Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3638B7F6-A3D7-43B8-AAEC-D8550EE39223
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CC657B23.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF1FFD1382AF47CF05.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF8DAE98E0C529E805.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\FFC2.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3298678F3B11AF32.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF55CA0BB42F5D2008.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html
|
162.241.2.78
|
|
|
|
https://playsis.com.br/
|
unknown
|
|
|
|
https://playsis.com.br/R
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BNs
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.htmlvn/TSh7GBeIR/tiynh.html
|
unknown
|
|
|
|
https://playsis.com.br/Y~T
|
unknown
|
|
|
|
https://playsis.com.br/qJSi
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html117.vn/TSh7GBeIR/tiynh.htmlink
|
unknown
|
|
|
|
https://playsis.com.br/qJSL117.
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html5
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1B.b
|
unknown
|
|
|
|
https://playsis.com.br/qhtt
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BNt
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmediaq
|
unknown
|
|
|
|
https://playsis.com
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://webshell.suite.office.comeH
|
unknown
|
|
|
|
https://www.odwebp.svc.msomP
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
https://clients.config.office.net/https://loguc
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizea_
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.htmlZd
|
unknown
|
|
|
|
https://api.office.netyp(
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=ImmersiveApp
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizesZ
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Binguo
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://api.office.net/s
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://graph.ppe.windows.net//
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize&
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize?S
|
unknown
|
|
|
|
https://api.diagnostics.office.com?V
|
unknown
|
|
|
|
https://onedrive.live.com/embed?i
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeOP
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xmlW
|
unknown
|
|
|
|
https://substrate.office.como
|
unknown
|
|
|
|
https://greenflag.esp.br/z
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/nt9H
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json3
|
unknown
|
|
|
|
https://cortana.aiIY
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1J
|
unknown
|
|
|
|
https://api.onedrive.comMBI
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.jsonMBI_SSLpeople.directory.
|
unknown
|
|
|
|
https://api.diagnostics.office.comhuc
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorizeuo
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/W
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.html
|
108.179.192.98
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=FlickrYO
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize&Z0
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://substrate.office.comR
|
unknown
|
|
|
|
https://substrate.office.comP
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeb
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizec
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizen_
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/apiE
|
unknown
|
|
|
|
https://onedrive.live.comed
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizef
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeX
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeY
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeZ
|
unknown
|
|
|
|
https://api.office.net=sl
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://substrate.office.com4:
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize%_3
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeR
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeS
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policieshttps://login.windows.net/common/oauth2/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeT
|
unknown
|
|
|
|
https://dataservice.o365filtering.comUV
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeU
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeW
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeH
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://api.office.netls
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeJ
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
https://greenflag.esp.br/s
|
unknown
|
|
|
|
http://crl.entrust.net/server1.crl0
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
https://greenflag.esp.br/
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
https://playsis.cre
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.html
|
103.28.36.171
|
|
|
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://noithat117.vn/
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
https://playsis.com.boi
|
unknown
|
|
|
|
http://ocsp.entrust.net0D
|
unknown
|
|
|
|
https://secure.comodo.com/CPS0
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
There are 123 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
greenflag.esp.br
|
108.179.192.98
|
|
|
|
playsis.com.br
|
162.241.2.78
|
|
|
|
noithat117.vn
|
103.28.36.171
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
162.241.2.78
|
playsis.com.br
|
United States
|
|
|
|
108.179.192.98
|
greenflag.esp.br
|
United States
|
|
|
|
103.28.36.171
|
noithat117.vn
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
;}9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
<}9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\212C4
|
212C4
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
-/:
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\34F0C
|
34F0C
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\3635F
|
3635F
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
&~,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E9C3
|
2E9C3
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
$m,
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\40ECF
|
40ECF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\41BE9
|
41BE9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 99 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
260B000
|
unkown image
|
page readonly
|
|
|
|
17E5F000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
7DF59F980000
|
unkown image
|
page readonly
|
|
|
|
2FB0000
|
unkown
|
page read and write
|
|
|
|
171CE0A0000
|
unkown
|
page read and write
|
|
|
|
E25E000
|
stack
|
page read and write
|
|
|
|
7DF5798B2000
|
unkown image
|
page readonly
|
|
|
|
20A8BBF0000
|
unkown image
|
page readonly
|
|
|
|
2DED000
|
unkown
|
page read and write
|
|
|
|
28C4000
|
unkown image
|
page readonly
|
|
|
|
2A9A000
|
unkown
|
page read and write
|
|
|
|
7FF591397000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA020000
|
unkown image
|
page readonly
|
|
|
|
FF700000
|
unkown image
|
page readonly
|
|
|
|
16D92000
|
unkown
|
page read and write
|
|
|
|
161CF000
|
unkown
|
page read and write
|
|
|
|
199E03E0000
|
unkown
|
page read and write
|
|
|
|
2723000
|
unkown image
|
page readonly
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
7FF56376F000
|
unkown image
|
page readonly
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
2F2D000
|
stack
|
page read and write
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
EDC1000
|
unkown
|
page read and write
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
199E0449000
|
unkown
|
page read and write
|
|
|
|
7F4B0000
|
unkown image
|
page readonly
|
|
|
|
CD4E000
|
unkown
|
page read and write
|
|
|
|
20A8BC20000
|
unkown image
|
page readonly
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
15950000
|
heap private
|
page read and write
|
|
|
|
1CB27000
|
unkown
|
page read and write
|
|
|
|
7FF5AC077000
|
unkown image
|
page readonly
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
30F1000
|
unkown image
|
page read and write
|
|
|
|
16B80000
|
unkown
|
page read and write
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
172A0000
|
unkown
|
page read and write
|
|
|
|
7FF5633E7000
|
unkown image
|
page readonly
|
|
|
|
138C5000
|
unkown
|
page read and write
|
|
|
|
7FF5DEC6A000
|
unkown image
|
page readonly
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
171CE190000
|
unkown
|
page read and write
|
|
|
|
7DF5798D0000
|
unkown image
|
page readonly
|
|
|
|
20A8BE2A000
|
unkown
|
page read and write
|
|
|
|
138D2000
|
unkown
|
page read and write
|
|
|
|
1CADA000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
25BDEE13000
|
unkown
|
page read and write
|
|
|
|
1CB9A000
|
unkown
|
page read and write
|
|
|
|
2D80000
|
unkown
|
page read and write
|
|
|
|
7FF591C13000
|
unkown image
|
page readonly
|
|
|
|
7F992000
|
unkown image
|
page readonly
|
|
|
|
199E1000000
|
unkown
|
page read and write
|
|
|
|
2D70000
|
unkown
|
page read and write
|
|
|
|
DE3C000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
15D75000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
7FF5AC28E000
|
unkown image
|
page readonly
|
|
|
|
2576000
|
unkown image
|
page readonly
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
7FF5917E7000
|
unkown image
|
page readonly
|
|
|
|
1CC3B000
|
unkown
|
page read and write
|
|
|
|
166A0000
|
unkown
|
page read and write
|
|
|
|
199E1002000
|
unkown
|
page read and write
|
|
|
|
FD1A000
|
unkown
|
page read and write
|
|
|
|
25BDF380000
|
unkown image
|
page readonly
|
|
|
|
169C9000
|
unkown
|
page read and write
|
|
|
|
2BEB000
|
unkown
|
page read and write
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
D405000
|
unkown
|
page read and write
|
|
|
|
17E5B000
|
unkown
|
page read and write
|
|
|
|
E08E000
|
unkown
|
page read and write
|
|
|
|
1C98F000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
27DC000
|
unkown image
|
page readonly
|
|
|
|
7FF565592000
|
unkown image
|
page readonly
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
199E1002000
|
unkown
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
13834000
|
unkown
|
page read and write
|
|
|
|
FC40000
|
unkown
|
page read and write
|
|
|
|
169AE000
|
unkown
|
page read and write
|
|
|
|
7FF591A86000
|
unkown image
|
page readonly
|
|
|
|
171CE110000
|
unkown
|
page read and write
|
|
|
|
7FF564C57000
|
unkown image
|
page readonly
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7FF5DECDE000
|
unkown image
|
page readonly
|
|
|
|
13841000
|
unkown
|
page read and write
|
|
|
|
17E58000
|
unkown
|
page read and write
|
|
|
|
7FF5DF373000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5411000
|
unkown image
|
page readonly
|
|
|
|
2536000
|
unkown image
|
page readonly
|
|
|
|
7FF591C7A000
|
unkown image
|
page readonly
|
|
|
|
16460000
|
unkown image
|
page readonly
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
7FF5AC293000
|
unkown image
|
page readonly
|
|
|
|
2840000
|
unkown image
|
page readonly
|
|
|
|
169C3000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
EDA2000
|
unkown
|
page read and write
|
|
|
|
158B0000
|
unkown
|
page read and write
|
|
|
|
16B81000
|
unkown
|
page read and write
|
|
|
|
1D6B67E000
|
stack
|
page read and write
|
|
|
|
13732000
|
unkown
|
page read and write
|
|
|
|
7FF5AC231000
|
unkown image
|
page readonly
|
|
|
|
28D1000
|
unkown image
|
page readonly
