
1329D000
|
unkown
|
page read and write
|
|
|
|
7FF51C41F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A17C8000
|
unkown image
|
page readonly
|
|
|
|
16763000
|
unkown
|
page read and write
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
7DF5D8600000
|
unkown image
|
page readonly
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
7FF5A13E3000
|
unkown image
|
page readonly
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
E903000
|
unkown
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
221DEE2C000
|
unkown
|
page read and write
|
|
|
|
167A5000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF8B000
|
unkown image
|
page readonly
|
|
|
|
2EB9000
|
unkown image
|
page readonly
|
|
|
|
7DF5D85F0000
|
unkown image
|
page readonly
|
|
|
|
7DF445170000
|
unkown image
|
page readonly
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1DC94C00000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
26031190000
|
unkown image
|
page readonly
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
1C2F1000
|
unkown
|
page read and write
|
|
|
|
15890000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
FFF22000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
3040000
|
stack
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
DDF3000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
13630000
|
unkown
|
page read and write
|
|
|
|
1321D000
|
unkown
|
page read and write
|
|
|
|
28558A5D000
|
unkown
|
page read and write
|
|
|
|
13212000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
2202F9E0000
|
unkown image
|
page readonly
|
|
|
|
8100000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
C9EB000
|
unkown
|
page read and write
|
|
|
|
13720000
|
unkown
|
page read and write
|
|
|
|
30B7977000
|
stack
|
page read and write
|
|
|
|
1E893470000
|
unkown image
|
page read and write
|
|
|
|
1E8935E0000
|
unkown
|
page read and write
|
|
|
|
C1E917F000
|
stack
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
7FF5A15DE000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2C2D000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
B30000
|
unkown image
|
page readonly
|
|
|
|
2202FDF0000
|
unkown
|
page read and write
|
|
|
|
13064000
|
unkown
|
page read and write
|
|
|
|
7FF51C730000
|
unkown image
|
page readonly
|
|
|
|
7DF558972000
|
unkown image
|
page readonly
|
|
|
|
950000
|
unkown
|
page read and write
|
|
|
|
7FF5D3FF8000
|
unkown image
|
page readonly
|
|
|
|
20D3E65E000
|
unkown
|
page read and write
|
|
|
|
C1E8C7B000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
13295000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
167E4000
|
unkown
|
page read and write
|
|
|
|
1C3BF000
|
unkown
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
D575000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
1663E000
|
unkown
|
page read and write
|
|
|
|
FB80000
|
unkown
|
page read and write
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
2202F9F0000
|
unkown image
|
page readonly
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
7FF56BF9D000
|
unkown image
|
page readonly
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
15BF3000
|
unkown
|
page read and write
|
|
|
|
EB6B000
|
unkown
|
page read and write
|
|
|
|
221DEE44000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
BD0000
|
unkown image
|
page readonly
|
|
|
|
EB41000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
7FF51C43C000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
1C238000
|
unkown
|
page read and write
|
|
|
|
2E8D000
|
unkown image
|
page readonly
|
|
|
|
7FF543038000
|
unkown image
|
page readonly
|
|
|
|
7FF54A25D000
|
unkown image
|
page readonly
|
|
|
|
DD41000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
2B3DCFF000
|
stack
|
page read and write
|
|
|
|
167B6000
|
unkown
|
page read and write
|
|
|
|
1282000
|
unkown image
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
3723000
|
heap default
|
page read and write
|
|
|
|
2DF74CF0000
|
unkown image
|
page readonly
|
|
|
|
168AF000
|
unkown
|
page read and write
|
|
|
|
19676D90000
|
heap private
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
2C01000
|
unkown image
|
page readonly
|
|
|
|
2202FE63000
|
unkown
|
page read and write
|
|
|
|
3490000
|
unkown image
|
page readonly
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
1DC94A40000
|
unkown image
|
page readonly
|
|
|
|
7FF51C3EA000
|
unkown image
|
page readonly
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
7FF53199E000
|
unkown image
|
page readonly
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
7FF51C4E9000
|
unkown image
|
page readonly
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
236D9FB000
|
stack
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
1CBAB000
|
unkown
|
page read and write
|
|
|
|
6A5000
|
unkown
|
page read and write
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
2202E880000
|
heap default
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
1C577000
|
unkown
|
page read and write
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
7FF54A218000
|
unkown image
|
page readonly
|
|
|
|
EB31000
|
unkown
|
page read and write
|
|
|
|
1C3C4000
|
unkown
|
page read and write
|
|
|
|
236DBFF000
|
stack
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
167AB000
|
unkown
|
page read and write
|
|
|
|
3731000
|
unkown
|
page read and write
|
|
|
|
131AC000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1C99B000
|
unkown
|
page read and write
|
|
|
|
2DF75700000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1E893D00000
|
unkown
|
page read and write
|
|
|
|
2202EADF000
|
unkown
|
page read and write
|
|
|
|
7FF5318BC000
|
unkown image
|
page readonly
|
|
|
|
19676E7D000
|
unkown
|
page read and write
|
|
|
|
7FF5476C2000
|
unkown image
|
page readonly
|
|
|
|
2EFC000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
7DF5472B0000
|
unkown image
|
page readonly
|
|
|
|
1DC94C13000
|
unkown
|
page read and write
|
|
|
|
34D7000
|
heap private
|
page read and write
|
|
|
|
7FF53174D000
|
unkown image
|
page readonly
|
|
|
|
2202EF80000
|
unkown image
|
page readonly
|
|
|
|
1C513000
|
unkown
|
page read and write
|
|
|
|
3010000
|
stack
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
2F24000
|
unkown image
|
page readonly
|
|
|
|
1C2E1000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CB8000
|
unkown image
|
page readonly
|
|
|
|
19676F08000
|
unkown
|
page read and write
|
|
|
|
1681A000
|
unkown
|
page read and write
|
|
|
|
7FF547714000
|
unkown image
|
page readonly
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
7DF5D8600000
|
unkown image
|
page readonly
|
|
|
|
FD6B000
|
unkown
|
page read and write
|
|
|
|
D41357E000
|
stack
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
1312E000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
20D3E4A0000
|
heap private
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
48FC000
|
stack
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
F84000
|
heap private
|
page read and write
|
|
|
|
E70E000
|
stack
|
page read and write
|
|
|
|
7FF511113000
|
unkown image
|
page readonly
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
1C2D6000
|
unkown
|
page read and write
|
|
|
|
EB3A000
|
unkown
|
page read and write
|
|
|
|
7DF55D1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF54789F000
|
unkown image
|
page readonly
|
|
|
|
20D3E602000
|
unkown
|
page read and write
|
|
|
|
136D0000
|
unkown
|
page read and write
|
|
|
|
7FF54A24E000
|
unkown image
|
page readonly
|
|
|
|
17329000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CFF000
|
unkown image
|
page readonly
|
|
|
|
30B7A7F000
|
stack
|
page read and write
|
|
|
|
7DF430030000
|
unkown image
|
page readonly
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
221DEE29000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
FEEEFFF000
|
stack
|
page read and write
|
|
|
|
7DF55D192000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
unkown image
|
page readonly
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
7FF5A1745000
|
unkown image
|
page readonly
|
|
|
|
1671B000
|
unkown
|
page read and write
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
1C50B000
|
unkown
|
page read and write
|
|
|
|
7FF5A17F4000
|
unkown image
|
page readonly
|
|
|
|
7FF56BFAB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3B71000
|
unkown image
|
page readonly
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
2F83000
|
heap default
|
page read and write
|
|
|
|
2E70000
|
unkown image
|
page readonly
|
|
|
|
7FF5A885D000
|
unkown image
|
page readonly
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
2202EA98000
|
unkown
|
page read and write
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
D4E6000
|
unkown
|
page read and write
|
|
|
|
1070000
|
unkown image
|
page readonly
|
|
|
|
7FF5311F5000
|
unkown image
|
page readonly
|
|
|
|
167B6000
|
unkown
|
page read and write
|
|
|
|
DDE7000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F00000
|
unkown image
|
page readonly
|
|
|
|
132B1000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
EB32000
|
unkown
|
page read and write
|
|
|
|
1670D000
|
unkown
|
page read and write
|
|
|
|
7FE80000
|
unkown image
|
page readonly
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
E4A5000
|
stack
|
page read and write
|
|
|
|
2F9E000
|
heap default
|
page read and write
|
|
|
|
16815000
|
unkown
|
page read and write
|
|
|
|
34D0000
|
heap private
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
2EFC000
|
unkown image
|
page readonly
|
|
|
|
C1E907E000
|
stack
|
page read and write
|
|
|
|
2EDA000
|
unkown image
|
page readonly
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
221DEE2E000
|
unkown
|
page read and write
|
|
|
|
A82BA7E000
|
stack
|
page read and write
|
|
|
|
7FF51C7A5000
|
unkown image
|
page readonly
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
167FD000
|
unkown
|
page read and write
|
|
|
|
167A5000
|
unkown
|
page read and write
|
|
|
|
7FF5A87DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5113C5000
|
unkown image
|
page readonly
|
|
|
|
EB5C000
|
unkown
|
page read and write
|
|
|
|
3040000
|
stack
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
221DEC20000
|
unkown image
|
page readonly
|
|
|
|
1687B000
|
unkown
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
7FF510F38000
|
unkown image
|
page readonly
|
|
|
|
2FB000
|
unkown
|
page read and write
|
|
|
|
1320000
|
unkown
|
page read and write
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
1CB07000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
16A1D000
|
unkown
|
page read and write
|
|
|
|
131E9000
|
unkown
|
page read and write
|
|
|
|
7F392000
|
unkown image
|
page readonly
|
|
|
|
E8FD000
|
stack
|
page read and write
|
|
|
|
300000
|
unkown image
|
page readonly
|
|
|
|
119E000
|
stack
|
page read and write
|
|
|
|
7FF5D3EB4000
|
unkown image
|
page readonly
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
131C2000
|
unkown
|
page read and write
|
|
|
|
7FF542FB9000
|
unkown image
|
page readonly
|
|
|
|
7DF55FB52000
|
unkown image
|
page readonly
|
|
|
|
D027000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
unkown image
|
page readonly
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
2EB6000
|
unkown image
|
page readonly
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
1C3CC000
|
unkown
|
page read and write
|
|
|
|
221DF380000
|
unkown image
|
page readonly
|
|
|
|
1E893FD2000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A34000
|
unkown image
|
page readonly
|
|
|
|
7DF55D1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1703000
|
unkown image
|
page readonly
|
|
|
|
7FF542D28000
|
unkown image
|
page readonly
|
|
|
|
167A5000
|
unkown
|
page read and write
|
|
|
|
22034100000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
F30000
|
heap default
|
page read and write
|
|
|
|
1C2D6000
|
unkown
|
page read and write
|
|
|
|
1E8936EB000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
13700000
|
unkown
|
page read and write
|
|
|
|
2202F318000
|
unkown
|
page read and write
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
1CB00000
|
unkown
|
page read and write
|
|
|
|
1CC11000
|
unkown
|
page read and write
|
|
|
|
1060000
|
heap default
|
page read and write
|
|
|
|
7DF532162000
|
unkown image
|
page readonly
|
|
|
|
1DC94A60000
|
unkown image
|
page readonly
|
|
|
|
20D3EC90000
|
unkown
|
page read and write
|
|
|
|
117E000
|
unkown image
|
page read and write
|
|
|
|
E770000
|
unkown
|
page read and write
|
|
|
|
1C419000
|
unkown
|
page read and write
|
|
|
|
7198FFF000
|
stack
|