|
|
|
|
61A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC32D000
|
unkown image
|
page readonly
|
|
|
|
EDA1000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
FF6D7000
|
unkown
|
page execute read
|
|
|
|
7FF5654CD000
|
unkown image
|
page readonly
|
|
|
|
E11E000
|
stack
|
page read and write
|
|
|
|
E6BC000
|
stack
|
page read and write
|
|
|
|
1D6B11E000
|
stack
|
page read and write
|
|
|
|
1690C000
|
unkown
|
page read and write
|
|
|
|
D3E3000
|
unkown
|
page read and write
|
|
|
|
13725000
|
unkown
|
page read and write
|
|
|
|
16ADA000
|
unkown
|
page read and write
|
|
|
|
180DF000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
B9845EF000
|
stack
|
page read and write
|
|
|
|
611000
|
unkown
|
page read and write
|
|
|
|
B984979000
|
stack
|
page read and write
|
|
|
|
199E0B88000
|
unkown
|
page read and write
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
4F60000
|
unkown
|
page read and write
|
|
|
|
7FF5D57B1000
|
unkown image
|
page readonly
|
|
|
|
D223000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
18121000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
7DF5E3592000
|
unkown image
|
page readonly
|
|
|
|
11CCD000
|
stack
|
page read and write
|
|
|
|
2A20000
|
heap private
|
page read and write
|
|
|
|
7FF591C09000
|
unkown image
|
page readonly
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
2451000
|
unkown image
|
page readonly
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
16507000
|
heap private
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
199E0455000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
7DF5E3590000
|
unkown image
|
page readonly
|
|
|
|
1CB97000
|
unkown
|
page read and write
|
|
|
|
EDC0000
|
unkown
|
page read and write
|
|
|
|
D6A5000
|
unkown
|
page read and write
|
|
|
|
161AC000
|
unkown
|
page read and write
|
|
|
|
180A3000
|
unkown
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
16D11000
|
unkown
|
page read and write
|
|
|
|
16ADA000
|
unkown
|
page read and write
|
|
|
|
27B4000
|
unkown image
|
page readonly
|
|
|
|
168F8000
|
unkown
|
page read and write
|
|
|
|
199E1002000
|
unkown
|
page read and write
|
|
|
|
16799000
|
unkown
|
page read and write
|
|
|
|
1675B000
|
unkown
|
page read and write
|
|
|
|
13872000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
16B9E000
|
unkown
|
page read and write
|
|
|
|
20F45A80000
|
unkown image
|
page readonly
|
|
|
|
16940000
|
unkown
|
page read and write
|
|
|
|
FF6F6000
|
unkown
|
page execute read
|
|
|
|
7FF56538D000
|
unkown image
|
page readonly
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
25BDEE83000
|
unkown
|
page read and write
|
|
|
|
25BDEE49000
|
unkown
|
page read and write
|
|
|
|
138B6000
|
unkown
|
page read and write
|
|
|
|
1C9EF000
|
unkown
|
page read and write
|
|
|
|
16908000
|
unkown
|
page read and write
|
|
|
|
167D2000
|
unkown
|
page read and write
|
|
|
|
18063000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
20A8C402000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
13732000
|
unkown
|
page read and write
|
|
|
|
16839000
|
unkown
|
page read and write
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
16E49000
|
unkown
|
page read and write
|
|
|
|
E4DE000
|
stack
|
page read and write
|
|
|
|
135CA000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
15DAC000
|
unkown
|
page read and write
|
|
|
|
68BFCFE000
|
stack
|
page read and write
|
|
|
|
16B7A000
|
unkown
|
page read and write
|
|
|
|
18131000
|
unkown
|
page read and write
|
|
|
|
20F45E65000
|
heap private
|
page read and write
|
|
|
|
1C6D0000
|
unkown
|
page read and write
|
|
|
|
D808000
|
unkown
|
page read and write
|
|
|
|
1807B000
|
unkown
|
page read and write
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
27A92A13000
|
unkown
|
page read and write
|
|
|
|
25E4000
|
unkown image
|
page readonly
|
|
|
|
FF800000
|
unkown image
|
page readonly
|
|
|
|
16D11000
|
unkown
|
page read and write
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
27A929FF000
|
unkown
|
page read and write
|
|
|
|
310B000
|
unkown image
|
page read and write
|
|
|
|
3300000
|
unkown image
|
page readonly
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
7FF591C7D000
|
unkown image
|
page readonly
|
|
|
|
FC2C000
|
stack
|
page read and write
|
|
|
|
7FF56BB63000
|
unkown image
|
page readonly
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
7DF5798C0000
|
unkown image
|
page readonly
|
|
|
|
1D18543C000
|
unkown
|
page read and write
|
|
|
|
18119000
|
unkown
|
page read and write
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
171CC5E0000
|
heap default
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
16D8F000
|
unkown
|
page read and write
|
|
|
|
1CB24000
|
unkown
|
page read and write
|
|
|
|
1CB95000
|
unkown
|
page read and write
|
|
|
|
199E04F8000
|
unkown
|
page read and write
|
|
|
|
7FF5DF267000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF43A000
|
unkown image
|
page readonly
|
|
|
|
19B98000
|
unkown image
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
136F4000
|
unkown
|
page read and write
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
1811B000
|
unkown
|
page read and write
|
|
|
|
27C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF356000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF3CA000
|
unkown image
|
page readonly
|
|
|
|
17E99000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
3180000
|
stack
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
D867000
|
unkown
|
page read and write
|
|
|
|
16FA0000
|
unkown
|
page read and write
|
|
|
|
EDE1000
|
unkown
|
page read and write
|
|
|
|
2F0D000
|
heap default
|
page read and write
|
|
|
|
FF820000
|
unkown image
|
page readonly
|
|
|
|
16881000
|
unkown
|
page read and write
|
|
|
|
17FCF000
|
unkown
|
page read and write
|
|
|
|
1CA01000
|
unkown
|
page read and write
|
|
|
|
180ED000
|
unkown
|
page read and write
|
|
|
|
121E0000
|
unkown
|
page read and write
|
|
|
|
4AE4000
|
heap private
|
page read and write
|
|
|
|
20F45E50000
|
unkown
|
page read and write
|
|
|
|
180AD000
|
unkown
|
page read and write
|
|
|
|
1D6B87F000
|
stack
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
169B5000
|
unkown
|
page read and write
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
71E000
|
stack
|
page read and write
|
|
|
|
16861000
|
unkown
|
page read and write
|
|
|
|
16824000
|
unkown
|
page read and write
|
|
|
|
FD13000
|
unkown
|
page read and write
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page read and write
|
|
|
|
D0C0000
|
unkown
|
page read and write
|
|
|
|
17FE3000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
199E0B15000
|
unkown
|
page read and write
|
|
|
|
7FF5637A3000
|
unkown image
|
page readonly
|
|
|
|
199E0210000
|
heap default
|
page read and write
|
|
|
|
27FF000
|
unkown image
|
page readonly
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
1373B000
|
unkown
|
page read and write
|
|
|
|
17F6B000
|
unkown
|
page read and write
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
168C4000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
3ABE7E000
|
stack
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
16874000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
3680000
|
unkown image
|
page readonly
|
|
|
|
13958000
|
unkown
|
page read and write
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
7FF591C27000
|
unkown image
|
page readonly
|
|
|
|
199E0BAF000
|
unkown
|
page read and write
|
|
|
|
16ABE000
|
unkown
|
page read and write
|
|
|
|
2870000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC2A7000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC136000
|
unkown image
|
page readonly
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
7FF591B0F000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC25F000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC2D3000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
heap default
|
page read and write
|
|
|
|
1690E000
|
unkown
|
page read and write
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
1C9F4000
|
unkown
|
page read and write
|
|
|
|
138B6000
|
unkown
|
page read and write
|
|
|
|
16745000
|
unkown
|
page read and write
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
7FF56BB5F000
|
unkown image
|
page readonly
|
|
|
|
14F60000
|
unkown
|
page read and write
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
70CD27E000
|
stack
|
page read and write
|
|
|
|
167D3000
|
unkown
|
page read and write
|
|
|
|
180BB000
|
unkown
|
page read and write
|
|
|
|
2A2A000
|
heap private
|
page read and write
|
|
|
|
1C02E000
|
unkown
|
page read and write
|
|
|
|
1CCA1000
|
unkown
|
page read and write
|
|
|
|
B98487F000
|
stack
|
page read and write
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
7F992000
|
unkown image
|
page readonly
|
|
|
|
7FF5D571B000
|
unkown image
|
page readonly
|
|
|
|
180EB000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
199E01C0000
|
unkown image
|
page readonly
|
|
|
|
16888000
|
unkown
|
page read and write
|
|
|
|
167CE000
|
unkown
|
page read and write
|
|
|
|
2719000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown image
|
page readonly
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
7DF5E3592000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF35D000
|
unkown image
|
page readonly
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
7FF56551E000
|
unkown image
|
page readonly
|
|
|
|
7F870000
|
unkown image
|
page readonly
|
|
|
|
199E0B9C000
|
unkown
|
page read and write
|
|
|
|
16060000
|
unkown
|
page read and write
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
1CA16000
|
unkown
|
page read and write
|
|
|
|
CDE9000
|
unkown
|
page read and write
|
|
|
|
7FF563789000
|
unkown image
|
page readonly
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
78AF9F9000
|
stack
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
199E0B4C000
|
unkown
|
page read and write
|
|
|
|
17479000
|
unkown
|
page read and write
|
|
|
|
16B7F000
|
unkown
|
page read and write
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
7FF5637A7000
|
unkown image
|
page readonly
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
30AF000
|
unkown image
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
7DF573222000
|
unkown image
|
page readonly
|
|
|
|
6EEF7E000
|
stack
|
page read and write
|
|
|
|
16B80000
|
unkown
|
page read and write
|
|
|
|
7F492000
|
unkown image
|
page readonly
|
|
|
|
167A4000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
7FF5DF39B000
|
unkown image
|
page readonly
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
167F3000
|
unkown
|
page read and write
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
D2A5000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
16955000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
180D1000
|
unkown
|
page read and write
|
|
|
|
20F45E40000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC17D000
|
unkown image
|
page readonly
|
|
|
|
30FB000
|
unkown image
|
page read and write
|
|
|
|
171CC590000
|
unkown image
|
page readonly
|
|
|
|
FEA2000
|
unkown
|
page read and write
|
|
|
|
7FF5918FF000
|
unkown image
|
page readonly
|
|
|
|
27A92A11000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0C2000
|
unkown image
|
page readonly
|
|
|
|
136A8000
|
unkown
|
page read and write
|
|
|
|
BD45000
|
unkown
|
page read and write
|
|
|
|
1679C000
|
unkown
|
page read and write
|
|
|
|
FE8C000
|
unkown
|
page read and write
|
|
|
|
18093000
|
unkown
|
page read and write
|
|
|
|
7DF59F980000
|
unkown image
|
page readonly
|
|
|
|
16B00000
|
unkown
|
page read and write
|
|
|
|
168C4000
|
unkown
|
page read and write
|
|
|
|
18061000
|
unkown
|
page read and write
|
|
|
|
1D185C02000
|
unkown
|
page read and write
|
|
|
|
15B9C000
|
stack
|
page read and write
|
|
|
|
16934000
|
unkown
|
page read and write
|
|
|
|
603000
|
unkown
|
page read and write
|
|
|
|
20A8C380000
|
unkown image
|
page readonly
|
|
|
|
25BDEC20000
|
heap default
|
page read and write
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
FC30000
|
unkown
|
page read and write
|
|
|
|
18073000
|
unkown
|
page read and write
|
|
|
|
73AF000
|
stack
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
18109000
|
unkown
|
page read and write
|
|
|
|
17F43000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
17E9B000
|
unkown
|
page read and write
|
|
|
|
16A89000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
17E63000
|
unkown
|
page read and write
|
|
|
|
17F7F000
|
unkown
|
page read and write
|
|
|
|
FF810000
|
unkown image
|
page readonly
|
|
|
|
16999000
|
unkown
|
page read and write
|
|
|
|
EDBA000
|
unkown
|
page read and write
|
|
|
|
16B9F000
|
unkown
|
page read and write
|
|
|
|
2618000
|
unkown image
|
page readonly
|
|
|
|
167B0000
|
unkown
|
page read and write
|
|
|
|
2924000
|
unkown
|
page read and write
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
68BF877000
|
stack
|
page read and write
|
|
|
|
2EDF000
|
heap default
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
7F4B0000
|
unkown image
|
page readonly
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
180BF000
|
unkown
|
page read and write
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
7FF5D5850000
|
unkown image
|
page readonly
|
|
|
|
138A9000
|
unkown
|
page read and write
|
|
|
|
3300000
|
heap private
|
page read and write
|
|
|
|
13320000
|
unkown
|
page read and write
|
|
|
|
168FE000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
166E0000
|
unkown
|
page read and write
|
|
|
|
2CBE000
|
unkown image
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
174F6000
|
unkown
|
page read and write
|
|
|
|
169C9000
|
unkown
|
page read and write
|
|
|
|
1371E000
|
unkown
|
page read and write
|
|
|
|
18085000
|
unkown
|
page read and write
|
|
|
|
FF6F7000
|
unkown
|
page readonly
|
|
|
|
16861000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
EDA0000
|
unkown
|
page read and write
|
|
|
|
16AB8000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2C3000
|
unkown image
|
page readonly
|
|
|
|
1753C000
|
stack
|
page read and write
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
16A79000
|
unkown
|
page read and write
|
|
|
|
7FF56387A000
|
unkown image
|
page readonly
|
|
|
|
16756000
|
unkown
|
page read and write
|
|
|
|
16B6D000
|
unkown
|
page read and write
|
|
|
|
172A0000
|
unkown
|
page read and write
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
28CB000
|
unkown image
|
page readonly
|
|
|
|
7FF564C51000
|
unkown image
|
page readonly
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
25BDEE4B000
|
unkown
|
page read and write
|
|
|
|
167F3000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
7FF5D5902000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
16ADA000
|
unkown
|
page read and write
|
|
|
|
EB73000
|
unkown
|
page read and write
|
|
|
|
1CA4E000
|
unkown
|
page read and write
|
|
|
|
16772000
|
unkown
|
page read and write
|
|
|
|
7FF591CFA000
|
unkown image
|
page readonly
|
|
|
|
199E0B12000
|
unkown
|
page read and write
|
|
|
|
138A9000
|
unkown
|
page read and write
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
7FF5654C9000
|
unkown image
|
page readonly
|
|
|
|
18033000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
169B2000
|
unkown
|
page read and write
|
|
|
|
33E0000
|
unkown image
|
page readonly
|
|
|
|
7FF565371000
|
unkown image
|
page readonly
|
|
|
|
7FF5655C1000
|
unkown image
|
page readonly
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
7FF565390000
|
unkown image
|
page readonly
|
|
|
|
16A1E000
|
unkown
|
page read and write
|
|
|
|
16AA0000
|
unkown
|
page read and write
|
|
|
|
1806D000
|
unkown
|
page read and write
|
|
|
|
68BFAF8000
|
stack
|
page read and write
|
|
|
|
199E0B96000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0B2000
|
unkown image
|
page readonly
|
|
|
|
284D000
|
unkown image
|
page readonly
|
|
|
|
13872000
|
unkown
|
page read and write
|
|
|
|
7FF5ABF87000
|
unkown image
|
page readonly
|
|
|
|
18141000
|
unkown
|
page read and write
|
|
|
|
7F880000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC3B1000
|
unkown image
|
page readonly
|
|
|
|
180F1000
|
unkown
|
page read and write
|
|
|
|
17E9F000
|
unkown
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
7DF59F972000
|
unkown image
|
page readonly
|
|
|
|
2546000
|
unkown image
|
page readonly
|
|
|
|
1CA26000
|
unkown
|
page read and write
|
|
|
|
1D185508000
|
unkown
|
page read and write
|
|
|
|
168ED000
|
unkown
|
page read and write
|
|
|
|
16870000
|
unkown
|
page read and write
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
B984A7D000
|
stack
|
page read and write
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
27A929E1000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0B0000
|
unkown image
|
page readonly
|
|
|
|
EDB2000
|
unkown
|
page read and write
|
|
|
|
4F83000
|
heap private
|
page read and write
|
|
|
|
199E0458000
|
unkown
|
page read and write
|
|
|
|
199E0BAA000
|
unkown
|
page read and write
|
|
|
|
20F45E70000
|
unkown
|
page read and write
|
|
|
|
180CB000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
13614000
|
unkown
|
page read and write
|
|
|
|
68BF77F000
|
stack
|
page read and write
|
|
|
|
272B000
|
unkown image
|
page readonly
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
180F3000
|
unkown
|
page read and write
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
27A92860000
|
unkown image
|
page read and write
|
|
|
|
11C80000
|
unkown
|
page read and write
|
|
|
|
157F0000
|
unkown
|
page read and write
|
|
|
|
2EE8000
|
unkown
|
page read and write
|
|
|
|
1373D000
|
unkown
|
page read and write
|
|
|
|
25F1000
|
unkown image
|
page readonly
|
|
|
|
EDF9000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
2826000
|
unkown image
|
page readonly
|
|
|
|
199E04B3000
|
unkown
|
page read and write
|
|
|
|
EDF7000
|
unkown
|
page read and write
|
|
|
|
16956000
|
unkown
|
page read and write
|
|
|
|
27A92A13000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
FDA1000
|
unkown
|
page read and write
|
|
|
|
EDB1000
|
unkown
|
page read and write
|
|
|
|
D0BC000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
1686F000
|
unkown
|
page read and write
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
27A92AE0000
|
unkown image
|
page readonly
|
|
|
|
123B0000
|
unkown image
|
page read and write
|
|
|
|
27F0000
|
unkown image
|
page readonly
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
7FF5D5931000
|
unkown image
|
page readonly
|
|
|
|
13734000
|
unkown
|
page read and write
|
|
|
|
7FF5D5785000
|
unkown image
|
page readonly
|
|
|
|
25BDEE3C000
|
unkown
|
page read and write
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
1CAEC000
|
unkown
|
page read and write
|
|
|
|
1380E000
|
unkown
|
page read and write
|
|
|
|
1396E000
|
unkown
|
page read and write
|
|
|
|
15A90000
|
unkown
|
page read and write
|
|
|
|
7FF5ABE91000
|
unkown image
|
page readonly
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
13872000
|
unkown
|
page read and write
|
|
|
|
16B78000
|
unkown
|
page read and write
|
|
|
|
171CC62A000
|
unkown
|
page read and write
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
26EF000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABBEA000
|
unkown image
|
page readonly
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
7DF5BA030000
|
unkown image
|
page readonly
|
|
|
|
2BC0000
|
heap default
|
page read and write
|
|
|
|
7FF5654B7000
|
unkown image
|
page readonly
|
|
|
|
168C4000
|
unkown
|
page read and write
|
|
|
|
20F459F0000
|
unkown image
|
page readonly
|
|
|
|
2ED4000
|
heap default
|
page read and write
|
|
|
|
1CB39000
|
unkown
|
page read and write
|
|
|
|
7FF56550B000
|
unkown image
|
page readonly
|
|
|
|
4B97000
|
stack
|
page read and write
|
|
|
|
16B8F000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
171CE190000
|
unkown
|
page read and write
|
|
|
|
2811000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC30E000
|
unkown image
|
page readonly
|
|
|
|
199E044F000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0C2000
|
unkown image
|
page readonly
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
138D8000
|
unkown
|
page read and write
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
7DF5798C2000
|
unkown image
|
page readonly
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
16AD8000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
heap default
|
page read and write
|
|
|
|
7FF5ABD17000
|
unkown image
|
page readonly
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
123A0000
|
unkown image
|
page read and write
|
|
|
|
16A10000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
4F70000
|
unkown image
|
page readonly
|
|
|
|
17F2F000
|
unkown
|
page read and write
|
|
|
|
13727000
|
unkown
|
page read and write
|
|
|
|
7FF5D587B000
|
unkown image
|
page readonly
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
1CB90000
|
unkown
|
page read and write
|
|
|
|
168C4000
|
unkown
|
page read and write
|
|
|
|
7DF5714F0000
|
unkown image
|
page readonly
|
|
|
|
13732000
|
unkown
|
page read and write
|
|
|
|
D188000
|
unkown
|
page read and write
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
16798000
|
unkown
|
page read and write
|
|
|
|
20F46920000
|
unkown
|
page read and write
|
|
|
|
7DF59F960000
|
unkown image
|
page readonly
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
199E0B96000
|
unkown
|
page read and write
|
|
|
|
27CB000
|
unkown image
|
page readonly
|
|
|
|
D1E8000
|
unkown
|
page read and write
|
|
|
|
1C9F4000
|
unkown
|
page read and write
|
|
|
|
7FF56553A000
|
unkown image
|
page readonly
|
|
|
|
15870000
|
heap private
|
page read and write
|
|
|
|
1373B000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
unkown
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
7FF565441000
|
unkown image
|
page readonly
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7FF5655AA000
|
unkown image
|
page readonly
|
|
|
|
1CAEF000
|
unkown
|
page read and write
|
|
|
|
18129000
|
unkown
|
page read and write
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
1373F000
|
unkown
|
page read and write
|
|
|
|
7FF5D583D000
|
unkown image
|
page readonly
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
D4F5000
|
unkown
|
page read and write
|
|
|
|
1CAE7000
|
unkown
|
page read and write
|
|
|
|
13959000
|
unkown
|
page read and write
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
168EE000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
7FF591C2E000
|
unkown image
|
page readonly
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
7FF56553D000
|
unkown image
|
page readonly
|
|
|
|
D4F1000
|
unkown
|
page read and write
|
|
|
|
1809F000
|
unkown
|
page read and write
|
|
|
|
1BF3D000
|
unkown
|
page read and write
|
|
|
|
2DE9000
|
unkown
|
page read and write
|
|
|
|
2F06000
|
heap default
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
16630000
|
heap private
|
page read and write
|
|
|
|
7DFB38892000
|
unkown image
|