page read and write
|
|
|
|
1E893629000
|
unkown
|
page read and write
|
|
|
|
131B7000
|
unkown
|
page read and write
|
|
|
|
344E000
|
stack
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
7FF56BF0A000
|
unkown image
|
page readonly
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
1C506000
|
unkown
|
page read and write
|
|
|
|
2F0D000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
106A000
|
heap default
|
page read and write
|
|
|
|
EB74000
|
unkown
|
page read and write
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
1E8936A4000
|
unkown
|
page read and write
|
|
|
|
EB50000
|
unkown
|
page read and write
|
|
|
|
1321C000
|
unkown
|
page read and write
|
|
|
|
16708000
|
unkown
|
page read and write
|
|
|
|
A82BD77000
|
stack
|
page read and write
|
|
|
|
3220000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
236E37C000
|
stack
|
page read and write
|
|
|
|
15890000
|
unkown
|
page read and write
|
|
|
|
7FF51C740000
|
unkown image
|
page readonly
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
EB7C000
|
unkown
|
page read and write
|
|
|
|
1C32E000
|
unkown
|
page read and write
|
|
|
|
131A1000
|
unkown
|
page read and write
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF53196F000
|
unkown image
|
page readonly
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
1E894400000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown
|
page read and write
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
1C274000
|
unkown
|
page read and write
|
|
|
|
16683000
|
unkown
|
page read and write
|
|
|
|
16A4E000
|
unkown
|
page read and write
|
|
|
|
1686E000
|
unkown
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
221DEE3A000
|
unkown
|
page read and write
|
|
|
|
1C30E000
|
unkown
|
page read and write
|
|
|
|
7FF51136C000
|
unkown image
|
page readonly
|
|
|
|
221DEC10000
|
heap private
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
1660A000
|
unkown
|
page read and write
|
|
|
|
7FF54734F000
|
unkown image
|
page readonly
|
|
|
|
15BE0000
|
unkown
|
page read and write
|
|
|
|
D75000
|
unkown
|
page read and write
|
|
|
|
7FF51145F000
|
unkown image
|
page readonly
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
1CAA9000
|
unkown
|
page read and write
|
|
|
|
1660C000
|
unkown
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
12060000
|
unkown
|
page read and write
|
|
|
|
7DF5E9942000
|
unkown image
|
page readonly
|
|
|
|
1200000
|
heap default
|
page read and write
|
|
|
|
102B000
|
unkown
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
1311D000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
7FF5C2C63000
|
unkown image
|
page readonly
|
|
|
|
16916000
|
unkown
|
page read and write
|
|
|
|
7FF51C604000
|
unkown image
|
page readonly
|
|
|
|
7FF511033000
|
unkown image
|
page readonly
|
|
|
|
7FF51C44B000
|
unkown image
|
page readonly
|
|
|
|
22034240000
|
unkown
|
page read and write
|
|
|
|
DC4B000
|
stack
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
7DF55D190000
|
unkown image
|
page readonly
|
|
|
|
28558A5F000
|
unkown
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
FD06000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
7FF5A82E9000
|
unkown image
|
page readonly
|
|
|
|
132E2000
|
unkown
|
page read and write
|
|
|
|
7FF5318A7000
|
unkown image
|
page readonly
|
|
|
|
A82B71C000
|
unkown
|
page read and write
|
|
|
|
131BE000
|
unkown
|
page read and write
|
|
|
|
7FF51C85B000
|
unkown image
|
page readonly
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
13404000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
7DF5BE360000
|
unkown image
|
page readonly
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
unkown image
|
page readonly
|
|
|
|
7FF547632000
|
unkown image
|
page readonly
|
|
|
|
EACF000
|
unkown
|
page read and write
|
|
|
|
221DEE6F000
|
unkown
|
page read and write
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
1DC94A70000
|
unkown image
|
page readonly
|
|
|
|
E900000
|
heap private
|
page read and write
|
|
|
|
3A00000
|
unkown image
|
page readonly
|
|
|
|
EB2F000
|
unkown
|
page read and write
|
|
|
|
168D2000
|
unkown
|
page read and write
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
1DC95000000
|
unkown image
|
page readonly
|
|
|
|
15700000
|
heap private
|
page read and write
|
|
|
|
1DC94E00000
|
unkown image
|
page readonly
|
|
|
|
2F0D000
|
unkown image
|
page readonly
|
|
|
|
4BD7000
|
stack
|
page read and write
|
|
|
|
FEEE6BC000
|
unkown
|
page read and write
|
|
|
|
16829000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
7F0C2000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7110000
|
unkown image
|
page readonly
|
|
|
|
2EEB000
|
unkown image
|
page readonly
|
|
|
|
1DC94A90000
|
heap default
|
page read and write
|
|
|
|
7DF526D50000
|
unkown image
|
page readonly
|
|
|
|
7F3A0000
|
unkown image
|
page readonly
|
|
|
|
1661A000
|
unkown
|
page read and write
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
D175000
|
unkown
|
page read and write
|
|
|
|
7FF511273000
|
unkown image
|
page readonly
|
|
|
|
EB48000
|
unkown
|
page read and write
|
|
|
|
E7C0000
|
unkown
|
page read and write
|
|
|
|
131D5000
|
unkown
|
page read and write
|
|
|
|
7FF5477E3000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3D50000
|
unkown image
|
page readonly
|
|
|
|
1C475000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
1E893490000
|
unkown image
|
page readonly
|
|
|
|
FEEF0FF000
|
stack
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
D509000
|
unkown
|
page read and write
|
|
|
|
7FF5A15D3000
|
unkown image
|
page readonly
|
|
|
|
1E89363C000
|
unkown
|
page read and write
|
|
|
|
1C9BC000
|
unkown
|
page read and write
|
|
|
|
7FF5D3D90000
|
unkown image
|
page readonly
|
|
|
|
16897000
|
unkown
|
page read and write
|
|
|
|
131B5000
|
unkown
|
page read and write
|
|
|
|
1B72ABEB000
|
heap default
|
page read and write
|
|
|
|
7FF5C2CE4000
|
unkown image
|
page readonly
|
|
|
|
1C3C4000
|
unkown
|
page read and write
|
|
|
|
221DEE4D000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
168E0000
|
unkown
|
page read and write
|
|
|
|
7FF54A1AA000
|
unkown image
|
page readonly
|
|
|
|
7FF5477A7000
|
unkown image
|
page readonly
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
1C02B000
|
unkown
|
page read and write
|
|
|
|
131D8000
|
unkown
|
page read and write
|
|
|
|
1091000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
7FF511426000
|
unkown image
|
page readonly
|
|
|
|
D406000
|
unkown
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
7FF542F77000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE342000
|
unkown image
|
page readonly
|
|
|
|
2EF5000
|
unkown image
|
page readonly
|
|
|
|
132E8000
|
unkown
|
page read and write
|
|
|
|
13710000
|
unkown
|
page read and write
|
|
|
|
2202FEB2000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E8F000
|
unkown image
|
page readonly
|
|
|
|
221DEE61000
|
unkown
|
page read and write
|
|
|
|
1688A000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
1E893671000
|
unkown
|
page read and write
|
|
|
|
7FF5319AF000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
236DEFF000
|
stack
|
page read and write
|
|
|
|
167AB000
|
unkown
|
page read and write
|
|
|
|
1668C000
|
unkown
|
page read and write
|
|
|
|
1C513000
|
unkown
|
page read and write
|
|
|
|
2D77000
|
unkown image
|
page readonly
|
|
|
|
348E000
|
stack
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
EB86000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF53199B000
|
unkown image
|
page readonly
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
2F81000
|
unkown image
|
page readonly
|
|
|
|
2F2D000
|
unkown image
|
page readonly
|
|
|
|
7DF5E9932000
|
unkown image
|
page readonly
|
|
|
|
2202F1E0000
|
unkown
|
page read and write
|
|
|
|
1DC94D00000
|
unkown
|
page read and write
|
|
|
|
548ED7B000
|
stack
|
page read and write
|
|
|
|
7FF54A195000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
1E893627000
|
unkown
|
page read and write
|
|
|
|
2202F401000
|
unkown
|
page read and write
|
|
|
|
221DEE4B000
|
unkown
|
page read and write
|
|
|
|
26030C00000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
C50000
|
unkown image
|
page readonly
|
|
|
|
2F7B000
|
unkown image
|
page readonly
|
|
|
|
BCB000
|
unkown
|
page read and write
|
|
|
|
A82BE7F000
|
stack
|
page read and write
|
|
|
|
7FF5A180F000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
1C584000
|
unkown
|
page read and write
|
|
|
|
FAE0000
|
unkown
|
page read and write
|
|
|
|
131D8000
|
unkown
|
page read and write
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
16829000
|
unkown
|
page read and write
|
|
|
|
2A6D5F80000
|
heap default
|
page read and write
|
|
|
|
7FF51C55A000
|
unkown image
|
page readonly
|
|
|
|
7FF5473FA000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8602000
|
unkown image
|
page readonly
|
|
|
|
166E6000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown image
|
page readonly
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
FADC000
|
stack
|
page read and write
|
|
|
|
7DF558990000
|
unkown image
|
page readonly
|
|
|
|
13163000
|
unkown
|
page read and write
|
|
|
|
28558A61000
|
unkown
|
page read and write
|
|
|
|
1B72ADC0000
|
unkown
|
page read and write
|
|
|
|
7CB0000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
D40000
|
unkown image
|
page readonly
|
|
|
|
1DC94D13000
|
unkown
|
page read and write
|
|
|
|
EB3C000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A2D000
|
unkown image
|
page readonly
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
36B0000
|
unkown image
|
page readonly
|
|
|
|
1C277000
|
unkown
|
page read and write
|
|
|
|
7FF51C3FF000
|
unkown image
|
page readonly
|
|
|
|
167C8000
|
unkown
|
page read and write
|
|
|
|
7FF56BDAE000
|
unkown image
|
page readonly
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
7FF51C3F0000
|
unkown image
|
page readonly
|
|
|
|
DE40000
|
unkown image
|
page readonly
|
|
|
|
3725000
|
unkown
|
page read and write
|
|
|
|
19676E4A000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
7FF59C6FE000
|
unkown image
|
page readonly
|
|
|
|
7FF56BB93000
|
unkown image
|
page readonly
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
1664B000
|
unkown
|
page read and write
|
|
|
|
C50000
|
unkown image
|
page readonly
|
|
|
|
166FC000
|
unkown
|
page read and write
|
|
|
|
236E17A000
|
stack
|
page read and write
|
|
|
|
7FF5D3AEF000
|
unkown image
|
page readonly
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
20D3E4D0000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
131A1000
|
unkown
|
page read and write
|
|
|
|
167CF000
|
unkown
|
page read and write
|
|
|
|
EB31000
|
unkown
|
page read and write
|
|
|
|
2202E960000
|
unkown image
|
page readonly
|
|
|
|
7DF45DA20000
|
unkown image
|
page readonly
|
|
|
|
7FF542FB5000
|
unkown image
|
page readonly
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
1B72B010000
|
unkown image
|
page readonly
|
|
|
|
1C3CF000
|
unkown
|
page read and write
|
|
|
|
16615000
|
unkown
|
page read and write
|
|
|
|
1C964000
|
unkown
|
page read and write
|
|
|
|
7FF54A226000
|
unkown image
|
page readonly
|
|
|
|
1B72A9C0000
|
unkown image
|
page readonly
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
133AD000
|
unkown
|
page read and write
|
|
|
|
DC50000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CDD000
|
unkown image
|
page readonly
|
|
|
|
1E893480000
|
heap private
|
page read and write
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
FD0F000
|
unkown
|
page read and write
|
|
|
|
2202FE54000
|
unkown
|
page read and write
|
|
|
|
28558A85000
|
unkown
|
page read and write
|
|
|
|
16871000
|
unkown
|
page read and write
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
2202FDE0000
|
unkown
|
page read and write
|
|
|
|
30B72BB000
|
unkown
|
page read and write
|
|
|
|
1CC0F000
|
unkown
|
page read and write
|
|
|
|
221DEE6B000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown image
|
page readonly
|
|
|
|
2D77000
|
unkown image
|
page readonly
|
|
|
|
26030AA0000
|
heap default
|
page read and write
|
|
|
|
7FF5A8989000
|
unkown image
|
page readonly
|
|
|
|
2EC4000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
7FF547782000
|
unkown image
|
page readonly
|
|
|
|
2202F9C0000
|
unkown image
|
page readonly
|
|
|
|
131D8000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
7DF5B7112000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2CBF000
|
unkown image
|
page readonly
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
2202FEEF000
|
unkown
|
page read and write