page readonly
|
|
|
|
18107000
|
unkown
|
page read and write
|
|
|
|
25BDEE77000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
FE90000
|
unkown
|
page read and write
|
|
|
|
168F8000
|
unkown
|
page read and write
|
|
|
|
169F8000
|
unkown
|
page read and write
|
|
|
|
16902000
|
unkown
|
page read and write
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
274B000
|
unkown image
|
page readonly
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
13970000
|
unkown
|
page read and write
|
|
|
|
138A7000
|
unkown
|
page read and write
|
|
|
|
4A40000
|
unkown
|
page read and write
|
|
|
|
13350000
|
unkown
|
page read and write
|
|
|
|
199E09E0000
|
unkown
|
page read and write
|
|
|
|
1CC97000
|
unkown
|
page read and write
|
|
|
|
167C6000
|
unkown
|
page read and write
|
|
|
|
18127000
|
unkown
|
page read and write
|
|
|
|
B9849FF000
|
stack
|
page read and write
|
|
|
|
169C0000
|
unkown
|
page read and write
|
|
|
|
ED27000
|
unkown
|
page read and write
|
|
|
|
25BDEF08000
|
unkown
|
page read and write
|
|
|
|
20F459D0000
|
unkown image
|
page read and write
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
16945000
|
unkown
|
page read and write
|
|
|
|
16881000
|
unkown
|
page read and write
|
|
|
|
7FF56BBAE000
|
unkown image
|
page readonly
|
|
|
|
16B9E000
|
unkown
|
page read and write
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
1CA11000
|
unkown
|
page read and write
|
|
|
|
13954000
|
unkown
|
page read and write
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
16FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5DF04B000
|
unkown image
|
page readonly
|
|
|
|
EDF9000
|
unkown
|
page read and write
|
|
|
|
199E0BB6000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
6809C000
|
unkown image
|
page read and write
|
|
|
|
25BDEE8F000
|
unkown
|
page read and write
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
1692F000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
68BF37F000
|
stack
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
7FF591CE4000
|
unkown image
|
page readonly
|
|
|
|
167EF000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
D88A000
|
unkown
|
page read and write
|
|
|
|
1BF1C000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
7FF5637F7000
|
unkown image
|
page readonly
|
|
|
|
14C30000
|
unkown
|
page read and write
|
|
|
|
136A7000
|
unkown
|
page read and write
|
|
|
|
1CAF4000
|
unkown
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
17280000
|
unkown
|
page read and write
|
|
|
|
173EC000
|
stack
|
page read and write
|
|
|
|
2618000
|
unkown image
|
page readonly
|
|
|
|
171CC689000
|
unkown
|
page read and write
|
|
|
|
EDA8000
|
unkown
|
page read and write
|
|
|
|
1D185513000
|
unkown
|
page read and write
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
171CC580000
|
heap private
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2FB000
|
unkown image
|
page readonly
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
2EE3000
|
heap default
|
page read and write
|
|
|
|
7F4A0000
|
unkown image
|
page readonly
|
|
|
|
608000
|
unkown
|
page read and write
|
|
|
|
1808B000
|
unkown
|
page read and write
|
|
|
|
7DF5E35A0000
|
unkown image
|
page readonly
|
|
|
|
17260000
|
unkown
|
page read and write
|
|
|
|
16A79000
|
unkown
|
page read and write
|
|
|
|
7FF5D5883000
|
unkown image
|
page readonly
|
|
|
|
171CC602000
|
unkown
|
page read and write
|
|
|
|
FF812000
|
unkown image
|
page readonly
|
|
|
|
FD1A000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown image
|
page readonly
|
|
|
|
25BDEBF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC389000
|
unkown image
|
page readonly
|
|
|
|
2F30000
|
unkown image
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
27A929FF000
|
unkown
|
page read and write
|
|
|
|
1CA4C000
|
unkown
|
page read and write
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
16849000
|
unkown
|
page read and write
|
|
|
|
167F6000
|
unkown
|
page read and write
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
180C1000
|
unkown
|
page read and write
|
|
|
|
7FF56BC41000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABD1B000
|
unkown image
|
page readonly
|
|
|
|
16D11000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
FDEA000
|
unkown
|
page read and write
|
|
|
|
199E0A02000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
199E0450000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D5827000
|
unkown image
|
page readonly
|
|
|
|
16B78000
|
unkown
|
page read and write
|
|
|
|
171CC718000
|
unkown
|
page read and write
|
|
|
|
27A92B40000
|
heap private
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
7FF563692000
|
unkown image
|
page readonly
|
|
|
|
7DF571500000
|
unkown image
|
page readonly
|
|
|
|
7DF4EAF80000
|
unkown image
|
page readonly
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
DFE0000
|
unkown
|
page read and write
|
|
|
|
1CC9C000
|
unkown
|
page read and write
|
|
|
|
6EF07E000
|
stack
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
2EC0000
|
heap default
|
page read and write
|
|
|
|
2A30000
|
unkown image
|
page readonly
|
|
|
|
16B75000
|
unkown
|
page read and write
|
|
|
|
605000
|
unkown
|
page read and write
|
|
|
|
28E6000
|
unkown image
|
page readonly
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
1694C000
|
unkown
|
page read and write
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
199E0B5A000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
16AC0000
|
unkown
|
page read and write
|
|
|
|
16992000
|
unkown
|
page read and write
|
|
|
|
1CB25000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
199E09E0000
|
unkown
|
page read and write
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
27A928A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF2BC000
|
unkown image
|
page readonly
|
|
|
|
DAE7000
|
unkown
|
page read and write
|
|
|
|
27E3000
|
unkown image
|
page readonly
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
13870000
|
unkown
|
page read and write
|
|
|
|
7FF5637AE000
|
unkown image
|
page readonly
|
|
|
|
7FF56BBCA000
|
unkown image
|
page readonly
|
|
|
|
16B8F000
|
unkown
|
page read and write
|
|
|
|
ED74000
|
unkown
|
page read and write
|
|
|
|
2F14000
|
heap default
|
page read and write
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
stack
|
page read and write
|
|
|
|
1811D000
|
unkown
|
page read and write
|
|
|
|
171CC648000
|
unkown
|
page read and write
|
|
|
|
32F7000
|
heap private
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
20F45AE0000
|
unkown
|
page read and write
|
|
|
|
2613000
|
unkown image
|
page readonly
|
|
|
|
16D8F000
|
unkown
|
page read and write
|
|
|
|
138B6000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
2EEE000
|
heap default
|
page read and write
|
|
|
|
166F0000
|
unkown
|
page read and write
|
|
|
|
120BC000
|
stack
|
page read and write
|
|
|
|
D14000
|
unkown image
|
page readonly
|
|
|
|
18087000
|
unkown
|
page read and write
|
|
|
|
F0AC000
|
stack
|
page read and write
|
|
|
|
DAB6000
|
unkown
|
page read and write
|
|
|
|
180E9000
|
unkown
|
page read and write
|
|
|
|
CD51000
|
unkown
|
page read and write
|
|
|
|
1BF17000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
167D5000
|
unkown
|
page read and write
|
|
|
|
7FF5655A4000
|
unkown image
|
page readonly
|
|
|
|
16B7F000
|
unkown
|
page read and write
|
|
|
|
180BD000
|
unkown
|
page read and write
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
138A8000
|
unkown
|
page read and write
|
|
|
|
285B000
|
unkown image
|
page readonly
|
|
|
|
7FF5917E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF363000
|
unkown image
|
page readonly
|
|
|
|
138D9000
|
unkown
|
page read and write
|
|
|
|
33EC0000
|
unkown
|
page execute read
|
|
|
|
20A8BF02000
|
unkown
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
heap default
|
page read and write
|
|
|
|
7FF5D56B6000
|
unkown image
|
page readonly
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
1D185A50000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC0F6000
|
unkown image
|
page readonly
|
|
|
|
172B0000
|
unkown
|
page read and write
|
|
|
|
7DF46F3B0000
|
unkown image
|
page readonly
|
|
|
|
168D1000
|
unkown
|
page read and write
|
|
|
|
1396D000
|
unkown
|
page read and write
|
|
|
|
167C6000
|
unkown
|
page read and write
|
|
|
|
7FF591C0D000
|
unkown image
|
page readonly
|
|
|
|
171CC657000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
7F880000
|
unkown image
|
page readonly
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
199BE000
|
stack
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
1CADF000
|
unkown
|
page read and write
|
|
|
|
7F4A2000
|
unkown image
|
page readonly
|
|
|
|
7FF591B55000
|
unkown image
|
page readonly
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
19BB3000
|
unkown image
|
page read and write
|
|
|
|
3AC2FF000
|
stack
|
page read and write
|
|
|
|
199E1002000
|
unkown
|
page read and write
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
18139000
|
unkown
|
page read and write
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
13871000
|
unkown
|
page read and write
|
|
|
|
136D7000
|
unkown
|
page read and write
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
16910000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
20A8BBD0000
|
unkown image
|
page read and write
|
|
|
|
25BDEBD0000
|
unkown image
|
page readonly
|
|
|
|
7FF565415000
|
unkown image
|
page readonly
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
180DD000
|
unkown
|
page read and write
|
|
|
|
16F02000
|
unkown
|
page read and write
|
|
|
|
138AE000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
7FF56B486000
|
unkown image
|
page readonly
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
26DE000
|
unkown image
|
page readonly
|
|
|
|
199E0B77000
|
unkown
|
page read and write
|
|
|
|
D051000
|
unkown
|
page read and write
|
|
|
|
167F1000
|
unkown
|
page read and write
|
|
|
|
32E0000
|
unkown image
|
page readonly
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
7FF563697000
|
unkown image
|
page readonly
|
|
|
|
7DF59F970000
|
unkown image
|
page readonly
|
|
|
|
1CB27000
|
unkown
|
page read and write
|
|
|
|
16D91000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
7F4A0000
|
unkown image
|
page readonly
|
|
|
|
EDB8000
|
unkown
|
page read and write
|
|
|
|
E013000
|
unkown
|
page read and write
|
|
|
|
EF3D000
|
stack
|
page read and write
|
|
|
|
7FF5636FC000
|
unkown image
|
page readonly
|
|
|
|
138A7000
|
unkown
|
page read and write
|
|
|
|
3307000
|
heap private
|
page read and write
|
|
|
|
27A92B50000
|
unkown image
|
page readonly
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
180F5000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
169C9000
|
unkown
|
page read and write
|
|
|
|
1397C000
|
unkown
|
page read and write
|
|
|
|
13706000
|
unkown
|
page read and write
|
|
|
|
2FC1000
|
unkown
|
page read and write
|
|
|
|
20F45B3F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3CD000
|
unkown image
|
page readonly
|
|
|
|
FE8C000
|
unkown
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
7FF5655C1000
|
unkown image
|
page readonly
|
|
|
|
16A06000
|
unkown
|
page read and write
|
|
|
|
7FF591C20000
|
unkown image
|
page readonly
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
16D11000
|
unkown
|
page read and write
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
7FF5DEC6F000
|
unkown image
|
page readonly
|
|
|
|
ED7E000
|
unkown
|
page read and write
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
27E8000
|
unkown image
|
page readonly
|
|
|
|
FDEC000
|
unkown
|
page read and write
|
|
|
|
7FF5D591A000
|
unkown image
|
page readonly
|
|
|
|
199E0BB6000
|
unkown
|
page read and write
|
|
|
|
16FE0000
|
unkown
|
page read and write
|
|
|
|
199E0BD9000
|
unkown
|
page read and write
|
|
|
|
3230000
|
unkown
|
page read and write
|
|
|
|
7FF591C4B000
|
unkown image
|
page readonly
|
|
|
|
17E65000
|
unkown
|
page read and write
|
|
|
|
16FB0000
|
unkown
|
page read and write
|
|
|
|
171CC663000
|
unkown
|
page read and write
|
|
|
|
18105000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown image
|
page readonly
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
138EC000
|
unkown
|
page read and write
|
|
|
|
1811F000
|
unkown
|
page read and write
|
|
|
|
7FF563859000
|
unkown image
|
page readonly
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
167B7000
|
unkown
|
page read and write
|
|
|
|
ED00000
|
unkown
|
page read and write
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
13970000
|
unkown
|
page read and write
|
|
|
|
CD65000
|
unkown
|
page read and write
|
|
|
|
1D185320000
|
unkown image
|
page readonly
|
|
|
|
171CC647000
|
unkown
|
page read and write
|
|
|
|
2613000
|
unkown image
|
page readonly
|
|
|
|
D04E000
|
unkown
|
page read and write
|
|
|
|
27A92B45000
|
heap private
|
page read and write
|
|
|
|
7FF5D5843000
|
unkown image
|
page readonly
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
15DC1000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
199E04BF000
|
unkown
|
page read and write
|
|
|
|
15AB0000
|
unkown
|
page read and write
|
|
|
|
167D2000
|
unkown
|
page read and write
|
|
|
|
13972000
|
unkown
|
page read and write
|
|
|
|
1CC2E000
|
unkown
|
page read and write
|
|
|
|
25BDF402000
|
unkown
|
page read and write
|
|
|
|
174C5000
|
unkown
|
page read and write
|
|
|
|
7FF56BB5D000
|
unkown image
|
page readonly
|
|
|
|
2445000
|
unkown image
|
page readonly
|
|
|
|
7FF56BB77000
|
unkown image
|
page readonly
|
|
|
|
2EE0000
|
unkown
|
page read and write
|
|
|
|
7FF5AC169000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC2BD000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC235000
|
unkown image
|
page readonly
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
1694C000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0D0000
|
unkown image
|
page readonly
|
|
|
|
E009000
|
unkown
|
page read and write
|
|
|
|
6EE4AC000
|
unkown
|
page read and write
|
|
|
|
27A929B0000
|
unkown
|
page read and write
|
|
|
|
7DF4E1460000
|
unkown image
|
page readonly
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
7FF5654E7000
|
unkown image
|
page readonly
|
|
|
|
1C98D000
|
unkown
|
page read and write
|
|
|
|
F9EE000
|
stack
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
7FF56378F000
|
unkown image
|
page readonly
|
|
|
|
27A92880000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
stack
|
page read and write
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
7DF5714E0000
|
unkown image
|
page readonly
|
|
|
|
7FF56378D000
|
unkown image
|
page readonly
|
|
|
|
157DD000
|
stack
|
page read and write
|
|
|
|
16992000
|
unkown
|
page read and write
|
|
|
|
1622E000
|
unkown
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
199E1063000
|
unkown
|
page read and write
|
|
|
|
ED10000
|
unkown
|
page read and write
|
|
|
|
16945000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
1238E000
|
stack
|
page read and write
|
|
|
|
2DC0000
|
unkown image
|
page readonly
|
|
|
|
16B7A000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
4C20000
|
heap private
|
page read and write
|
|
|
|
171CC658000
|
unkown
|
page read and write
|
|
|
|
7FF5D56E1000
|
unkown image
|
page readonly
|
|
|
|
7DF573220000
|
unkown image
|
page readonly
|
|
|
|
27A92990000
|
unkown
|
page read and write
|
|
|
|
16760000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
7FF56BBA3000
|
unkown image
|
page readonly
|
|
|
|
31A0000
|
stack
|
page read and write
|
|
|
|
2EC6000
|
heap default
|
page read and write
|
|
|
|
ED9F000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown image
|
page write copy
|
|
|
|
167F3000
|
unkown
|
page read and write
|
|
|
|
D466000
|
unkown
|
page read and write
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
16768000
|
unkown
|
page read and write
|
|
|
|
E5DF000
|
stack
|
page read and write
|
|
|
|
17230000
|
unkown
|
page read and write
|
|
|
|
78AF7FF000
|
stack
|
page read and write
|
|
|
|
1CA19000
|
unkown
|
page read and write
|
|
|
|
7FF563547000
|
unkown image
|
page readonly
|
|
|
|
17430000
|
unkown
|
page read and write
|
|
|
|
17410000
|
unkown
|
page read and write
|
|
|
|
7DF49D830000
|
unkown image
|
page readonly
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
1CB39000
|
unkown
|
page read and write
|
|
|
|
7FF5633D3000
|
unkown image
|
page readonly
|
|
|
|
199E0B68000
|
unkown
|
page read and write
|
|
|
|
199E0B66000
|
unkown
|
page read and write
|
|
|
|
2ED7000
|
heap default
|
page read and write
|
|
|
|
EDDD000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
15DA3000
|
unkown
|
page read and write
|
|
|
|
16A0A000
|
unkown
|
page read and write
|
|
|
|
28DB000
|
unkown image
|
page readonly
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
1806F000
|
unkown
|
page read and write
|
|
|
|
EDB1000
|
unkown
|
page read and write
|
|
|
|
1CC9F000
|
unkown
|
page read and write
|
|
|
|
D14C000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2B9000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
stack
|
page read and write
|
|
|
|
18069000
|
unkown
|
page read and write
|
|
|
|
1812B000
|
unkown
|
page read and write
|
|
|
|
15D66000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
2FD5000
|
unkown
|
page read and write
|
|
|
|
7FF56B411000
|
unkown image
|
page readonly
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
20A8BE3C000
|
unkown
|
page read and write
|
|
|
|
25DF000
|
unkown image
|
page readonly
|
|
|
|
7FF563793000
|
unkown image
|
page readonly
|
|
|
|
16640000
|
unkown image
|
page readonly
|
|
|
|
16908000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown
|
page read and write
|
|
|
|
7DF5798D0000
|
unkown image
|
page readonly
|
|
|
|
28F8000
|
unkown image
|
page readonly
|
|
|
|
171CC590000
|
unkown image
|
page readonly
|
|
|
|
D08B000
|
unkown
|
page read and write
|
|
|
|
27A92880000
|
unkown image
|
page readonly
|
|
|
|
169AC000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
heap default
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
2FEF000
|
unkown image
|
page read and write
|
|
|
|
1BEF0000
|
unkown
|
page read and write
|
|
|
|
16B81000
|
unkown
|
page read and write
|
|
|
|
7DF5798B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5650A1000
|
unkown image
|
page readonly
|
|
|
|
16808000
|
unkown
|
page read and write
|
|
|
|
7DF5714F2000
|
unkown image
|
page readonly
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
1397C000
|
unkown
|
page read and write
|
|
|
|
171CC658000
|
unkown
|
page read and write
|
|
|
|
180CF000
|
unkown
|
page read and write
|
|
|
|
199E0990000
|
unkown image
|
page readonly
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
14F80000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
25BDEE6E000
|
unkown
|
page read and write
|
|
|
|
7DF573240000
|
unkown image
|
page readonly
|
|
|
|
2FB8000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
3690000
|
unkown image
|
page readonly
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
2F22000
|
heap default
|
page read and write
|
|
|
|
190000
|
unkown image
|
page readonly
|
|
|
|
162C1000
|
unkown
|
page read and write
|
|
|
|
168F4000
|
unkown
|
page read and write
|
|
|
|
138A9000
|
unkown
|
page read and write
|
|
|
|
7FF5CB361000
|
unkown image
|
page readonly
|
|
|
|
138AE000
|
unkown
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
167D2000
|
unkown
|
page read and write
|
|
|
|
7FF5633E9000
|
unkown image
|
page readonly
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
7FF56BC51000
|
unkown image
|
page readonly
|
|
|
|
180FB000
|
unkown
|
page read and write
|
|
|
|
1CC9A000
|
unkown
|
page read and write
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
172EE000
|
stack
|
page read and write
|
|
|
|
199E0B77000
|
unkown
|
page read and write
|
|
|
|
15C9C000
|
stack
|
page read and write
|
|
|
|
6EEE7C000
|
stack
|
page read and write
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
15DC6000
|
unkown
|
page read and write
|
|
|
|
70CD0FB000
|
stack
|
page read and write
|
|
|
|
68BFDFF000
|
stack
|
page read and write
|
|
|
|
16888000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
heap private
|
page read and write
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
1BDD0000
|
unkown
|
page read and write
|
|
|
|
18091000
|
unkown
|
page read and write
|
|
|
|
1373B000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown image
|
page readonly
|
|
|
|
7FF56376B000
|
unkown image
|
page readonly
|
|
|
|
13465000
|
stack
|
page read and write
|
|
|
|
7FF5637DE000
|
unkown image
|
page readonly
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
7FF591CD2000
|
unkown image
|
page readonly
|
|
|
|
17FF7000
|
unkown
|
page read and write
|
|
|
|
169D5000
|
unkown
|
page read and write
|
|
|
|
ED92000
|
unkown
|
page read and write
|
|
|
|
13699000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA41000
|
unkown image
|
page readonly
|
|
|
|
7DF5714F0000
|
unkown image
|
page readonly
|
|
|
|
1C98D000
|
unkown
|
page read and write
|
|
|
|
7DF573240000
|
unkown image
|
page readonly
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
2928000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
7FF5653AB000
|
unkown image
|
page readonly
|
|
|
|
4F50000
|
unkown image
|
page readonly
|
|
|
|
27EE000
|
unkown image
|
page readonly
|
|
|
|
18101000
|
unkown
|
page read and write
|
|
|
|
7FF591C5E000
|
unkown image
|
page readonly
|
|
|
|
199E0508000
|
unkown
|
page read and write
|
|
|
|
17290000
|
unkown
|
page read and write
|
|
|
|
167A2000
|
unkown
|
page read and write
|
|
|
|
1CC2E000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
180C3000
|
unkown
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
DFFF000
|
unkown
|
page read and write
|
|
|
|
1D6B777000
|
stack
|
page read and write
|
|
|
|
16A0F000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
16169000
|
unkown
|
page read and write
|
|
|
|
7FF563524000
|
unkown image
|
page readonly
|
|
|
|
1373F000
|
unkown
|
page read and write
|
|
|
|
2D00000
|
unkown image
|
page readonly
|
|
|
|
EDBA000
|
unkown
|
page read and write
|
|
|
|
167EF000
|
unkown
|
page read and write
|
|
|
|
171CE740000
|
unkown image
|
page write copy
|
|
|
|
7FF5D5839000
|
unkown image
|
page readonly
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
EDB0000
|
unkown
|
page read and write
|
|
|
|
7FF56BC3A000
|
unkown image
|
page readonly
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
25BDF000000
|
unkown image
|
page readonly
|
|
|
|
FD13000
|
unkown
|
page read and write
|
|
|
|
7FF5653CF000
|
unkown image
|
page readonly
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
78AF77E000
|
stack
|
page read and write
|
|
|
|
16A79000
|
unkown
|
page read and write
|
|
|
|
7FF56358B000
|
unkown image
|
page readonly
|
|
|
|
18083000
|
unkown
|
page read and write
|
|
|
|
7F890000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABF84000
|
unkown image
|
page readonly
|
|
|
|
7FF5654E0000
|
unkown image
|
page readonly
|
|
|
|
169B5000
|