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
100E000
|
stack
|
page read and write
|
|
|
|
7DF5BE350000
|
unkown image
|
page readonly
|
|
|
|
FB90000
|
unkown
|
page read and write
|
|
|
|
1C26F000
|
unkown
|
page read and write
|
|
|
|
7FF5477D9000
|
unkown image
|
page readonly
|
|
|
|
2B3DE7B000
|
stack
|
page read and write
|
|
|
|
2DF74E65000
|
unkown
|
page read and write
|
|
|
|
E850000
|
unkown
|
page read and write
|
|
|
|
7FF543046000
|
unkown image
|
page readonly
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
1C981000
|
unkown
|
page read and write
|
|
|
|
7FF511357000
|
unkown image
|
page readonly
|
|
|
|
1085000
|
unkown
|
page read and write
|
|
|
|
1C97E000
|
unkown
|
page read and write
|
|
|
|
7FF51C376000
|
unkown image
|
page readonly
|
|
|
|
1C2F9000
|
unkown
|
page read and write
|
|
|
|
221DF200000
|
unkown image
|
page readonly
|
|
|
|
7198DF9000
|
stack
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
1315F000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
1C51B000
|
unkown
|
page read and write
|
|
|
|
1C238000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
131C5000
|
unkown
|
page read and write
|
|
|
|
7FF54303F000
|
unkown image
|
page readonly
|
|
|
|
2B96000
|
unkown image
|
page readonly
|
|
|
|
167B7000
|
unkown
|
page read and write
|
|
|
|
1BFB0000
|
unkown
|
page read and write
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
1C30E000
|
unkown
|
page read and write
|
|
|
|
2202FE00000
|
unkown
|
page read and write
|
|
|
|
7FF56BEF9000
|
unkown image
|
page readonly
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
1329D000
|
unkown
|
page read and write
|
|
|
|
EB03000
|
unkown
|
page read and write
|
|
|
|
168B9000
|
unkown
|
page read and write
|
|
|
|
2202FDF0000
|
unkown
|
page read and write
|
|
|
|
1679A000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
7FF56BED8000
|
unkown image
|
page readonly
|
|
|
|
2F8C000
|
unkown image
|
page readonly
|
|
|
|
221DEE13000
|
unkown
|
page read and write
|
|
|
|
20D3EB80000
|
unkown image
|
page readonly
|
|
|
|
13222000
|
unkown
|
page read and write
|
|
|
|
1C3D4000
|
unkown
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
1C47A000
|
unkown
|
page read and write
|
|
|
|
7FF5D3EF0000
|
unkown image
|
page readonly
|
|
|
|
59766FB000
|
unkown
|
page read and write
|
|
|
|
7D90000
|
unkown
|
page read and write
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
7FF542FE5000
|
unkown image
|
page readonly
|
|
|
|
1C506000
|
unkown
|
page read and write
|
|
|
|
1C57A000
|
unkown
|
page read and write
|
|
|
|
7FF5318FA000
|
unkown image
|
page readonly
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
15BF7000
|
unkown
|
page read and write
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
131B9000
|
unkown
|
page read and write
|
|
|
|
5976B7E000
|
stack
|
page read and write
|
|
|
|
7FF5D3EED000
|
unkown image
|
page readonly
|
|
|
|
3327000
|
heap private
|
page read and write
|
|
|
|
7DF55FB52000
|
unkown image
|
page readonly
|
|
|
|
1DC94C4C000
|
unkown
|
page read and write
|
|
|
|
1E893702000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
16B8B000
|
unkown
|
page read and write
|
|
|
|
2A6D5EF0000
|
unkown
|
page read and write
|
|
|
|
2F7F000
|
heap default
|
page read and write
|
|
|
|
6220000
|
unkown image
|
page readonly
|
|
|
|
7FF5A165F000
|
unkown image
|
page readonly
|
|
|
|
7DF4BC210000
|
unkown image
|
page readonly
|
|
|
|
36EE000
|
stack
|
page read and write
|
|
|
|
2DF74EBF000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
2202E850000
|
unkown image
|
page readonly
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
1689B000
|
unkown
|
page read and write
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
16A53000
|
unkown
|
page read and write
|
|
|
|
30B787E000
|
stack
|
page read and write
|
|
|
|
2FCD000
|
heap default
|
page read and write
|
|
|
|
3000000
|
stack
|
page read and write
|
|
|
|
A82BFFF000
|
stack
|
page read and write
|
|
|
|
1313C000
|
unkown
|
page read and write
|
|
|
|
1E893F75000
|
unkown
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F47000
|
unkown image
|
page readonly
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
221DEC00000
|
unkown image
|
page read and write
|
|
|
|
7DF532170000
|
unkown image
|
page readonly
|
|
|
|
EB7A000
|
unkown
|
page read and write
|
|
|
|
236E07F000
|
stack
|
page read and write
|
|
|
|
16A4E000
|
unkown
|
page read and write
|
|
|
|
EAA0000
|
unkown
|
page read and write
|
|
|
|
7FF54788B000
|
unkown image
|
page readonly
|
|
|
|
1089000
|
unkown
|
page read and write
|
|
|
|
1E893FB2000
|
unkown
|
page read and write
|
|
|
|
7FF56BECC000
|
unkown image
|
page readonly
|
|
|
|
7FF51C83E000
|
unkown image
|
page readonly
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
2B3DF7B000
|
stack
|
page read and write
|
|
|
|
7FF5D3DF3000
|
unkown image
|
page readonly
|
|
|
|
1738D000
|
unkown
|
page read and write
|
|
|
|
7DF5D85F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5A895C000
|
unkown image
|
page readonly
|
|
|
|
7FF54A244000
|
unkown image
|
page readonly
|
|
|
|
1E893F91000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
7DF558970000
|
unkown image
|
page readonly
|
|
|
|
1E893FD2000
|
unkown
|
page read and write
|
|
|
|
7DF5472A2000
|
unkown image
|
page readonly
|
|
|
|
D730000
|
unkown
|
page read and write
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
7DF558980000
|
unkown image
|
page readonly
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
2EB1000
|
unkown image
|
page readonly
|
|
|
|
D4136FF000
|
stack
|
page read and write
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
19677460000
|
unkown image
|
page readonly
|
|
|
|
2B3DFFF000
|
stack
|
page read and write
|
|
|
|
2EDB000
|
heap default
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
7FF51C79D000
|
unkown image
|
page readonly
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
2202FA00000
|
unkown image
|
page readonly
|
|
|
|
1357000
|
heap private
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
7FF510F29000
|
unkown image
|
page readonly
|
|
|
|
1E8936EC000
|
unkown
|
page read and write
|
|
|
|
8200000
|
unkown
|
page read and write
|
|
|
|
168D2000
|
unkown
|
page read and write
|
|
|
|
7DF532180000
|
unkown image
|
page readonly
|
|
|
|
6B1000
|
unkown
|
page read and write
|
|
|
|
7FF5470E4000
|
unkown image
|
page readonly
|
|
|
|
1CA64000
|
unkown
|
page read and write
|
|
|
|
7FF51C75C000
|
unkown image
|
page readonly
|
|
|
|
3800000
|
unkown image
|
page readonly
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
ED10000
|
heap private
|
page read and write
|
|
|
|
7FF5A8879000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2CCB000
|
unkown image
|
page readonly
|
|
|
|
E52000
|
unkown
|
page read and write
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
28558A6F000
|
unkown
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
166F6000
|
unkown
|
page read and write
|
|
|
|
15ED7000
|
unkown
|
page read and write
|
|
|
|
7FF5C2C65000
|
unkown image
|
page readonly
|
|
|
|
1C02C000
|
unkown
|
page read and write
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
D4134FE000
|
stack
|
page read and write
|
|
|
|
7DF55FB70000
|
unkown image
|
page readonly
|
|
|
|
EB4F000
|
unkown
|
page read and write
|
|
|
|
1B72A9B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E9940000
|
unkown image
|
page readonly
|
|
|
|
26030C70000
|
unkown
|
page read and write
|
|
|
|
1B72AAB0000
|
unkown
|
page read and write
|
|
|
|
E5C0000
|
unkown
|
page read and write
|
|
|
|
E34F000
|
stack
|
page read and write
|
|
|
|
1317E000
|
unkown
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
DDEE000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F37000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
heap default
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F2C000
|
unkown image
|
page readonly
|
|
|
|
1E893F2C000
|
unkown
|
page read and write
|
|
|
|
13231000
|
unkown
|
page read and write
|
|
|
|
168E6000
|
unkown
|
page read and write
|
|
|
|
EB7F000
|
unkown
|
page read and write
|
|
|
|
EB6A000
|
unkown
|
page read and write
|
|
|
|
7FF5318E9000
|
unkown image
|
page readonly
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
221DEE7E000
|
unkown
|
page read and write
|
|
|
|
221DEE64000
|
unkown
|
page read and write
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
7FF54789D000
|
unkown image
|
page readonly
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
7FF51C31F000
|
unkown image
|
page readonly
|
|
|
|
7DF5818C0000
|
unkown image
|
page readonly
|
|
|
|
1C32C000
|
unkown
|
page read and write
|
|
|
|
15840000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
unkown image
|
page readonly
|
|
|
|
2DF74D10000
|
unkown image
|
page readonly
|
|
|
|
3320000
|
heap private
|
page read and write
|
|
|
|
4BF0000
|
heap private
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
15BF6000
|
unkown
|
page read and write
|
|
|
|
7DF558990000
|
unkown image
|
page readonly
|
|
|
|
221DEE00000
|
unkown
|
page read and write
|
|
|
|
1C98E000
|
unkown
|
page read and write
|
|
|
|
7FF5A1717000
|
unkown image
|
page readonly
|
|
|
|
20D3EA00000
|
unkown image
|
page readonly
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
ED00000
|
unkown
|
page read and write
|
|
|
|
2EF9000
|
unkown image
|
page readonly
|
|
|
|
1682B000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
7FF56BF78000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3F83000
|
unkown image
|
page readonly
|
|
|
|
7FF54A23D000
|
unkown image
|
page readonly
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
1C57A000
|
unkown
|
page read and write
|
|
|
|
7FF56BD83000
|
unkown image
|
page readonly
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
108C000
|
unkown
|
page read and write
|
|
|
|
2F64000
|
heap default
|
page read and write
|
|
|
|
16727000
|
unkown
|
page read and write
|
|
|
|
19677602000
|
unkown
|
page read and write
|
|
|
|
19676E47000
|
unkown
|
page read and write
|
|
|
|
2DF750D0000
|
unkown image
|
page readonly
|
|
|
|
1C966000
|
unkown
|
page read and write
|
|
|
|
548EEF7000
|
stack
|
page read and write
|
|
|
|
1C30B000
|
unkown
|
page read and write
|
|
|
|
132A8000
|
unkown
|
page read and write
|
|
|
|
2DF74D20000
|
unkown image
|
page readonly
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
1C2F1000
|
unkown
|
page read and write
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
1C32E000
|
unkown
|
page read and write
|
|
|
|
236E67F000
|
stack
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
1C96C000
|
unkown
|
page read and write
|
|
|
|
7DF55FB62000
|
unkown image
|
page readonly
|
|
|
|
236E27F000
|
stack
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
16637000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
7FF5D3FA5000
|
unkown image
|
page readonly
|
|
|
|
16613000
|
unkown
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
7FF51122E000
|
unkown image
|
page readonly
|
|
|
|
221DEE46000
|
unkown
|
page read and write
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
22034108000
|
unkown
|
page read and write
|
|
|
|
7DF5472B2000
|
unkown image
|
page readonly
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown image
|
page readonly
|
|
|
|
960000
|
heap private
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
7DF5472C0000
|
unkown image
|
page readonly
|
|
|
|
7FF51C553000
|
unkown image
|
page readonly
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
EB3C000
|
unkown
|
page read and write
|
|
|
|
1313E000
|
unkown
|
page read and write
|
|
|
|
166E5000
|
unkown
|
page read and write
|
|
|
|
1CBA8000
|
unkown
|
page read and write
|
|
|
|
16829000
|
unkown
|
page read and write
|
|
|
|
1C475000
|
unkown
|
page read and write
|
|
|
|
2F05000
|
unkown image
|
page readonly
|
|
|
|
2202F358000
|
unkown
|
page read and write
|
|
|
|
7FF51C7D5000
|
unkown image
|
page readonly
|
|
|
|
1680D000
|
unkown
|
page read and write
|
|
|
|
7FF51C55C000
|
unkown image
|
page readonly
|
|
|
|
2EF1000
|
unkown image
|
page readonly
|
|
|
|
1DC94D08000
|
unkown
|
page read and write
|
|
|
|
7FF54A134000
|
unkown image
|
page readonly
|
|
|
|
7FF51C017000
|
unkown image
|
page readonly
|
|
|
|
1C303000
|
unkown
|
page read and write
|
|
|
|
7FF542E1D000
|
unkown image
|
page readonly
|
|
|
|
7DF47F780000
|
unkown image
|
page readonly
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
1663E000
|
unkown
|
page read and write
|
|
|
|
1B72AB40000
|
unkown
|
page read and write
|
|
|
|
166B4000
|
unkown
|
page read and write
|
|
|
|
D485000
|
unkown
|
page read and write