unkown
|
page read and write
|
|
|
|
2835000
|
unkown image
|
page readonly
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
EFA0000
|
heap private
|
page read and write
|
|
|
|
14C40000
|
unkown
|
page read and write
|
|
|
|
13340000
|
unkown
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
138B4000
|
unkown
|
page read and write
|
|
|
|
199E01F0000
|
unkown image
|
page readonly
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
68BF677000
|
stack
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
D7E4000
|
unkown
|
page read and write
|
|
|
|
16A2A000
|
unkown
|
page read and write
|
|
|
|
18089000
|
unkown
|
page read and write
|
|
|
|
17420000
|
unkown
|
page read and write
|
|
|
|
17E81000
|
unkown
|
page read and write
|
|
|
|
16D8F000
|
unkown
|
page read and write
|
|
|
|
20A8BE66000
|
unkown
|
page read and write
|
|
|
|
28EC000
|
unkown image
|
page readonly
|
|
|
|
169C2000
|
unkown
|
page read and write
|
|
|
|
220B000
|
unkown image
|
page readonly
|
|
|
|
16690000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
7FF5DF434000
|
unkown image
|
page readonly
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
180C5000
|
unkown
|
page read and write
|
|
|
|
7FF591C37000
|
unkown image
|
page readonly
|
|
|
|
180D3000
|
unkown
|
page read and write
|
|
|
|
3AC1F7000
|
stack
|
page read and write
|
|
|
|
169BD000
|
unkown
|
page read and write
|
|
|
|
7F872000
|
unkown image
|
page readonly
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
2CCA000
|
unkown image
|
page read and write
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
7FF563864000
|
unkown image
|
page readonly
|
|
|
|
15D61000
|
unkown
|
page read and write
|
|
|
|
199E04A9000
|
unkown
|
page read and write
|
|
|
|
167CE000
|
unkown
|
page read and write
|
|
|
|
16874000
|
unkown
|
page read and write
|
|
|
|
2CB3000
|
unkown image
|
page read and write
|
|
|
|
169C9000
|
unkown
|
page read and write
|
|
|
|
2BA0000
|
unkown image
|
page readonly
|
|
|
|
13870000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
16F06000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
1CA2B000
|
unkown
|
page read and write
|
|
|
|
2716000
|
unkown image
|
page readonly
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
7FF591D01000
|
unkown image
|
page readonly
|
|
|
|
1805F000
|
unkown
|
page read and write
|
|
|
|
158E0000
|
unkown
|
page read and write
|
|
|
|
27A92A10000
|
unkown
|
page read and write
|
|
|
|
67E51000
|
unkown image
|
page execute read
|
|
|
|
DAF4000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown image
|
page readonly
|
|
|
|
2F9A000
|
heap default
|
page read and write
|
|
|
|
26E3000
|
unkown image
|
page readonly
|
|
|
|
199E0B8E000
|
unkown
|
page read and write
|
|
|
|
7FF5DF441000
|
unkown image
|
page readonly
|
|
|
|
16B86000
|
unkown
|
page read and write
|
|
|
|
16826000
|
unkown
|
page read and write
|
|
|
|
7FF56303A000
|
unkown image
|
page readonly
|
|
|
|
199E044A000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
7FF56BBCD000
|
unkown image
|
page readonly
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
16180000
|
unkown
|
page read and write
|
|
|
|
7FF5ABD2C000
|
unkown image
|
page readonly
|
|
|
|
DE48000
|
unkown
|
page read and write
|
|
|
|
260C000
|
unkown image
|
page readonly
|
|
|
|
16888000
|
unkown
|
page read and write
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
D386000
|
unkown
|
page read and write
|
|
|
|
169BE000
|
unkown
|
page read and write
|
|
|
|
25BDEF00000
|
unkown
|
page read and write
|
|
|
|
7DF4B7EE0000
|
unkown image
|
page readonly
|
|
|
|
16500000
|
heap private
|
page read and write
|
|
|
|
1EA000
|
unkown
|
page read and write
|
|
|
|
199E09F0000
|
unkown image
|
page read and write
|
|
|
|
2EE5000
|
unkown
|
page read and write
|
|
|
|
166B0000
|
unkown
|
page read and write
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
1373F000
|
unkown
|
page read and write
|
|
|
|
171CC65D000
|
unkown
|
page read and write
|
|
|
|
17E83000
|
unkown
|
page read and write
|
|
|
|
6EE8FF000
|
stack
|
page read and write
|
|
|
|
2BAA000
|
unkown
|
page read and write
|
|
|
|
180C7000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
17E9D000
|
unkown
|
page read and write
|
|
|
|
1D6B5FB000
|
stack
|
page read and write
|
|
|
|
7FF5DEBC7000
|
unkown image
|
page readonly
|
|
|
|
E35F000
|
stack
|
page read and write
|
|
|
|
1382A000
|
unkown
|
page read and write
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
16955000
|
unkown
|
page read and write
|
|
|
|
FF6DD000
|
unkown
|
page execute read
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
180E1000
|
unkown
|
page read and write
|
|
|
|
1D1856D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5637FA000
|
unkown image
|
page readonly
|
|
|
|
13727000
|
unkown
|
page read and write
|
|
|
|
FCD0000
|
unkown
|
page read and write
|
|
|
|
FF6F3000
|
unkown
|
page execute read
|
|
|
|
20A8BE56000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
138C5000
|
unkown
|
page read and write
|
|
|
|
180A1000
|
unkown
|
page read and write
|
|
|
|
6EED7B000
|
stack
|
page read and write
|
|
|
|
E21F000
|
stack
|
page read and write
|
|
|
|
2829000
|
unkown image
|
page readonly
|
|
|
|
7FF5D58AA000
|
unkown image
|
page readonly
|
|
|
|
7FF56BB66000
|
unkown image
|
page readonly
|
|
|
|
25BDEDF0000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
2FB5000
|
unkown
|
page read and write
|
|
|
|
19ABE000
|
stack
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
168F9000
|
unkown
|
page read and write
|
|
|
|
1D185500000
|
unkown
|
page read and write
|
|
|
|
ED65000
|
unkown
|
page read and write
|
|
|
|
EEFE000
|
stack
|
page read and write
|
|
|
|
7F980000
|
unkown image
|
page readonly
|
|
|
|
27D6000
|
unkown image
|
page readonly
|
|
|
|
1801F000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
16D8B000
|
unkown
|
page read and write
|
|
|
|
20F45B5D000
|
heap default
|
page read and write
|
|
|
|
171CC5F0000
|
unkown image
|
page readonly
|
|
|
|
1D185300000
|
unkown image
|
page readonly
|
|
|
|
199E0470000
|
unkown
|
page read and write
|
|
|
|
23F7000
|
unkown image
|
page readonly
|
|
|
|
17BC1000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
20A8C200000
|
unkown image
|
page readonly
|
|
|
|
158C0000
|
unkown
|
page read and write
|
|
|
|
1CB24000
|
unkown
|
page read and write
|
|
|
|
2CEE000
|
unkown image
|
page read and write
|
|
|
|
18075000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
7FF5DF147000
|
unkown image
|
page readonly
|
|
|
|
16881000
|
unkown
|
page read and write
|
|
|
|
1373D000
|
unkown
|
page read and write
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
13872000
|
unkown
|
page read and write
|
|
|
|
7CB0000
|
unkown
|
page read and write
|
|
|
|
18077000
|
unkown
|
page read and write
|
|
|
|
1699A000
|
unkown
|
page read and write
|
|
|
|
CE00000
|
unkown
|
page read and write
|
|
|
|
7CAF000
|
stack
|
page read and write
|
|
|
|
167F6000
|
unkown
|
page read and write
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
2F08000
|
heap default
|
page read and write
|
|
|
|
180F9000
|
unkown
|
page read and write
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF429000
|
unkown image
|
page readonly
|
|
|
|
13881000
|
unkown
|
page read and write
|
|
|
|
2EE8000
|
unkown
|
page read and write
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
25BDF200000
|
unkown image
|
page readonly
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
7FF591AB1000
|
unkown image
|
page readonly
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
13870000
|
unkown
|
page read and write
|
|
|
|
199E044C000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown image
|
page readonly
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
7FF5ABB6D000
|
unkown image
|
page readonly
|
|
|
|
1CC26000
|
unkown
|
page read and write
|
|
|
|
7FF5ABF17000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC382000
|
unkown image
|
page readonly
|
|
|
|
D228000
|
unkown
|
page read and write
|
|
|
|
121BA000
|
stack
|
page read and write
|
|
|
|
FCF0000
|
unkown
|
page read and write
|
|
|
|
171CC648000
|
unkown
|
page read and write
|
|
|
|
2561000
|
unkown image
|
page readonly
|
|
|
|
1C9FC000
|
unkown
|
page read and write
|
|
|
|
1CCA1000
|
unkown
|
page read and write
|
|
|
|
7FF5637FD000
|
unkown image
|
page readonly
|
|
|
|
6EEB7E000
|
stack
|
page read and write
|
|
|
|
199E0B66000
|
unkown
|
page read and write
|
|
|
|
EB70000
|
heap private
|
page read and write
|
|
|
|
25EB000
|
unkown image
|
page readonly
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
2F17000
|
heap default
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
253A000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA022000
|
unkown image
|
page readonly
|
|
|
|
13949000
|
unkown
|
page read and write
|
|
|
|
16480000
|
heap private
|
page read and write
|
|
|
|
199E01C0000
|
unkown image
|
page readonly
|
|
|
|
2C9A000
|
unkown image
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
167D8000
|
unkown
|
page read and write
|
|
|
|
20A8BE50000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
D407000
|
unkown
|
page read and write
|
|
|
|
2FD2000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
18113000
|
unkown
|
page read and write
|
|
|
|
171CC5C0000
|
unkown image
|
page readonly
|
|
|
|
1CB92000
|
unkown
|
page read and write
|
|
|
|
121E0000
|
unkown
|
page read and write
|
|
|
|
7FF591B6C000
|
unkown image
|
page readonly
|
|
|
|
25BDEC00000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC20B000
|
unkown image
|
page readonly
|
|
|
|
70CCD6E000
|
stack
|
page read and write
|
|
|
|
7FF5D55B5000
|
unkown image
|
page readonly
|
|
|
|
7FF5655BA000
|
unkown image
|
page readonly
|
|
|
|
7FF591D01000
|
unkown image
|
page readonly
|
|
|
|
2AF0000
|
unkown image
|
page readonly
|
|
|
|
167EF000
|
unkown
|
page read and write
|
|
|
|
7FF5AC082000
|
unkown image
|
page readonly
|
|
|
|
16934000
|
unkown
|
page read and write
|
|
|
|
121E0000
|
unkown
|
page read and write
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
2EDD000
|
heap default
|
page read and write
|
|
|
|
FD88000
|
unkown
|
page read and write
|
|
|
|
199E09E0000
|
unkown
|
page read and write
|
|
|
|
7FF5CB361000
|
unkown image
|
page readonly
|
|
|
|
16D8F000
|
unkown
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
25DB000
|
unkown image
|
page readonly
|
|
|
|
FB2D000
|
stack
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
14C10000
|
unkown
|
page read and write
|
|
|
|
7FF5AC101000
|
unkown image
|
page readonly
|
|
|
|
1D185492000
|
unkown
|
page read and write
|
|
|
|
E6FC000
|
stack
|
page read and write
|
|
|
|
1694C000
|
unkown
|
page read and write
|
|
|
|
DAE0000
|
unkown
|
page read and write
|
|
|
|
1810D000
|
unkown
|
page read and write
|
|
|
|
16770000
|
unkown
|
page read and write
|
|
|
|
D184000
|
unkown
|
page read and write
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
13330000
|
unkown
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
68BF27C000
|
unkown
|
page read and write
|
|
|
|
4C1D000
|
stack
|
page read and write
|
|
|
|
13580000
|
unkown
|
page read and write
|
|
|
|
13980000
|
unkown image
|
page readonly
|
|
|
|
7F880000
|
unkown image
|
page readonly
|
|
|
|
138A9000
|
unkown
|
page read and write
|
|
|
|
19BA0000
|
unkown image
|
page read and write
|
|
|
|
17E5D000
|
unkown
|
page read and write
|
|
|
|
136F4000
|
unkown
|
page read and write
|
|
|
|
257B000
|
unkown image
|
page readonly
|
|
|
|
EDC1000
|
unkown
|