|
|
|
|
16822000
|
unkown
|
page read and write
|
|
|
|
7FF5A8993000
|
unkown image
|
page readonly
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
28558B02000
|
unkown
|
page read and write
|
|
|
|
548EA7C000
|
unkown
|
page read and write
|
|
|
|
C9DE000
|
unkown
|
page read and write
|
|
|
|
7FF54786B000
|
unkown image
|
page readonly
|
|
|
|
133D5000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
7FF547774000
|
unkown image
|
page readonly
|
|
|
|
EB23000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
236E1FF000
|
stack
|
page read and write
|
|
|
|
28558B13000
|
unkown
|
page read and write
|
|
|
|
166B4000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
2A6D5DC0000
|
unkown image
|
page readonly
|
|
|
|
221DED50000
|
unkown image
|
page readonly
|
|
|
|
132D3000
|
unkown
|
page read and write
|
|
|
|
2EEB000
|
unkown image
|
page readonly
|
|
|
|
C9F6000
|
unkown
|
page read and write
|
|
|
|
2202FA10000
|
unkown image
|
page readonly
|
|
|
|
FEEEBFD000
|
stack
|
page read and write
|
|
|
|
136F0000
|
unkown
|
page read and write
|
|
|
|
FC8F000
|
unkown
|
page read and write
|
|
|
|
26031000000
|
unkown image
|
page readonly
|
|
|
|
7FF54A25B000
|
unkown image
|
page readonly
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
2202E980000
|
unkown
|
page read and write
|
|
|
|
1CBA3000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
7FF54A14C000
|
unkown image
|
page readonly
|
|
|
|
7FF56BF7F000
|
unkown image
|
page readonly
|
|
|
|
1CC07000
|
unkown
|
page read and write
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
1E8936BF000
|
unkown
|
page read and write
|
|
|
|
1C470000
|
unkown
|
page read and write
|
|
|
|
964000
|
heap private
|
page read and write
|
|
|
|
EB34000
|
unkown
|
page read and write
|
|
|
|
7FF549AB3000
|
unkown image
|
page readonly
|
|
|
|
FD2F000
|
unkown
|
page read and write
|
|
|
|
7FF80000
|
unkown image
|
page readonly
|
|
|
|
7FF54789B000
|
unkown image
|
page readonly
|
|
|
|
3020000
|
stack
|
page read and write
|
|
|
|
DD20000
|
unkown image
|
page readonly
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
EC8E000
|
stack
|
page read and write
|
|
|
|
2DC0000
|
unkown image
|
page readonly
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
236DCFD000
|
stack
|
page read and write
|
|
|
|
F9F26FF000
|
stack
|
page read and write
|
|
|
|
1E893F00000
|
unkown
|
page read and write
|
|
|
|
1B72ABA0000
|
heap default
|
page read and write
|
|
|
|
1205000
|
heap default
|
page read and write
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
115A000
|
unkown image
|
page read and write
|
|
|
|
7FF56BC73000
|
unkown image
|
page readonly
|
|
|
|
1010000
|
unkown
|
page read and write
|
|
|
|
7FF547578000
|
unkown image
|
page readonly
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
132E8000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
1BFB0000
|
unkown
|
page read and write
|
|
|
|
1CB96000
|
unkown
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
26030A40000
|
heap private
|
page read and write
|
|
|
|
28558970000
|
unkown image
|
page readonly
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
19676E13000
|
unkown
|
page read and write
|
|
|
|
13354000
|
unkown
|
page read and write
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
1350000
|
heap private
|
page read and write
|
|
|
|
16A4F000
|
unkown
|
page read and write
|
|
|
|
20D3E490000
|
unkown image
|
page read and write
|
|
|
|
7FF51C767000
|
unkown image
|
page readonly
|
|
|
|
28558A5B000
|
unkown
|
page read and write
|
|
|
|
7DF5818D0000
|
unkown image
|
page readonly
|
|
|
|
67F000
|
stack
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E0E000
|
unkown image
|
page readonly
|
|
|
|
7FF511444000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA89000
|
unkown image
|
page readonly
|
|
|
|
EB86000
|
unkown
|
page read and write
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
1687C000
|
unkown
|
page read and write
|
|
|
|
EB6B000
|
unkown
|
page read and write
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
1B72A970000
|
unkown image
|
page read and write
|
|
|
|
7FF5A17FB000
|
unkown image
|
page readonly
|
|
|
|
2FC2000
|
heap default
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
1329D000
|
unkown
|
page read and write
|
|
|
|
7FF51C0EA000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE352000
|
unkown image
|
page readonly
|
|
|
|
A82BC7B000
|
stack
|
page read and write
|
|
|
|
167F0000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
7DF5BE342000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3B03000
|
unkown image
|
page readonly
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
2F85000
|
unkown image
|
page readonly
|
|
|
|
7FF54786E000
|
unkown image
|
page readonly
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
2202F1C1000
|
unkown
|
page read and write
|
|
|
|
7FF549F67000
|
unkown image
|
page readonly
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
2EDA000
|
unkown image
|
page readonly
|
|
|
|
7FF51C561000
|
unkown image
|
page readonly
|
|
|
|
19676E02000
|
unkown
|
page read and write
|
|
|
|
E3AD000
|
stack
|
page read and write
|
|
|
|
16B8B000
|
unkown
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
7FF92000
|
unkown image
|
page readonly
|
|
|
|
E750000
|
unkown
|
page read and write
|
|
|
|
1C470000
|
unkown
|
page read and write
|
|
|
|
7DF5BE352000
|
unkown image
|
page readonly
|
|
|
|
7FF51C63C000
|
unkown image
|
page readonly
|
|
|
|
2F24000
|
unkown image
|
page readonly
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
D087000
|
unkown
|
page read and write
|
|
|
|
1682B000
|
unkown
|
page read and write
|
|
|
|
EB32000
|
unkown
|
page read and write
|
|
|
|
1335F000
|
unkown
|
page read and write
|
|
|
|
167F2000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
FD06000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
16A1D000
|
unkown
|
page read and write
|
|
|
|
2F1D000
|
unkown image
|
page readonly
|
|
|
|
28558A55000
|
unkown
|
page read and write
|
|
|
|
7FF531994000
|
unkown image
|
page readonly
|
|
|
|
1381000
|
unkown image
|
page readonly
|
|
|
|
7FF56BE34000
|
unkown image
|
page readonly
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
7DF558982000
|
unkown image
|
page readonly
|
|
|
|
1C518000
|
unkown
|
page read and write
|
|
|
|
28559050000
|
unkown image
|
page readonly
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
EB0D000
|
unkown
|
page read and write
|
|
|
|
1C3C7000
|
unkown
|
page read and write
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
7DF5472A2000
|
unkown image
|
page readonly
|
|
|
|
EB53000
|
unkown
|
page read and write
|
|
|
|
7FF5A1775000
|
unkown image
|
page readonly
|
|
|
|
2DF74E13000
|
unkown
|
page read and write
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
7F0D0000
|
unkown image
|
page readonly
|
|
|
|
1C584000
|
unkown
|
page read and write
|
|
|
|
EB7F000
|
unkown
|
page read and write
|
|
|
|
5976CFE000
|
stack
|
page read and write
|
|
|
|
16840000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E2E000
|
unkown image
|
page readonly
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D402B000
|
unkown image
|
page readonly
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
13387000
|
unkown
|
page read and write
|
|
|
|
1B72AB60000
|
unkown
|
page read and write
|
|
|
|
7FF5A1749000
|
unkown image
|
page readonly
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
7DF532162000
|
unkown image
|
page readonly
|
|
|
|
2202EAC0000
|
unkown
|
page read and write
|
|
|
|
1C50E000
|
unkown
|
page read and write
|
|
|
|
1C3BF000
|
unkown
|
page read and write
|
|
|
|
EB2F000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F58000
|
unkown image
|
page readonly
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
7DF456840000
|
unkown image
|
page readonly
|
|
|
|
7FF54A178000
|
unkown image
|
page readonly
|
|
|
|
1688F000
|
unkown
|
page read and write
|
|
|
|
1C3CF000
|
unkown
|
page read and write
|
|
|
|
220341F0000
|
unkown
|
page read and write
|
|
|
|
1C2D1000
|
unkown
|
page read and write
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
7DF5818B2000
|
unkown image
|
page readonly
|
|
|
|
1334D000
|
unkown
|
page read and write
|
|
|
|
16701000
|
unkown
|
page read and write
|
|
|
|
26030C13000
|
unkown
|
page read and write
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
131E9000
|
unkown
|
page read and write
|
|
|
|
DF8F000
|
stack
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
196770D0000
|
unkown image
|
page readonly
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
7FF5318F3000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
169DA000
|
unkown
|
page read and write
|
|
|
|
7FF56BA98000
|
unkown image
|
page readonly
|
|
|
|
7FF51C3F7000
|
unkown image
|
page readonly
|
|
|
|
7FF51145F000
|
unkown image
|
page readonly
|
|
|
|
7FF5113AA000
|
unkown image
|
page readonly
|
|
|
|
3728000
|
unkown
|
page read and write
|
|
|
|
9AE000
|
stack
|
page read and write
|
|
|
|
2B8C000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
11A3000
|
unkown image
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
2202EA13000
|
unkown
|
page read and write
|
|
|
|
D4135FC000
|
stack
|
page read and write
|
|
|
|
D725000
|
unkown
|
page read and write
|
|
|
|
1330000
|
unkown image
|
page readonly
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
7F3A2000
|
unkown image
|
page readonly
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
1CC0C000
|
unkown
|
page read and write
|
|
|
|
E710000
|
unkown image
|
page readonly
|
|
|
|
EB66000
|
unkown
|
page read and write
|
|
|
|
1C3D4000
|
unkown
|
page read and write
|
|
|
|
2202FDC0000
|
unkown
|
page read and write
|
|
|
|
1E893B80000
|
unkown image
|
page readonly
|
|
|
|
2FF0000
|
stack
|
page read and write
|
|
|
|
1DC94C8B000
|
unkown
|
page read and write
|
|
|
|
1661F000
|
unkown
|
page read and write
|
|
|
|
7DF5472C0000
|
unkown image
|
page readonly
|
|
|
|
7FF54A1A3000
|
unkown image
|
page readonly
|
|
|
|
1C3BA000
|
unkown
|
page read and write
|
|
|
|
1663A000
|
unkown
|
page read and write
|
|
|
|
221DEC40000
|
unkown image
|
page readonly
|
|
|
|
DC0000
|
unkown image
|
page readonly
|
|
|
|
7F0C0000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
1E8936FA000
|
unkown
|
page read and write
|
|
|
|
1B72ACA0000
|
unkown image
|
page readonly
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
221DEE7B000
|
unkown
|
page read and write
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
2F1D000
|
unkown image
|
page readonly
|
|
|
|
6A9000
|
unkown
|
page read and write
|
|
|
|
15EDC000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
EAE7000
|
unkown
|
page read and write
|
|
|
|
2202F200000
|
unkown
|
page read and write
|
|
|
|
7FF542C53000
|
unkown image
|
page readonly
|
|
|
|
2A6D6080000
|
unkown image
|
page readonly
|
|
|
|
132A4000
|
unkown
|
page read and write
|
|
|
|
16A57000
|
unkown
|
page read and write
|
|
|
|
131CE000
|
unkown
|
page read and write
|
|
|
|
7FF5D3EF7000
|
unkown image
|
page readonly
|
|
|
|
20D3EC90000
|
unkown
|
page read and write
|
|
|
|
7FF51C7BA000
|
unkown image
|
page readonly
|
|
|
|
2D96000
|
unkown image
|
page readonly
|
|
|
|
13690000
|
unkown
|
page read and write
|
|
|
|
2DF74ED0000
|
unkown
|
page read and write
|
|
|
|
7FF5C29B9000
|
unkown image
|
page readonly
|
|
|
|
1C2E1000
|
unkown
|
page read and write
|
|
|
|
28558940000
|
heap private
|
page read and write
|
|
|
|
1B72B390000
|
unkown image
|
page readonly
|
|
|
|
168AF000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
EB32000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
2202FEB0000
|
unkown
|
page read and write
|
|
|
|
22034240000
|
unkown
|
page read and write
|
|
|
|
7FF547866000
|
unkown image
|
page readonly
|
|
|
|
7FF5477B8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3F75000
|
unkown image
|
page readonly
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
D0E6000
|
unkown
|
page read and write
|
|
|
|
163F0000
|
heap private
|
page read and write
|
|
|
|
7FF51C836000
|
unkown image
|
page readonly
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
2B96000
|
unkown image
|
page readonly
|
|
|
|
7FF531976000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3F22000
|
unkown image
|
page readonly
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
131C2000
|
unkown
|
page read and write
|
|
|
|
1679A000
|
unkown
|
page read and write
|
|
|
|
1C26C000
|
unkown
|
page read and write
|
|
|
|
9BA000
|
heap private
|
page read and write
|
|
|
|
167EA000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
166E5000
|
unkown
|
page read and write
|
|
|
|
15830000
|
heap private
|
page read and write
|
|
|
|
680000
|
heap default
|
page read and write
|
|
|
|
CAF8000
|
unkown
|
page read and write
|
|
|
|
2A6D5F8B000
|
heap default
|
page read and write
|
|
|
|
236DDFB000
|
stack
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
7DF558980000
|
unkown image
|
page readonly
|
|
|
|
1C3BF000
|
unkown
|
page read and write
|
|
|
|
1E8935C0000
|
unkown image
|
page readonly
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
E24E000
|
stack
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
7FF54A22B000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE340000
|
unkown image
|
page readonly
|
|
|
|
7FF549FFD000
|
unkown image
|
page readonly
|
|
|
|
1C57C000
|
unkown
|
page read and write
|
|
|
|
2F05000
|
unkown image
|
page readonly
|
|
|
|
2F05000
|
unkown image
|
page readonly
|
|
|
|
2DF74E70000
|
unkown
|
page read and write
|
|
|
|
20D3EC60000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
CADC000
|
unkown
|
page read and write
|
|
|
|
22034124000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
7FF51C85E000
|
unkown image
|
page readonly
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
132E0000
|
unkown
|
page read and write
|
|
|
|
D738000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
16DBA000
|
unkown
|
page read and write
|
|
|
|
1C57C000
|
unkown
|
page read and write
|
|
|
|
7F3A0000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7100000
|
unkown image
|
page readonly
|
|
|
|
7FF51C5C0000
|
unkown image
|
page readonly
|
|
|
|
1370000
|
unkown image
|
page readonly
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
7FF5A1665000
|
unkown image
|
page readonly
|
|
|
|
7FF5A82B8000
|
unkown image
|
page readonly
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
7FF51C623000
|
unkown image
|
page readonly
|
|
|
|
7FF5D401D000
|
unkown image
|
page readonly
|
|
|
|
1DC94C5E000
|
unkown
|
page read and write
|
|
|
|
13387000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7DF532170000
|
unkown image
|
page readonly
|
|
|
|
EB89000
|
unkown
|
page read and write
|
|
|
|
7FF51C6BF000
|
unkown image
|
page readonly
|
|
|
|
2202FF02000
|
unkown
|
page read and write
|
|
|
|
D109000
|
unkown
|
page read and write
|
|
|
|
7F3B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3D3D000
|
unkown image
|
page readonly
|
|
|
|
22034220000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
D063000
|
unkown
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
131E9000
|
unkown
|
page read and write
|
|
|
|
12060000
|
unkown
|
page read and write
|
|
|
|
1C30B000
|
unkown
|
page read and write
|
|
|
|
2F2D000
|
unkown image
|
page readonly
|
|
|
|
EB42000
|
unkown
|
page read and write
|
|
|
|
7FF51C83B000
|
unkown image
|
page readonly
|
|
|
|
1B72A990000
|
unkown image
|
page readonly
|
|
|
|
7FF54307F000
|
unkown image
|
page readonly
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
1C2CF000
|
unkown
|
page read and write
|
|
|
|
13710000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
168DD000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
3728000
|
unkown
|
page read and write
|
|
|
|
1B72B210000
|
unkown image
|
page readonly
|
|
|
|
7FF51C86D000
|
unkown image
|
page readonly
|
|
|
|
1679F000
|
unkown
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5428B2000
|
unkown image
|
page readonly
|
|
|
|
20D3E63D000
|
unkown
|
page read and write
|
|
|
|
30B7B7F000
|
stack
|
page read and write
|
|
|
|
FC0000
|
unkown image
|
page read and write
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
7FF5A15AD000
|
unkown image
|
page readonly
|
|
|
|
1C2DC000
|
unkown
|
page read and write
|
|
|
|
1C477000
|
unkown
|
page read and write
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
19676D80000
|
unkown image
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
FC7E000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
167F0000
|
unkown
|
page read and write
|
|
|
|
1E893613000
|
unkown
|
page read and write
|
|
|
|
20D3E4B0000
|
unkown image
|
page readonly
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
548EB7E000
|
stack
|
page read and write
|
|
|
|
1E8936AF000
|
unkown
|
page read and write
|
|
|
|
548F0FB000
|
stack
|
page read and write
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
1B72ABA8000
|
heap default
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
E720000
|
unkown
|
page read and write
|
|
|
|
28558CD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5318DD000
|
unkown image
|
page readonly
|
|
|
|
BC0000
|
unkown image
|
page readonly
|
|
|
|
16717000
|
unkown
|
page read and write
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
1B72AE00000
|
unkown
|
page read and write
|
|
|
|
7DF5E9940000
|
unkown image
|
page readonly
|
|
|
|
2B3E0F7000
|
stack
|
page read and write
|
|
|
|
2B8C000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
E780000
|
unkown
|
page read and write
|
|
|
|
EB6D000
|
unkown
|
page read and write
|
|
|
|
19676E49000
|
unkown
|
page read and write
|
|
|
|
221DEE4A000
|
unkown
|
page read and write
|
|
|
|
133E1000
|
unkown
|
page read and write
|
|
|
|
7DF5B7120000
|
unkown image
|
page readonly
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
7FF5C2C0D000
|
unkown image
|
page readonly
|
|
|
|
1E893F80000
|
unkown
|
page read and write
|
|
|
|
1C2DC000
|
unkown
|
page read and write
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
1C506000
|
unkown
|
page read and write
|
|
|
|
7FF5A17FE000
|
unkown image
|
page readonly
|
|
|
|
12DF000
|
unkown image
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
1380000
|
unkown image
|
page readonly
|
|
|
|
3A0000
|
heap default
|
page read and write
|
|
|
|
285589B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5319AF000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
7FF56BF03000
|
unkown image
|
page readonly
|
|
|
|
1E8934C0000
|
unkown image
|
page readonly
|
|
|
|
2DF74EC7000
|
unkown
|
page read and write
|
|
|
|
167EA000
|
unkown
|
page read and write
|
|
|
|
1C3BA000
|
unkown
|
page read and write
|
|
|
|
1B72B6E0000
|
unkown
|
page read and write
|
|
|
|
133D5000
|
unkown
|
page read and write
|
|
|
|
132E0000
|
unkown
|
page read and write
|
|
|
|
1DC95402000
|
unkown
|
page read and write
|
|
|
|
13630000
|
unkown
|
page read and write
|
|
|
|
EB77000
|
unkown
|
page read and write
|
|
|
|
2202F8E0000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
7FF5D3DF8000
|
unkown image
|
page readonly
|
|
|
|
C1E8F7E000
|
stack
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
20D3E4B0000
|
unkown image
|
page readonly
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
7FF542F50000
|
unkown image
|
page readonly
|
|
|
|
2B3DD7E000
|
stack
|
page read and write
|
|
|
|
7FF5C2C43000
|
unkown image
|
page readonly
|
|
|
|
1CA4F000
|
unkown
|
page read and write
|
|
|
|
7FF51143D000
|
unkown image
|
page readonly
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
7FF531915000
|
unkown image
|
page readonly
|
|
|
|
2202FEE7000
|
unkown
|
page read and write
|
|
|
|
7FF5A17ED000
|
unkown image
|
page readonly
|
|
|
|
7DF526D52000
|
unkown image
|
page readonly
|
|
|
|
D171000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
13421000
|
unkown
|
page read and write
|
|
|
|
EB7A000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
13114000
|
unkown
|
page read and write
|
|
|
|
FEEF3FE000
|
stack
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF5A12D3000
|
unkown image
|
page readonly
|
|
|
|
168D2000
|
unkown
|
page read and write
|
|
|
|
7FF51C86F000
|
unkown image
|
page readonly
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
16631000
|
unkown
|
page read and write
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
22034121000
|
unkown
|
page read and write
|
|
|
|
2E8D000
|
unkown image
|
page readonly
|
|
|
|
D735000
|
unkown
|
page read and write
|
|
|
|
236D49B000
|
unkown
|
page read and write
|
|
|
|
221DEE60000
|
unkown
|
page read and write
|
|
|
|
16717000
|
unkown
|
page read and write
|
|
|
|
2EA1000
|
unkown image
|
page readonly
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
168B1000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
165E8000
|
unkown
|
page read and write
|
|
|
|
32DE000
|
stack
|
page read and write
|
|
|
|
1040000
|
unkown
|
page read and write
|
|
|
|
1DC94C5E000
|
unkown
|
page read and write
|
|
|
|
2A6D5DE0000
|
unkown image
|
page readonly
|
|
|
|
15640000
|
unkown
|
page read and write
|
|
|
|
131F2000
|
unkown
|
page read and write
|
|
|
|
1C50B000
|
unkown
|
page read and write
|
|
|
|
132E2000
|
unkown
|
page read and write
|
|
|
|
EAB5000
|
unkown
|
page read and write
|
|
|
|
7FF54A199000
|
unkown image
|
page readonly
|
|
|
|
2ED0000
|
unkown image
|
page readonly
|
|
|
|
D463000
|
unkown
|
page read and write
|
|
|
|
2202F318000
|
unkown
|
page read and write
|
|
|
|
7DF5818D0000
|
unkown image
|
page readonly
|
|
|
|
1E893D00000
|
unkown
|
page read and write
|
|
|
|
D325000
|
unkown
|
page read and write
|
|
|
|
3738000
|
unkown
|
page read and write
|
|
|
|
7FF542F8D000
|
unkown image
|
page readonly
|
|
|
|
1688C000
|
unkown
|
page read and write
|
|
|
|
19676E3C000
|
unkown
|
page read and write
|
|
|
|
7FF5473FE000
|
unkown image
|
page readonly
|
|
|
|
FC98000
|
unkown
|
page read and write
|
|
|
|
7FF511399000
|
unkown image
|
page readonly
|
|
|
|
26030C77000
|
unkown
|
page read and write
|
|
|
|
168D8000
|
unkown
|
page read and write
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
13176000
|
unkown
|
page read and write
|
|
|
|
7198D7F000
|
stack
|
page read and write
|
|
|
|
19676E4C000
|
unkown
|
page read and write
|
|
|
|
C9F3000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
1E893713000
|
unkown
|
page read and write
|
|
|
|
1C3CC000
|
unkown
|
page read and write
|
|
|
|
20D3EC90000
|
unkown
|
page read and write
|
|
|
|
7F0B0000
|
unkown image
|
page readonly
|
|
|
|
28558950000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
1C57A000
|
unkown
|
page read and write
|
|
|
|
17459000
|
unkown
|
page read and write
|
|
|
|
CA6000
|
unkown
|
page read and write
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
7FF51C854000
|
unkown image
|
page readonly
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
19676F00000
|
unkown
|
page read and write
|
|
|
|
7FF542FAD000
|
unkown image
|
page readonly
|
|
|
|
133AD000
|
unkown
|
page read and write
|
|
|
|
7FF5D3CF3000
|
unkown image
|
page readonly
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
2EF5000
|
unkown image
|
page readonly
|
|
|
|
1335F000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
FC7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D3D61000
|
unkown image
|
page readonly
|
|
|
|
26030C29000
|
unkown
|
page read and write
|
|
|
|
166AE000
|
unkown
|
page read and write
|
|
|
|
2DF74E8B000
|
unkown
|
page read and write
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
1C47A000
|
unkown
|
page read and write
|
|
|
|
1C2EE000
|
unkown
|
page read and write
|
|
|
|
7FF54A153000
|
unkown image
|
page readonly
|
|
|
|
14C10000
|
unkown
|
page read and write
|
|
|
|
E60E000
|
stack
|
page read and write
|
|
|
|
1360000
|
unkown image
|
page readonly
|
|
|
|
1C477000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
FBED000
|
unkown
|
page read and write
|
|
|
|
D487000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A1B000
|
unkown image
|
page readonly
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown image
|
page readonly
|
|
|
|
13135000
|
unkown
|
page read and write
|
|
|
|
2202F215000
|
unkown
|
page read and write
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
166E3000
|
unkown
|
page read and write
|
|
|
|
7FF56BEC7000
|
unkown image
|
page readonly
|
|
|
|
1E8936D6000
|
unkown
|
page read and write
|
|
|
|
EAB1000
|
unkown
|
page read and write
|
|
|
|
2EC4000
|
unkown image
|
page readonly
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
285589A0000
|
heap default
|
page read and write
|
|
|
|
16B8B000
|
unkown
|
page read and write
|
|
|
|
1089000
|
unkown
|
page read and write
|
|
|
|
EB66000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
E7A0000
|
unkown
|
page read and write
|
|
|
|
13169000
|
unkown
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
22034124000
|
unkown
|
page read and write
|
|
|
|
7198E79000
|
stack
|
page read and write
|
|
|
|
7198CFF000
|
stack
|
page read and write
|
|
|
|
2203410E000
|
unkown
|
page read and write
|
|
|
|
2FA7000
|
unkown
|
page read and write
|
|
|
|
1C470000
|
unkown
|
page read and write
|
|
|
|
7FF511378000
|
unkown image
|
page readonly