page read and write
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
7CB0000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
7F490000
|
unkown image
|
page readonly
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
136F4000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown image
|
page readonly
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
7FF56BB70000
|
unkown image
|
page readonly
|
|
|
|
2FD2000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0B0000
|
unkown image
|
page readonly
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
7FF5637CB000
|
unkown image
|
page readonly
|
|
|
|
25BDEBB0000
|
unkown image
|
page read and write
|
|
|
|
7FF5AC32A000
|
unkown image
|
page readonly
|
|
|
|
1805D000
|
unkown
|
page read and write
|
|
|
|
7FF5654E3000
|
unkown image
|
page readonly
|
|
|
|
27A929D0000
|
heap default
|
page read and write
|
|
|
|
20F46280000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF445000
|
unkown image
|
page readonly
|
|
|
|
7FF56542C000
|
unkown image
|
page readonly
|
|
|
|
28BF000
|
unkown image
|
page readonly
|
|
|
|
167D8000
|
unkown
|
page read and write
|
|
|
|
18079000
|
unkown
|
page read and write
|
|
|
|
1694A000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
2443000
|
unkown image
|
page readonly
|
|
|
|
D8F6000
|
unkown
|
page read and write
|
|
|
|
1687F000
|
unkown
|
page read and write
|
|
|
|
7FF591C23000
|
unkown image
|
page readonly
|
|
|
|
3AC07B000
|
stack
|
page read and write
|
|
|
|
16253000
|
unkown
|
page read and write
|
|
|
|
18081000
|
unkown
|
page read and write
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
78AF6FD000
|
stack
|
page read and write
|
|
|
|
2E3B000
|
heap default
|
page read and write
|
|
|
|
2EFD000
|
heap default
|
page read and write
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
180FF000
|
unkown
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
7FF5DF3AE000
|
unkown image
|
page readonly
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
1C9F9000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
16803000
|
unkown
|
page read and write
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
1D1858D0000
|
unkown image
|
page readonly
|
|
|
|
E085000
|
unkown
|
page read and write
|
|
|
|
171CE080000
|
unkown
|
page read and write
|
|
|
|
1812D000
|
unkown
|
page read and write
|
|
|
|
20F466E0000
|
unkown
|
page read and write
|
|
|
|
20F469A0000
|
unkown
|
page read and write
|
|
|
|
273D000
|
unkown image
|
page readonly
|
|
|
|
EDC1000
|
unkown
|
page read and write
|
|
|
|
7FF5AC161000
|
unkown image
|
page readonly
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2BF000
|
unkown image
|
page readonly
|
|
|
|
167F1000
|
unkown
|
page read and write
|
|
|
|
1D185300000
|
unkown image
|
page readonly
|
|
|
|
7FF5D56FD000
|
unkown image
|
page readonly
|
|
|
|
1336D000
|
stack
|
page read and write
|
|
|
|
16A83000
|
unkown
|
page read and write
|
|
|
|
3190000
|
stack
|
page read and write
|
|
|
|
1D185427000
|
unkown
|
page read and write
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
1807D000
|
unkown
|
page read and write
|
|
|
|
32DC000
|
stack
|
page read and write
|
|
|
|
16B06000
|
unkown
|
page read and write
|
|
|
|
27C0000
|
unkown image
|
page readonly
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
15D9C000
|
unkown
|
page read and write
|
|
|
|
138B6000
|
unkown
|
page read and write
|
|
|
|
1C958000
|
unkown
|
page read and write
|
|
|
|
20F46940000
|
unkown
|
page read and write
|
|
|
|
138EF000
|
unkown
|
page read and write
|
|
|
|
199E0516000
|
unkown
|
page read and write
|
|
|
|
272F000
|
unkown image
|
page readonly
|
|
|
|
2EE6000
|
heap default
|
page read and write
|
|
|
|
FDA0000
|
unkown
|
page read and write
|
|
|
|
270A000
|
unkown image
|
page readonly
|
|
|
|
168FD000
|
unkown
|
page read and write
|
|
|
|
16861000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
7FF5654EE000
|
unkown image
|
page readonly
|
|
|
|
7FF565537000
|
unkown image
|
page readonly
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
199E045A000
|
unkown
|
page read and write
|
|
|
|
CD55000
|
unkown
|
page read and write
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
16690000
|
unkown
|
page read and write
|
|
|
|
199E0BAF000
|
unkown
|
page read and write
|
|
|
|
7DF573222000
|
unkown image
|
page readonly
|
|
|
|
169D5000
|
unkown
|
page read and write
|
|
|
|
7FF5AC29E000
|
unkown image
|
page readonly
|
|
|
|
1CC2B000
|
unkown
|
page read and write
|
|
|
|
16503000
|
heap private
|
page read and write
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
13990000
|
unkown
|
page read and write
|
|
|
|
135FB000
|
unkown
|
page read and write
|
|
|
|
FD13000
|
unkown
|
page read and write
|
|
|
|
7DF573232000
|
unkown image
|
page readonly
|
|
|
|
16992000
|
unkown
|
page read and write
|
|
|
|
30F6000
|
unkown image
|
page read and write
|
|
|
|
7FF56BC34000
|
unkown image
|
page readonly
|
|
|
|
168F9000
|
unkown
|
page read and write
|
|
|
|
168C1000
|
unkown
|
page read and write
|
|
|
|
FAEE000
|
stack
|
page read and write
|
|
|
|
68BFBFE000
|
stack
|
page read and write
|
|
|
|
2531000
|
unkown image
|
page readonly
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
16670000
|
unkown
|
page read and write
|
|
|
|
7DF59F970000
|
unkown image
|
page readonly
|
|
|
|
1CA16000
|
unkown
|
page read and write
|
|
|
|
B9848FF000
|
stack
|
page read and write
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
199E0980000
|
unkown image
|
page readonly
|
|
|
|
1D6B4FC000
|
stack
|
page read and write
|
|
|
|
161CD000
|
unkown
|
page read and write
|
|
|
|
CD60000
|
unkown
|
page read and write
|
|
|
|
FCE0000
|
unkown
|
page read and write
|
|
|
|
FDEA000
|
unkown
|
page read and write
|
|
|
|
16861000
|
unkown
|
page read and write
|
|
|
|
7FF56541B000
|
unkown image
|
page readonly
|
|
|
|
EDC1000
|
unkown
|
page read and write
|
|
|
|
180A7000
|
unkown
|
page read and write
|
|
|
|
68BF578000
|
stack
|
page read and write
|
|
|
|
18067000
|
unkown
|
page read and write
|
|
|
|
16510000
|
heap private
|
page read and write
|
|
|
|
DFE1000
|
unkown
|
page read and write
|
|
|
|
7FF5D4FC7000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA47000
|
unkown image
|
page readonly
|
|
|
|
31DA000
|
heap private
|
page read and write
|
|
|
|
180FD000
|
unkown
|
page read and write
|
|
|
|
25BDED00000
|
unkown image
|
page readonly
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown image
|
page readonly
|
|
|
|
FDA0000
|
unkown
|
page read and write
|
|
|
|
19BA5000
|
unkown image
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
199E04C6000
|
unkown
|
page read and write
|
|
|
|
7FF5AC1BF000
|
unkown image
|
page readonly
|
|
|
|
7FF5D573F000
|
unkown image
|
page readonly
|
|
|
|
1688B000
|
unkown
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
17400000
|
unkown
|
page read and write
|
|
|
|
DAFA000
|
unkown
|
page read and write
|
|
|
|
1CB9A000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
251F000
|
unkown image
|
page readonly
|
|
|
|
2ECA000
|
heap default
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
1813B000
|
unkown
|
page read and write
|
|
|
|
7FF591B5B000
|
unkown image
|
page readonly
|
|
|
|
ED57000
|
unkown
|
page read and write
|
|
|
|
7DF5E35A2000
|
unkown image
|
page readonly
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
16874000
|
unkown
|
page read and write
|
|
|
|
7DF5E35A0000
|
unkown image
|
page readonly
|
|
|
|
199E0B69000
|
unkown
|
page read and write
|
|
|
|
7FF5D5914000
|
unkown image
|
page readonly
|
|
|
|
13707000
|
unkown
|
page read and write
|
|
|
|
18115000
|
unkown
|
page read and write
|
|
|
|
250E000
|
unkown image
|
page readonly
|
|
|
|
2C6000
|
unkown
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
199E0BA7000
|
unkown
|
page read and write
|
|
|
|
EFA7000
|
heap private
|
page read and write
|
|
|
|
68BF9FF000
|
stack
|
page read and write
|
|
|
|
17E61000
|
unkown
|
page read and write
|
|
|
|
43B000
|
unkown
|
page read and write
|
|
|
|
3170000
|
stack
|
page read and write
|
|
|
|
7FF562F2C000
|
unkown image
|
page readonly
|
|
|
|
16997000
|
unkown
|
page read and write
|
|
|
|
13739000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
13934000
|
unkown
|
page read and write
|
|
|
|
243B000
|
unkown image
|
page readonly
|
|
|
|
DF20000
|
unkown image
|
page readonly
|
|
|
|
1695A000
|
unkown
|
page read and write
|
|
|
|
16E4A000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
E39E000
|
stack
|
page read and write
|
|
|
|
15DC1000
|
unkown
|
page read and write
|
|
|
|
7DF5798C2000
|
unkown image
|
page readonly
|
|
|
|
16B7F000
|
unkown
|
page read and write
|
|
|
|
1D1852F0000
|
heap private
|
page read and write
|
|
|
|
1810F000
|
unkown
|
page read and write
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
6EEA7F000
|
stack
|
page read and write
|
|
|
|
7DF477780000
|
unkown image
|
page readonly
|
|
|
|
171CCC50000
|
unkown image
|
page readonly
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
7DF5798B0000
|
unkown image
|
page readonly
|
|
|
|
EDB6000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
180EF000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AC261000
|
unkown image
|
page readonly
|
|
|
|
171CC570000
|
unkown image
|
page read and write
|
|
|
|
16992000
|
unkown
|
page read and write
|
|
|
|
16D91000
|
unkown
|
page read and write
|
|
|
|
1CAEF000
|
unkown
|
page read and write
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
13966000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7FF5D5146000
|
unkown image
|
page readonly
|
|
|
|
DE1B000
|
stack
|
page read and write
|
|
|
|
283B000
|
unkown image
|
page readonly
|
|
|
|
1BED9000
|
unkown
|
page read and write
|
|
|
|
1CA09000
|
unkown
|
page read and write
|
|
|
|
4EFC000
|
stack
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
FF812000
|
unkown image
|
page readonly
|
|
|
|
2CE3000
|
unkown image
|
page read and write
|
|
|
|
4980000
|
unkown image
|
page readonly
|
|
|
|
13959000
|
unkown
|
page read and write
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
16B2F000
|
unkown
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
1694A000
|
unkown
|
page read and write
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
2B50000
|
unkown image
|
page readonly
|
|
|
|
7FF56BB73000
|
unkown image
|
page readonly
|
|
|
|
171CC8D0000
|
unkown image
|
page readonly
|
|
|
|
16950000
|
unkown
|
page read and write
|
|
|
|
4F3C000
|
stack
|
page read and write
|
|
|
|
171CCC60000
|
unkown image
|
page readonly
|
|
|
|
315D000
|
stack
|
page read and write
|
|
|
|
1813D000
|
unkown
|
page read and write
|
|
|
|
16A2C000
|
unkown
|
page read and write
|
|
|
|
FDFA000
|
unkown
|
page read and write
|
|
|
|
16874000
|
unkown
|
page read and write
|
|
|
|
FD13000
|
unkown
|
page read and write
|
|
|
|
1CA09000
|
unkown
|
page read and write
|
|
|
|
16874000
|
unkown
|
page read and write
|
|
|
|
E06A000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
CD5C000
|
unkown
|
page read and write
|
|
|
|
FD19000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown image
|
page read and write
|
|
|
|
1373F000
|
unkown
|
page read and write
|
|
|
|
7FF565245000
|
unkown image
|
page readonly
|
|
|
|
16B78000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
16825000
|
unkown
|
page read and write
|
|
|
|
ED9F000
|
unkown
|
page read and write
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
70CD377000
|
stack
|
page read and write
|
|
|
|
17F57000
|
unkown
|
page read and write