|
|
|
|
FC84000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
FEEF2FE000
|
stack
|
page read and write
|
|
|
|
2DF75450000
|
unkown image
|
page readonly
|
|
|
|
7F0C2000
|
unkown image
|
page readonly
|
|
|
|
FCE000
|
stack
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
132E8000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
1C277000
|
unkown
|
page read and write
|
|
|
|
7FF54763D000
|
unkown image
|
page readonly
|
|
|
|
168D8000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
2B3E2FC000
|
stack
|
page read and write
|
|
|
|
7FF5C2C4A000
|
unkown image
|
page readonly
|
|
|
|
132A7000
|
unkown
|
page read and write
|
|
|
|
1DC94C2A000
|
unkown
|
page read and write
|
|
|
|
7FF51C77C000
|
unkown image
|
page readonly
|
|
|
|
2A6D6230000
|
heap private
|
page read and write
|
|
|
|
1C640000
|
unkown
|
page read and write
|
|
|
|
2D96000
|
unkown image
|
page readonly
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
2EEB000
|
unkown image
|
page readonly
|
|
|
|
1C472000
|
unkown
|
page read and write
|
|
|
|
2202FEF5000
|
unkown
|
page read and write
|
|
|
|
26030A50000
|
unkown image
|
page readonly
|
|
|
|
2A6D6200000
|
unkown image
|
page readonly
|
|
|
|
36F0000
|
heap private
|
page read and write
|
|
|
|
1C577000
|
unkown
|
page read and write
|
|
|
|
1CB05000
|
unkown
|
page read and write
|
|
|
|
7FF549EEA000
|
unkown image
|
page readonly
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
7DF55FB60000
|
unkown image
|
page readonly
|
|
|
|
7FF51C7B3000
|
unkown image
|
page readonly
|
|
|
|
A82BEFF000
|
stack
|
page read and write
|
|
|
|
7FF54A142000
|
unkown image
|
page readonly
|
|
|
|
7DF424C20000
|
unkown image
|
page readonly
|
|
|
|
CF0C000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
EB28000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
13322000
|
unkown
|
page read and write
|
|
|
|
CA8F000
|
unkown
|
page read and write
|
|
|
|
7FF51C593000
|
unkown image
|
page readonly
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
2DF75602000
|
unkown
|
page read and write
|
|
|
|
13201000
|
unkown
|
page read and write
|
|
|
|
138D0000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
1C32C000
|
unkown
|
page read and write
|
|
|
|
30B77FB000
|
stack
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
1B72ABEE000
|
unkown
|
page read and write
|
|
|
|
221DEE55000
|
unkown
|
page read and write
|
|
|
|
7FF531663000
|
unkown image
|
page readonly
|
|
|
|
16A1D000
|
unkown
|
page read and write
|
|
|
|
F9F2BFD000
|
stack
|
page read and write
|
|
|
|
1C30E000
|
unkown
|
page read and write
|
|
|
|
7FF51142B000
|
unkown image
|
page readonly
|
|
|
|
F9F29FD000
|
stack
|
page read and write
|
|
|
|
7FF51C86F000
|
unkown image
|
page readonly
|
|
|
|
D71000
|
unkown
|
page read and write
|
|
|
|
7FF5477CD000
|
unkown image
|
page readonly
|
|
|
|
131A1000
|
unkown
|
page read and write
|
|
|
|
F80000
|
heap private
|
page read and write
|
|
|
|
7FF5D403F000
|
unkown image
|
page readonly
|
|
|
|
7FF54306B000
|
unkown image
|
page readonly
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
13B5000
|
unkown image
|
page readonly
|
|
|
|
D65000
|
unkown
|
page read and write
|
|
|
|
548EAFE000
|
stack
|
page read and write
|
|
|
|
2202EE00000
|
unkown image
|
page readonly
|
|
|
|
236DFFF000
|
stack
|
page read and write
|
|
|
|
1B72ABEE000
|
unkown
|
page read and write
|
|
|
|
2A6D5DA0000
|
unkown image
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
3700000
|
heap default
|
page read and write
|
|
|
|
1671B000
|
unkown
|
page read and write
|
|
|
|
20D3E62A000
|
unkown
|
page read and write
|
|
|
|
2A6D5DC0000
|
unkown image
|
page readonly
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1623000
|
unkown image
|
page readonly
|
|
|
|
6C5000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F6D000
|
unkown image
|
page readonly
|
|
|
|
7DF5D85F0000
|
unkown image
|
page readonly
|
|
|
|
1C2E9000
|
unkown
|
page read and write
|
|
|
|
3224000
|
unkown
|
page read and write
|
|
|
|
1CA57000
|
unkown
|
page read and write
|
|
|
|
C9E1000
|
unkown
|
page read and write
|
|
|
|
16916000
|
unkown
|
page read and write
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
7DF5BE350000
|
unkown image
|
page readonly
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
7FF5476B6000
|
unkown image
|
page readonly
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
1689B000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
2DF74E29000
|
unkown
|
page read and write
|
|
|
|
20D3EE02000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
7DF5472A0000
|
unkown image
|
page readonly
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
EACD000
|
unkown
|
page read and write
|
|
|
|
CA91000
|
unkown
|
page read and write
|
|
|
|
2F2D000
|
unkown image
|
page readonly
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
1B72ADF0000
|
heap private
|
page read and write
|
|
|
|
221DEE3E000
|
unkown
|
page read and write
|
|
|
|
13141000
|
unkown
|
page read and write
|
|
|
|
7DF5472A0000
|
unkown image
|
page readonly
|
|
|
|
10A5000
|
unkown
|
page read and write
|
|
|
|
EAAF000
|
unkown
|
page read and write
|
|
|
|
80FF000
|
stack
|
page read and write
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
2DF74F13000
|
unkown
|
page read and write
|
|
|
|
7FF51C4FA000
|
unkown image
|
page readonly
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
2202FDD0000
|
unkown
|
page read and write
|
|
|
|
20D3E500000
|
heap default
|
page read and write
|
|
|
|
2B3E1FE000
|
stack
|
page read and write
|
|
|
|
13387000
|
unkown
|
page read and write
|
|
|
|
7FF511367000
|
unkown image
|
page readonly
|
|
|
|
16A17000
|
unkown
|
page read and write
|
|
|
|
1C2D9000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
2E9C000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3D53000
|
unkown image
|
page readonly
|
|
|
|
EB4F000
|
unkown
|
page read and write
|
|
|
|
1670D000
|
unkown
|
page read and write
|
|
|
|
7F0B2000
|
unkown image
|
page readonly
|
|
|
|
CAF2000
|
unkown
|
page read and write
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
7FF51C3A0000
|
unkown image
|
page readonly
|
|
|
|
1B72AAD0000
|
unkown
|
page read and write
|
|
|
|
1C419000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
16A4E000
|
unkown
|
page read and write
|
|
|
|
63E000
|
stack
|
page read and write
|
|
|
|
7FF56BE0F000
|
unkown image
|
page readonly
|
|
|
|
D413679000
|
stack
|
page read and write
|
|
|
|
1C475000
|
unkown
|
page read and write
|
|
|
|
1669B000
|
unkown
|
page read and write
|
|
|
|
7FF5A17E0000
|
unkown image
|
page readonly
|
|
|
|
2A6D6240000
|
unkown image
|
page readonly
|
|
|
|
16708000
|
unkown
|
page read and write
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
7DF5BE360000
|
unkown image
|
page readonly
|
|
|
|
13630000
|
unkown
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
7FF51C777000
|
unkown image
|
page readonly
|
|
|
|
E380000
|
unkown
|
page read and write
|
|
|
|
1CC0A000
|
unkown
|
page read and write
|
|
|
|
2FA7000
|
heap default
|
page read and write
|
|
|
|
169DA000
|
unkown
|
page read and write
|
|
|
|
59770FD000
|
stack
|
page read and write
|
|
|
|
2202E830000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8985000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8A08000
|
unkown image
|
page readonly
|
|
|
|
1C518000
|
unkown
|
page read and write
|
|
|
|
7FF54307F000
|
unkown image
|
page readonly
|
|
|
|
1CA54000
|
unkown
|
page read and write
|
|
|
|
1230000
|
unkown image
|
page read and write
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
7FF5C2CEB000
|
unkown image
|
page readonly
|
|
|
|
20D3E5E0000
|
unkown image
|
page readonly
|
|
|
|
1C51B000
|
unkown
|
page read and write
|
|
|
|
1E893D10000
|
unkown image
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
7DF5472B2000
|
unkown image
|
page readonly
|
|
|
|
166F0000
|
unkown
|
page read and write
|
|
|
|
7FF56BF90000
|
unkown image
|
page readonly
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF5C24AA000
|
unkown image
|
page readonly
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
7FF54778C000
|
unkown image
|
page readonly
|
|
|
|
1689B000
|
unkown
|
page read and write
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
132D9000
|
unkown
|
page read and write
|
|
|
|
7FF51C748000
|
unkown image
|
page readonly
|
|
|
|
7FF51C424000
|
unkown image
|
page readonly
|
|
|
|
26031180000
|
unkown image
|
page readonly
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
7FF531968000
|
unkown image
|
page readonly
|
|
|
|
3745000
|
unkown
|
page read and write
|
|
|
|
EA90000
|
unkown
|
page read and write
|
|
|
|
FEEEAFB000
|
stack
|
page read and write
|
|
|
|
7FF54A16C000
|
unkown image
|
page readonly
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
132E4000
|
unkown
|
page read and write
|
|
|
|
1C2F6000
|
unkown
|
page read and write
|
|
|
|
26030A30000
|
unkown image
|
page read and write
|
|
|
|
548EFFF000
|
stack
|
page read and write
|
|
|
|
B8A000
|
unkown
|
page read and write
|
|
|
|
17220000
|
unkown
|
page read and write
|
|
|
|
2EE5000
|
unkown image
|
page readonly
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
1C30B000
|
unkown
|
page read and write
|
|
|
|
1C2D1000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F18000
|
unkown image
|
page readonly
|
|
|
|
7FF510C86000
|
unkown image
|
page readonly
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
7FF5A86CD000
|
unkown image
|
page readonly
|
|
|
|
168A0000
|
unkown
|
page read and write
|
|
|
|
1173000
|
unkown image
|
page read and write
|
|
|
|
FEEEEFD000
|
stack
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
16822000
|
unkown
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown image
|
page readonly
|
|
|
|
7FF542F40000
|
unkown image
|
page readonly
|
|
|
|
34B0000
|
unkown
|
page read and write
|
|
|
|
7FF51144E000
|
unkown image
|
page readonly
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
20D3E600000
|
unkown
|
page read and write
|
|
|
|
7FF56BF86000
|
unkown image
|
page readonly
|
|
|
|
EB39000
|
unkown
|
page read and write
|
|
|
|
16820000
|
unkown
|
page read and write
|
|
|
|
F9F277C000
|
stack
|
page read and write
|
|
|
|
16717000
|
unkown
|
page read and write
|
|
|
|
1C307000
|
unkown
|
page read and write
|
|
|
|
15EB0000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
EB67000
|
unkown
|
page read and write
|
|
|
|
136B0000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
DE8E000
|
stack
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown image
|
page readonly
|
|
|
|
F9DD000
|
stack
|
page read and write
|
|
|
|
2A6D6440000
|
unkown image
|
page readonly
|
|
|
|
7420000
|
unkown
|
page read and write
|
|
|
|
7FF51C529000
|
unkown image
|
page readonly
|
|
|
|
EB6B000
|
unkown
|
page read and write
|
|
|
|
1C979000
|
unkown
|
page read and write
|
|
|
|
1736C000
|
unkown
|
page read and write
|
|
|
|
2A6D5F30000
|
unkown image
|
page readonly
|
|
|
|
EB3F000
|
unkown
|
page read and write
|
|
|
|
7FF511430000
|
unkown image
|
page readonly
|
|
|
|
7FF5A173D000
|
unkown image
|
page readonly
|
|
|
|
7DF4E7800000
|
unkown image
|
page readonly
|
|
|
|
17367000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
167EA000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
22034100000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
28558ED0000
|
unkown image
|
page readonly
|
|
|
|
548F1F7000
|
stack
|
page read and write
|
|
|
|
7FF5A14C3000
|
unkown image
|
page readonly
|
|
|
|
162F0000
|
heap private
|
page read and write
|
|
|
|
236E47A000
|
stack
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
16832000
|
unkown
|
page read and write
|
|
|
|
7500000
|
unkown
|
page read and write
|
|
|
|
1E893A00000
|
unkown image
|
page readonly
|
|
|
|
7FF51C84D000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7102000
|
unkown image
|
page readonly
|
|
|
|
2202F9D0000
|
unkown image
|
page readonly
|
|
|
|
28558B08000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
2FAD000
|
unkown
|
page read and write
|
|
|
|
EB33000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
2202E860000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
1B72B940000
|
unkown
|
page read and write
|
|
|
|
15EFD000
|
unkown
|
page read and write
|
|
|
|
2FB4000
|
heap default
|
page read and write
|
|
|
|
7FF5A1707000
|
unkown image
|
page readonly
|
|
|
|
7DF5B7102000
|
unkown image
|
page readonly
|
|
|
|
15BD9000
|
unkown
|
page read and write
|
|
|
|
7FF54A21F000
|
unkown image
|
page readonly
|
|
|
|
19676DA0000
|
unkown image
|
page readonly
|
|
|
|
332A000
|
heap private
|
page read and write
|
|
|
|
16A4E000
|
unkown
|
page read and write
|
|
|
|
1083000
|
heap default
|
page read and write
|
|
|
|
16A54000
|
unkown
|
page read and write
|
|
|
|
FFF10000
|
unkown image
|
page readonly
|
|
|
|
168C2000
|
unkown
|
page read and write
|
|
|
|
2202EA7D000
|
unkown
|
page read and write
|
|
|
|
165E4000
|
unkown
|
page read and write
|
|
|
|
1BFB0000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
167BB000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
EAA5000
|
unkown
|
page read and write
|
|
|
|
7FF56B7E6000
|
unkown image
|
page readonly
|
|
|
|
7FF51C752000
|
unkown image
|
page readonly
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
131AC000
|
unkown
|
page read and write
|
|
|
|
7FF549F19000
|
unkown image
|
page readonly
|
|
|
|
D427000
|
unkown
|
page read and write
|
|
|
|
16A18000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
132BE000
|
unkown
|
page read and write
|
|
|
|
DB0D000
|
stack
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
16820000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A16000
|
unkown image
|
page readonly
|
|
|
|
7FF531560000
|
unkown image
|
page readonly
|
|
|
|
FC79000
|
unkown
|
page read and write
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
16873000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
1CA5C000
|
unkown
|
page read and write
|
|
|
|
7FF5A1728000
|
unkown image
|
page readonly
|
|
|
|
131CA000
|
unkown
|
page read and write
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
131FD000
|
unkown
|
page read and write
|
|
|
|
20D3E800000
|
unkown image
|
page readonly
|
|
|
|
7FF51C563000
|
unkown image
|
page readonly
|
|
|
|
7FF5318C8000
|
unkown image
|
page readonly
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
7DF55FB50000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2CFF000
|
unkown image
|
page readonly
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
7FF5A180F000
|
unkown image
|
page readonly
|
|
|
|
2EC0000
|
unkown image
|
page readonly
|
|
|
|
16B8B000
|
unkown
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
1C50B000
|
unkown
|
page read and write
|
|
|
|
26031402000
|
unkown
|
page read and write
|
|
|
|
1332D000
|
unkown
|
page read and write
|
|
|
|
1C581000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
19676E48000
|
unkown
|
page read and write
|
|
|
|
7DF5E9930000
|
unkown image
|
page readonly
|
|
|
|
7FF5475EA000
|
unkown image
|
page readonly
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
2202EB13000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E95000
|
unkown image
|
page readonly
|
|
|
|
19676DF0000
|
heap default
|
page read and write
|
|
|
|
2EA1000
|
unkown image
|
page readonly
|
|
|
|
C30000
|
unkown image
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
19677550000
|
unkown
|
page read and write
|
|
|
|
16916000
|
unkown
|
page read and write
|
|
|
|
EB86000
|
unkown
|
page read and write
|
|
|
|
166B8000
|
unkown
|
page read and write
|
|
|
|
1E8934E0000
|
heap default
|
page read and write
|
|
|
|
168FE000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
2202E810000
|
unkown image
|
page read and write
|
|
|
|
16633000
|
unkown
|
page read and write
|
|
|
|
7DF526D70000
|
unkown image
|
page readonly
|
|
|
|
1668A000
|
unkown
|
page read and write
|
|
|
|
FC6F000
|
unkown
|
page read and write
|
|
|
|
7DF526D70000
|
unkown image
|
page readonly
|
|
|
|
7FF542FC3000
|
unkown image
|
page readonly
|
|
|
|
3B80000
|
unkown image
|
page readonly
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
7FF51C828000
|
unkown image
|
page readonly
|
|
|
|
16873000
|
unkown
|
page read and write
|
|
|
|
1B72ABB0000
|
heap default
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
7FF54A1C5000
|
unkown image
|
page readonly
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
16832000
|
unkown
|
page read and write
|
|
|
|
2DF74F02000
|
unkown
|
page read and write
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
9C0000
|
unkown image
|
page readonly
|
|
|
|
19676E89000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
7FF511395000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE340000
|
unkown image
|
page readonly
|
|
|
|
28558A6F000
|
unkown
|
page read and write
|
|
|
|
2202EAA2000
|
unkown
|
page read and write
|
|
|
|
7DF526D50000
|
unkown image
|
page readonly
|
|
|
|
2EB9000
|
unkown image
|
page readonly
|
|
|
|
1B72ADE0000
|
unkown
|
page read and write
|
|
|
|
26030E00000
|
unkown image
|
page readonly
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
DD30000
|
unkown
|
page read and write
|
|
|
|
EB4E000
|
unkown
|
page read and write
|
|
|
|
DD84000
|
unkown
|
page read and write
|
|
|
|
7FF5476AD000
|
unkown image
|
page readonly
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
19676E55000
|
unkown
|
page read and write
|
|
|
|
1C2E9000
|
unkown
|
page read and write
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
131AE000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
2D82000
|
unkown image
|
page readonly
|
|
|
|
EB32000
|
unkown
|
page read and write
|
|
|
|
7FF5A175A000
|
unkown image
|
page readonly
|
|
|
|
131B3000
|
unkown
|
page read and write
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
7FF549AB8000
|
unkown image
|
page readonly
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
FC96000
|
unkown
|
page read and write
|
|
|
|
1B72ABEE000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown image
|
page readonly
|
|
|
|
7DF45B060000
|
unkown image
|
page readonly
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
1CB9B000
|
unkown
|
page read and write
|
|
|
|
7DF5B7112000
|
unkown image
|
page readonly
|
|
|
|
132EA000
|
unkown
|
page read and write
|
|
|
|
1C8FC000
|
unkown
|
page read and write
|
|
|
|
548F27E000
|
stack
|
page read and write
|
|
|
|
7FF82000
|
unkown image
|
page readonly
|
|
|
|
1DC94C82000
|
unkown
|
page read and write
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
13421000
|
unkown
|
page read and write
|
|
|
|
2A6D6235000
|
heap private
|
page read and write
|
|
|
|
2ED0000
|
heap default
|
page read and write
|
|
|
|
7FF54789F000
|
unkown image
|
page readonly
|
|
|
|
1080000
|
unkown image
|
page readonly
|
|
|
|
FD05000
|
unkown
|
page read and write
|
|
|
|
EB35000
|
unkown
|
page read and write
|
|
|
|
7FF5A824D000
|
unkown image
|
page readonly
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
221DEE69000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
1C3C7000
|
unkown
|
page read and write
|
|
|
|
168E2000
|
unkown
|
page read and write
|
|
|
|
16A4E000
|
unkown
|
page read and write
|
|
|
|
19676E29000
|
unkown
|
page read and write
|
|
|
|
167FD000
|
unkown
|
page read and write
|
|
|
|
1C95F000
|
unkown
|
page read and write
|
|
|
|
1B72ADF9000
|
heap private
|
page read and write
|
|
|
|
15BD3000
|
unkown
|
page read and write
|
|
|
|
5976BFE000
|
stack
|
page read and write
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
7FF54A157000
|
unkown image
|
page readonly
|
|
|
|
2202EA7B000
|
unkown
|
page read and write
|
|
|
|
168B1000
|
unkown
|
page read and write
|
|
|
|
1CC14000
|
unkown
|
page read and write
|
|
|
|
7FF5D3D33000
|
unkown image
|
page readonly
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
7DF5818B2000
|
unkown image
|
page readonly
|
|
|
|
EB82000
|
unkown
|
page read and write
|
|
|
|
7FF5D403F000
|
unkown image
|
page readonly
|
|
|
|
1C584000
|
unkown
|
page read and write
|
|
|
|
7FF5D400B000
|
unkown image
|
page readonly
|
|
|
|
167CC000
|
unkown
|
page read and write
|
|
|
|
1C2E9000
|
unkown
|
page read and write
|
|
|
|
7FF5A17DB000
|
unkown image
|
page readonly
|
|
|
|
15D90000
|
unkown
|
page read and write
|
|
|
|
2202FEF9000
|
unkown
|
page read and write
|
|
|
|
7FF5D3D47000
|
unkown image
|
page readonly
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
7DF558972000
|
unkown image
|
page readonly
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
1C2D9000
|
unkown
|
page read and write
|
|
|
|
3721000
|
unkown
|
page read and write
|
|
|
|
F9F227B000
|
unkown
|
page read and write
|
|
|
|
15640000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
13211000
|
unkown
|
page read and write
|
|
|
|
EB86000
|
unkown
|
page read and write
|
|
|
|
1C2DC000
|
unkown
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
28559202000
|
unkown
|
page read and write
|
|
|
|
FC37000
|
unkown
|
page read and write
|
|
|
|
7FF5111FD000
|
unkown image
|
page readonly
|
|
|
|
1C32E000
|
unkown
|
page read and write
|
|
|
|
1340A000
|
unkown
|
page read and write
|
|
|
|
2F09000
|
unkown image
|
page readonly
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
2202EA40000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
7FF5A1684000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
unkown image
|
page read and write
|
|
|
|
1C2F1000
|
unkown
|
page read and write
|
|
|
|
131D5000
|
unkown
|
page read and write
|
|
|
|
2FCD000
|
unkown
|
page read and write
|
|
|
|
EAF3000
|
unkown
|
page read and write
|
|
|
|
7DF55D192000
|
unkown image
|
page readonly
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
1661C000
|
unkown
|
page read and write
|
|
|
|
158B0000
|
unkown
|
page read and write
|
|
|
|
7DF558982000
|
unkown image
|
page readonly
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
heap default
|
page read and write
|
|
|
|
2202EA91000
|
unkown
|
page read and write
|
|
|
|
7FF51145B000
|
unkown image
|
page readonly
|
|
|
|
7FF54A02F000
|
unkown image
|
page readonly
|
|
|
|
15E99000
|
unkown
|
page read and write
|
|
|
|
7FF54771E000
|
unkown image
|
page readonly
|
|
|
|
13A4000
|
unkown image
|
page readonly
|
|
|
|
7FF549F5D000
|
unkown image
|
page readonly
|
|
|
|
7DF5D8602000
|
unkown image
|
page readonly
|
|
|
|
2F87000
|
unkown
|
page read and write
|
|
|
|
19676E00000
|
unkown
|
page read and write
|
|
|
|
1C2D4000
|
unkown
|
page read and write
|
|
|
|
ECFC000
|
stack
|
page read and write
|
|
|
|
1C57F000
|
unkown
|
page read and write
|
|
|
|
1C2FE000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
15BF3000
|
unkown
|
page read and write
|
|
|
|
28558A00000
|
unkown
|
page read and write
|
|
|
|
3530000
|
unkown image
|
page readonly
|
|
|
|
7FF5A1753000
|
unkown image
|
page readonly
|
|
|
|
EB46000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
EB3E000
|
unkown
|
page read and write
|
|
|
|
7FF510F23000
|
unkown image
|
page readonly
|
|
|
|
1C472000
|
unkown
|
page read and write
|
|
|
|
EAAB000
|
unkown
|
page read and write
|
|
|
|
1DC94D02000
|
unkown
|
page read and write
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
221DF000000
|
unkown image
|
page readonly
|
|
|
|
7FF51C3E4000
|
unkown image
|
page readonly
|
|
|
|
2FAD000
|
heap default
|
page read and write
|
|
|
|
285589D0000
|
unkown
|
page read and write
|
|
|
|
7DF5818B0000
|
unkown image
|
page readonly
|
|
|
|
26030A50000
|
unkown image
|
page readonly
|
|
|
|
C9E7000
|
unkown
|
page read and write
|
|
|
|
2DF75460000
|
unkown image
|
page readonly
|
|
|
|
FEEECFB000
|
stack
|
page read and write
|
|
|
|
16708000
|
unkown
|
page read and write
|
|
|
|
30B73BE000
|
stack
|
page read and write
|
|
|
|
7FF5A8604000
|
unkown image
|
page readonly
|
|
|
|
26030BA0000
|
unkown
|
page read and write
|
|
|
|
2D77000
|
unkown image
|
page readonly
|
|
|
|
16717000
|
unkown
|
page read and write
|
|
|
|
FCB7000
|
unkown
|
page read and write
|
|
|
|
FC27000
|
unkown
|
page read and write
|
|
|
|
1B72ABF6000
|
unkown
|
page read and write
|
|
|
|
22034210000
|
unkown
|
page read and write
|
|
|
|
2A6D5ED0000
|
unkown
|
page read and write
|
|
|
|
2DF74E00000
|
unkown
|
page read and write
|
|
|
|
1C513000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
1C238000
|
unkown
|
page read and write
|
|
|
|
7FF543064000
|
unkown image
|
page readonly
|
|
|
|
2202E9F3000
|
unkown
|
page read and write
|
|
|
|
26030C69000
|
unkown
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
7FF547884000
|
unkown image
|
page readonly
|
|
|
|
16716000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F8A000
|
unkown image
|
page readonly
|
|
|
|
22034240000
|
unkown
|
page read and write
|
|
|
|
131F3000
|
unkown
|
page read and write
|
|
|
|
221DEE84000
|
unkown
|
page read and write
|
|
|
|
7FF56BEF5000
|
unkown image
|
page readonly
|
|
|
|
7FF51C71D000
|
unkown image
|
page readonly
|
|
|
|
1C907000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
2C01000
|
unkown image
|
page readonly
|
|
|
|
7FF54787D000
|
unkown image
|
page readonly
|
|
|
|
7FF51C591000
|
unkown image
|
page readonly
|
|
|
|
2202E830000
|
unkown image
|
page readonly
|
|
|
|
16DBB000
|
unkown
|
page read and write
|
|
|
|
7FF54785F000
|
unkown image
|
page readonly
|
|
|
|
E8AC000
|
stack
|
page read and write
|
|
|
|
1321D000
|
unkown
|
page read and write
|
|
|
|
168AF000
|
unkown
|
page read and write
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
131F9000
|
unkown
|
page read and write
|
|
|
|
2202F202000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
EB3E000
|
unkown
|
page read and write
|
|
|
|
131E1000
|
unkown
|
page read and write
|
|
|
|
1C2F6000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
168A3000
|
unkown
|
page read and write
|
|
|
|
2DF74EE2000
|
unkown
|
page read and write
|
|
|
|
1DC94C49000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
7FF54A0DE000
|
unkown image
|
page readonly
|
|
|
|
13169000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
168A0000
|
unkown
|
page read and write
|
|
|
|
221DEC50000
|
unkown image
|
page readonly
|
|
|
|
22034000000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A20000
|
unkown image
|
page readonly
|
|
|
|
2F81000
|
unkown image
|
page readonly
|
|
|
|
13421000
|
unkown
|
page read and write
|
|
|
|
7DF5818C2000
|
unkown image
|
page readonly
|
|
|
|
131DD000
|
unkown
|
page read and write
|
|
|
|
1DC94C6F000
|
unkown
|
page read and write
|
|
|
|
7DF5818B0000
|
unkown image
|
page readonly
|
|
|
|
168D5000
|
unkown
|
page read and write
|
|
|
|
1689B000
|
unkown
|
page read and write
|
|
|
|
2202F313000
|
unkown
|
page read and write
|
|
|
|
7FF542F63000
|
unkown image
|
page readonly
|
|
|
|
221DEE67000
|
unkown
|
page read and write
|
|
|
|
7FF51C60D000
|
unkown image
|
page readonly
|
|
|
|
7FF51C6E4000
|
unkown image
|
page readonly
|
|
|
|
11E0000
|
unkown image
|
page readonly
|
|
|
|
167B9000
|
unkown
|
page read and write
|
|
|
|
133D5000
|
unkown
|
page read and write
|
|
|
|
2F88000
|
heap default
|
page read and write
|
|
|
|
2F0D000
|
unkown image
|
page readonly
|
|
|
|
1C8C8000
|
unkown
|
page read and write
|
|
|
|
28558B00000
|
unkown
|
page read and write
|
|
|
|
1B72A980000
|
unkown
|
page read and write
|
|
|
|
221DEE45000
|
unkown
|
page read and write
|
|
|
|
7FF56BFAE000
|
unkown image
|
page readonly
|
|
|
|
2F13000
|
heap default
|
page read and write
|
|
|
|
1B72ABE9000
|
heap default
|
page read and write
|
|
|
|
7FF5D403D000
|
unkown image
|
page readonly
|
|
|
|
B9D5000
|
unkown
|
page read and write
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
1335F000
|
unkown
|
page read and write
|
|
|
|
9B0000
|
heap private
|
page read and write
|
|
|
|
7FF547795000
|
unkown image
|
page readonly
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
unkown image
|
page readonly
|
|
|
|
FBC3000
|
unkown
|
page read and write
|
|
|
|
133A0000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
DDD0000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
7FF51C727000
|
unkown image
|
page readonly
|
|
|
|
26030C37000
|
unkown
|
page read and write
|
|
|
|
220341B0000
|
unkown
|
page read and write
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
133A9000
|
unkown
|
page read and write
|
|
|
|
EB3E000
|
unkown
|
page read and write
|
|
|
|
FC6D000
|
unkown
|
page read and write
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
2202EA93000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
7FF59C6FE000
|
unkown image
|
page readonly
|
|
|
|
FCA6000
|
unkown
|
page read and write
|
|
|
|
36F4000
|
heap private
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
1341F000
|
unkown
|
page read and write
|
|
|
|
DA0C000
|
stack
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page read and write
|
|
|
|
7FF5D3F79000
|
unkown image
|
page readonly
|
|
|
|
17413000
|
unkown
|
page read and write
|
|
|
|
167E4000
|
unkown
|
page read and write
|
|
|
|
7FF5D4010000
|
unkown image
|
page readonly
|
|
|
|
20D3E613000
|
unkown
|
page read and write
|
|
|
|
2FA9000
|
unkown
|
page read and write
|
|
|
|
221DEE6D000
|
unkown
|
page read and write
|
|
|
|
E10E000
|
stack
|
page read and write
|
|
|
|
7FF5477D5000
|
unkown image
|
page readonly
|
|
|
|
2202EF90000
|
unkown image
|
page readonly
|
|
|
|
7F3A2000
|
unkown image
|
page readonly
|
|
|
|
E903000
|
unkown
|
page read and write
|
|
|
|
7DF55D190000
|
unkown image
|
page readonly
|
|
|
|
1B72A990000
|
unkown image
|
page readonly
|
|
|
|
1682F000
|
unkown
|
page read and write
|
|
|
|
168AA000
|
unkown
|
page read and write
|
|
|
|
2202EB02000
|
unkown
|
page read and write
|
|
|
|
6B8000
|
unkown
|
page read and write
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
FAF0000
|
unkown
|
page read and write
|
|
|
|
16847000
|
unkown
|
page read and write
|
|
|
|
1C306000
|
unkown
|
page read and write
|
|
|
|
7FF56BFBB000
|
unkown image
|
page readonly
|
|
|
|
EB31000
|
unkown
|
page read and write
|
|
|
|
741F000
|
stack
|
page read and write
|
|
|
|
2A6D5FA0000
|
heap default
|
page read and write
|
|
|
|
26030A80000
|
unkown image
|
page readonly
|
|
|
|
131D5000
|
unkown
|
page read and write
|
|
|
|
1682B000
|
unkown
|
page read and write
|
|
|
|
7DF5E9950000
|
unkown image
|
page readonly
|
|
|
|
13387000
|
unkown
|
page read and write
|
|
|
|
2202EAED000
|
unkown
|
page read and write
|
|
|
|
132EE000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
heap default
|
page read and write
|
|
|
|
167EA000
|
unkown
|
page read and write
|
|
|
|
7FF5D403B000
|
unkown image
|
page readonly
|
|
|
|
132B9000
|
unkown
|
page read and write
|
|
|
|
22030000000
|
unkown
|
page read and write
|
|
|
|
FC9D000
|
unkown
|
page read and write
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
133D7000
|
unkown
|
page read and write
|
|
|
|
E370000
|
unkown
|
page read and write
|
|
|
|
2EB6000
|
unkown image
|
page readonly
|
|
|
|
13720000
|
unkown
|
page read and write
|
|
|
|
7FF5A8A0F000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8887000
|
unkown image
|
page readonly
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
7FF5477EA000
|
unkown image
|
page readonly
|
|
|
|
2EFC000
|
unkown image
|
page readonly
|
|
|
|
DB4C000
|
stack
|
page read and write
|
|
|
|
E830000
|
unkown
|
page read and write
|
|
|
|
2202FDE0000
|
unkown
|
page read and write
|
|
|
|
1C51B000
|
unkown
|
page read and write
|
|
|
|
7FF56BFBF000
|
unkown image
|
page readonly
|
|
|
|
1C3C7000
|
unkown
|
page read and write
|
|
|
|
2DF752D0000
|
unkown image
|
page readonly
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
132BB000
|
unkown
|
page read and write
|
|
|
|
2FB4000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
1E893490000
|
unkown image
|
page readonly
|
|
|
|
131E6000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
heap private
|
page read and write
|
|
|
|
4900000
|
heap private
|
page read and write
|
|
|
|
168D2000
|
unkown
|
page read and write
|
|
|
|
7FF547566000
|
unkown image
|
page readonly
|
|
|
|
2EDA000
|
unkown image
|
page readonly
|
|
|
|
133B1000
|
unkown
|
page read and write
|
|
|
|
20D3E702000
|
unkown
|
page read and write
|
|
|
|
2E8D000
|
unkown image
|
page readonly
|
|
|
|
7FF56BD5D000
|
unkown image
|
page readonly
|
|
|
|
2202F1F0000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
6A1000
|
unkown
|
page read and write
|
|
|
|
166F1000
|
unkown
|
page read and write
|
|
|
|
22034120000
|
unkown
|
page read and write
|
|
|
|
EB6B000
|
unkown
|
page read and write
|
|
|
|
19676E70000
|
unkown
|
page read and write
|
|
|
|
131B7000
|
unkown
|
page read and write
|
|
|
|
1317E000
|
unkown
|
page read and write
|
|
|
|
2B96000
|
unkown image
|
page readonly
|
|
|
|
131B3000
|
unkown
|
page read and write
|
|
|
|
1330A000
|
unkown
|
page read and write
|
|
|
|
7FF56BFBF000
|
unkown image
|
page readonly
|
|
|
|
168B8000
|
unkown
|
page read and write
|
|
|
|
2F7B000
|
unkown image
|
page readonly
|
|
|
|
16892000
|
unkown
|
page read and write
|
|
|
|
7FF5311E3000
|
unkown image
|
page readonly
|
|
|
|
1C2CF000
|
unkown
|
page read and write
|
|
|
|
133BD000
|
unkown
|
page read and write
|
|
|
|
7FF56BD8E000
|
unkown image
|
page readonly
|
|
|
|
2202F300000
|
unkown
|
page read and write
|
|
|
|
7FF5477AC000
|
unkown image
|
page readonly
|
|
|
|
26030B80000
|
unkown image
|
page readonly
|
|
|
|
2DF74D40000
|
heap default
|
page read and write
|
|
|
|
16D3A000
|
unkown
|
page read and write
|
|
|
|
2202EA29000
|
unkown
|
page read and write
|
|
|
|
4870000
|
unkown image
|
page write copy
|
|
|
|
7FF5D37EA000
|
unkown image
|
page readonly
|
|
|
|
CA79000
|
unkown
|
page read and write
|
|
|
|
2FB2000
|
unkown
|
page read and write
|
|
|
|
FC59000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E03000
|
unkown image
|
page readonly
|
|
|
|
16789000
|
unkown
|
page read and write
|
|
|
|
1335B000
|
unkown
|
page read and write
|
|
|
|
2F97000
|
unkown image
|
page readonly
|
|
|
|
2FC2000
|
unkown
|
page read and write
|
|
|
|
7DF5E9950000
|
unkown image
|
page readonly
|
|
|
|
7FFA0000
|
unkown image
|
page readonly
|
|
|
|
13383000
|
unkown
|
page read and write
|
|
|
|
15BE3000
|
unkown
|
page read and write
|
|
|
|
138F0000
|
unkown
|
page read and write
|
|
|
|
196772E0000
|
unkown image
|
page readonly
|
|
|
|
11AE000
|
unkown image
|
page read and write
|
|
|
|
7FF5112AF000
|
unkown image
|
page readonly
|
|
|
|
1C996000
|
unkown
|
page read and write
|
|
|
|
7DF55FB70000
|
unkown image
|
page readonly
|
|
|
|
7FF51124E000
|
unkown image
|
page readonly
|
|
|
|
7FF5A17CF000
|
unkown image
|
page readonly
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
2F8C000
|
unkown
|
page read and write
|
|
|
|
FC4D000
|
unkown
|
page read and write
|
|
|
|
2EF9000
|
unkown image
|
page readonly
|
|
|
|
F9F25FF000
|
stack
|
page read and write
|
|
|
|
166AE000
|
unkown
|
page read and write
|
|
|
|
7FF51141F000
|
unkown image
|
page readonly
|
|
|
|
1C3D4000
|
unkown
|
page read and write
|
|
|
|
13388000
|
unkown
|
page read and write
|
|
|
|
1C581000
|
unkown
|
page read and write
|
|
|
|
167CF000
|
unkown
|
page read and write
|
|
|
|
1C419000
|
unkown
|
page read and write
|
|
|
|
221DEE47000
|
unkown
|
page read and write
|
|
|
|
D571000
|
unkown
|
page read and write
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
221DEE50000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown image
|
page readonly
|
|
|
|
1681F000
|
unkown
|
page read and write
|
|
|
|
6A3000
|
heap default
|
page read and write
|
|
|
|
FC48000
|
unkown
|
page read and write
|
|
|
|
7FF51C7A9000
|
unkown image
|
page readonly
|
|
|
|
16847000
|
unkown
|
page read and write
|
|
|
|
13300000
|
unkown
|
page read and write
|
|
|
|
F75E000
|
stack
|
page read and write
|
|
|
|
260000
|
unkown image
|
page readonly
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BEB3000
|
unkown image
|
page readonly
|
|
|
|
EB84000
|
unkown
|
page read and write
|
|
|
|
168A0000
|
unkown
|
page read and write
|
|
|
|
1C971000
|
unkown
|
page read and write
|
|
|
|
1E893800000
|
unkown image
|
page readonly
|
|
|
|
7FF5A82B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5C2CC6000
|
unkown image
|
page readonly
|
|
|
|
221DEE31000
|
unkown
|
page read and write
|
|
|
|
132A1000
|
unkown
|
page read and write
|
|
|
|
13203000
|
unkown
|
page read and write
|
|
|
|
16758000
|
unkown
|
page read and write
|
|
|
|
3450000
|
unkown image
|
page readonly
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
7FF51C763000
|
unkown image
|
page readonly
|
|
|
|
133B9000
|
unkown
|
page read and write
|
|
|
|
FC8D000
|
unkown
|
page read and write
|
|
|
|
1E8934B0000
|
unkown image
|
page readonly
|
|
|
|
EB38000
|
unkown
|
page read and write
|
|
|
|
1C2CF000
|
unkown
|
page read and write
|
|
|
|
13710000
|
unkown
|
page read and write
|
|
|
|
1321B000
|
unkown
|
page read and write
|
|
|
|
1E893F6F000
|
unkown
|
page read and write
|
|
|
|
168CC000
|
unkown
|
page read and write
|
|
|
|
1C969000
|
unkown
|
page read and write
|
|
|
|
2EC4000
|
unkown image
|
page readonly
|
|
|
|
221DEC20000
|
unkown image
|
page readonly
|
|
|
|
2F9E000
|
unkown
|
page read and write
|
|
|
|
2202FDF0000
|
unkown
|
page read and write
|
|
|
|
F9F247B000
|
stack
|
page read and write
|
|
|
|
5976DFD000
|
stack
|
page read and write
|
|
|
|
167B6000
|
unkown
|
page read and write
|
|
|
|
16A1D000
|
unkown
|
page read and write
|
|
|
|
EB37000
|
unkown
|
page read and write
|
|
|
|
2F81000
|
unkown image
|
page readonly
|
|
|
|
FC94000
|
unkown
|
page read and write
|
|
|
|
1681A000
|
unkown
|
page read and write
|
|
|
|
131A1000
|
unkown
|
page read and write
|
|
|
|
7FF54A25F000
|
unkown image
|
page readonly
|
|
|
|
165EE000
|
unkown
|
page read and write
|
|
There are 2997 hidden memdumps, click here to show them.