|
|
|
|
171CC613000
|
unkown
|
page read and write
|
|
|
|
168DE000
|
unkown
|
page read and write
|
|
|
|
7FF5AC1C2000
|
unkown image
|
page readonly
|
|
|
|
15D66000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page read and write
|
|
|
|
199E0502000
|
unkown
|
page read and write
|
|
|
|
7FF591ACD000
|
unkown image
|
page readonly
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
7FF56BC4A000
|
unkown image
|
page readonly
|
|
|
|
167A5000
|
unkown
|
page read and write
|
|
|
|
1D6B09B000
|
unkown
|
page read and write
|
|
|
|
20F45A20000
|
unkown image
|
page readonly
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
1CA1E000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
168D9000
|
unkown
|
page read and write
|
|
|
|
1805B000
|
unkown
|
page read and write
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
7FF5D579C000
|
unkown image
|
page readonly
|
|
|
|
7D90000
|
unkown
|
page read and write
|
|
|
|
199E044B000
|
unkown
|
page read and write
|
|
|
|
199E0426000
|
unkown
|
page read and write
|
|
|
|
1CA4E000
|
unkown
|
page read and write
|
|
|
|
7FF5AC035000
|
unkown image
|
page readonly
|
|
|
|
2AE0000
|
unkown image
|
page readonly
|
|
|
|
EDDD000
|
unkown
|
page read and write
|
|
|
|
16B9E000
|
unkown
|
page read and write
|
|
|
|
173F0000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
7DF5BA010000
|
unkown image
|
page readonly
|
|
|
|
FF810000
|
unkown image
|
page readonly
|
|
|
|
7FF591AD0000
|
unkown image
|
page readonly
|
|
|
|
27E8000
|
unkown image
|
page readonly
|
|
|
|
2F54000
|
heap private
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown image
|
page readonly
|
|
|
|
1377E000
|
unkown
|
page read and write
|
|
|
|
13732000
|
unkown
|
page read and write
|
|
|
|
16E49000
|
unkown
|
page read and write
|
|
|
|
180D9000
|
unkown
|
page read and write
|
|
|
|
1D0B4000
|
unkown
|
page read and write
|
|
|
|
180E7000
|
unkown
|
page read and write
|
|
|
|
199E0800000
|
unkown image
|
page readonly
|
|
|
|
25BDEE2C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5417000
|
unkown image
|
page readonly
|
|
|
|
199E0BC8000
|
unkown
|
page read and write
|
|
|
|
1CC2B000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
EA8E000
|
stack
|
page read and write
|
|
|
|
171CC702000
|
unkown
|
page read and write
|
|
|
|
13739000
|
unkown
|
page read and write
|
|
|
|
CE28000
|
unkown
|
page read and write
|
|
|
|
14FA0000
|
unkown
|
page read and write
|
|
|
|
7FF591BF7000
|
unkown image
|
page readonly
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
199E0BB3000
|
unkown
|
page read and write
|
|
|
|
7FF591B81000
|
unkown image
|
page readonly
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
1383F000
|
unkown
|
page read and write
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
ED3D000
|
unkown
|
page read and write
|
|
|
|
18065000
|
unkown
|
page read and write
|
|
|
|
199E043C000
|
unkown
|
page read and write
|
|
|
|
16B9E000
|
unkown
|
page read and write
|
|
|
|
FF6D0000
|
unkown
|
page readonly
|
|
|
|
60C000
|
unkown
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
16941000
|
unkown
|
page read and write
|
|
|
|
2281000
|
unkown image
|
page readonly
|
|
|
|
20F45E69000
|
heap private
|
page read and write
|
|
|
|
30BF000
|
unkown image
|
page read and write
|
|
|
|
13734000
|
unkown
|
page read and write
|
|
|
|
1CC33000
|
unkown
|
page read and write
|
|
|
|
2ADB000
|
unkown
|
page read and write
|
|
|
|
3310000
|
unkown image
|
page readonly
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
7FF56363C000
|
unkown image
|
page readonly
|
|
|
|
27AB000
|
unkown image
|
page readonly
|
|
|
|
14E57000
|
unkown
|
page read and write
|
|
|
|
16992000
|
unkown
|
page read and write
|
|
|
|
199E04EB000
|
unkown
|
page read and write
|
|
|
|
1BF3F000
|
unkown
|
page read and write
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
13727000
|
unkown
|
page read and write
|
|
|
|
180B1000
|
unkown
|
page read and write
|
|
|
|
1C9EF000
|
unkown
|
page read and write
|
|
|
|
7FF5D57B5000
|
unkown image
|
page readonly
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
19BC4000
|
unkown image
|
page read and write
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
7DF5714E0000
|
unkown image
|
page readonly
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
17240000
|
unkown
|
page read and write
|
|
|
|
13725000
|
unkown
|
page read and write
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
1809B000
|
unkown
|
page read and write
|
|
|
|
138C0000
|
unkown
|
page read and write
|
|
|
|
180E3000
|
unkown
|
page read and write
|
|
|
|
25BDEBD0000
|
unkown image
|
page readonly
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
7DF5BA020000
|
unkown image
|
page readonly
|
|
|
|
15DC1000
|
unkown
|
page read and write
|
|
|
|
D787000
|
unkown
|
page read and write
|
|
|
|
16AD0000
|
unkown
|
page read and write
|
|
|
|
1CA1E000
|
unkown
|
page read and write
|
|
|
|
169AC000
|
unkown
|
page read and write
|
|
|
|
7FF5D588E000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC0BB000
|
unkown image
|
page readonly
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
19BAA000
|
unkown image
|
page read and write
|
|
|
|
180AB000
|
unkown
|
page read and write
|
|
|
|
15D9B000
|
unkown
|
page read and write
|
|
|
|
16950000
|
unkown
|
page read and write
|
|
|
|
7FF5AC205000
|
unkown image
|
page readonly
|
|
|
|
DAB0000
|
unkown
|
page read and write
|
|
|
|
16D8B000
|
unkown
|
page read and write
|
|
|
|
7FF563552000
|
unkown image
|
page readonly
|
|
|
|
16E4C000
|
unkown
|
page read and write
|
|
|
|
680A9000
|
unkown image
|
page readonly
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
D806000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
F9AC000
|
stack
|
page read and write
|
|
|
|
7FF563871000
|
unkown image
|
page readonly
|
|
|
|
2615000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC22000
|
unkown image
|
page readonly
|
|
|
|
16881000
|
unkown
|
page read and write
|
|
|
|
20A8C000000
|
unkown image
|
page readonly
|
|
|
|
18133000
|
unkown
|
page read and write
|
|
|
|
2E3E000
|
stack
|
page read and write
|
|
|
|
16993000
|
unkown
|
page read and write
|
|
|
|
7FF5655B1000
|
unkown image
|
page readonly
|
|
|
|
18125000
|
unkown
|
page read and write
|
|
|
|
199E0400000
|
unkown
|
page read and write
|
|
|
|
171CC5B0000
|
unkown image
|
page readonly
|
|
|
|
138A7000
|
unkown
|
page read and write
|
|
|
|
32F0000
|
heap private
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
EAD0000
|
unkown
|
page read and write
|
|
|
|
16D91000
|
unkown
|
page read and write
|
|
|
|
18099000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
138AD000
|
unkown
|
page read and write
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
20A8BF08000
|
unkown
|
page read and write
|
|
|
|
15F65000
|
unkown
|
page read and write
|
|
|
|
1C9F1000
|
unkown
|
page read and write
|
|
|
|
2FBC000
|
unkown
|
page read and write
|
|
|
|
7FF5D5931000
|
unkown image
|
page readonly
|
|
|
|
138C9000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
16950000
|
unkown
|
page read and write
|
|
|
|
20F45AF9000
|
heap default
|
page read and write
|
|
|
|
15F60000
|
unkown
|
page read and write
|
|
|
|
680A7000
|
unkown image
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
7F872000
|
unkown image
|
page readonly
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
1C98F000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
25BDEE53000
|
unkown
|
page read and write
|
|
|
|
16B38000
|
unkown
|
page read and write
|
|
|
|
2706000
|
unkown image
|
page readonly
|
|
|
|
2BF0000
|
unkown
|
page read and write
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
15A5F000
|
stack
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
2CF3000
|
unkown
|
page read and write
|
|
|
|
16D12000
|
unkown
|
page read and write
|
|
|
|
17F07000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
1CA11000
|
unkown
|
page read and write
|
|
|
|
166C0000
|
unkown
|
page read and write
|
|
|
|
167EF000
|
unkown
|
page read and write
|
|
|
|
7FF591985000
|
unkown image
|
page readonly
|
|
|
|
20A8BE00000
|
unkown
|
page read and write
|
|
|
|
18103000
|
unkown
|
page read and write
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
7FF591CEA000
|
unkown image
|
page readonly
|
|
|
|
27A929FF000
|
unkown
|
page read and write
|
|
|
|
20F45A40000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
199E0429000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
7FF591391000
|
unkown image
|
page readonly
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
7FF591C53000
|
unkown image
|
page readonly
|
|
|
|
7FF562F24000
|
unkown image
|
page readonly
|
|
|
|
7FF5D592A000
|
unkown image
|
page readonly
|
|
|
|
15D62000
|
unkown
|
page read and write
|
|
|
|
255B000
|
unkown image
|
page readonly
|
|
|
|
16B90000
|
unkown
|
page read and write
|
|
|
|
E024000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
7FF5AC3AA000
|
unkown image
|
page readonly
|
|
|
|
2701000
|
unkown image
|
page readonly
|
|
|
|
199E0BD9000
|
unkown
|
page read and write
|
|
|
|
1694C000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown image
|
page readonly
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
1CC33000
|
unkown
|
page read and write
|
|
|
|
25BDEF13000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
2F2C000
|
heap default
|
page read and write
|
|
|
|
7FF5AC2D7000
|
unkown image
|
page readonly
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
7FF563881000
|
unkown image
|
page readonly
|
|
|
|
608000
|
unkown
|
page read and write
|
|
|
|
FDA0000
|
unkown
|
page read and write
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
7A4000
|
heap private
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
18071000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
70CD57C000
|
stack
|
page read and write
|
|
|
|
26D7000
|
unkown image
|
page readonly
|
|
|
|
1D185413000
|
unkown
|
page read and write
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
2A1E000
|
stack
|
page read and write
|
|
|
|
7FF5D5857000
|
unkown image
|
page readonly
|
|
|
|
7C6E000
|
stack
|
page read and write
|
|
|
|
E49F000
|
stack
|
page read and write
|
|
|
|
17B92000
|
unkown
|
page read and write
|
|
|
|
B98456A000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
199E0B66000
|
unkown
|
page read and write
|
|
|
|
25BDEE47000
|
unkown
|
page read and write
|
|
|
|
161A7000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
171CE190000
|
unkown
|
page read and write
|
|
|
|
2AF5000
|
unkown
|
page read and write
|
|
|
|
1CA30000
|
unkown
|
page read and write
|
|
|
|
7FF565445000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC272000
|
unkown image
|
page readonly
|
|
|
|
7FF5DEC68000
|
unkown image
|
page readonly
|
|
|
|
157E0000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
16994000
|
unkown
|
page read and write
|
|
|
|
2555000
|
unkown image
|
page readonly
|
|
|
|
199E0B9C000
|
unkown
|
page read and write
|
|
|
|
13958000
|
unkown
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
16620000
|
unkown
|
page read and write
|
|
|
|
CEA4000
|
unkown
|
page read and write
|
|
|
|
7DF5BA030000
|
unkown image
|
page readonly
|
|
|
|
16720000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
27A92A13000
|
unkown
|
page read and write
|
|
|
|
13954000
|
unkown
|
page read and write
|
|
|
|
EDEA000
|
unkown
|
page read and write
|
|
|
|
199E0413000
|
unkown
|
page read and write
|
|
|
|
16A22000
|
unkown
|
page read and write
|
|
|
|
FEA0000
|
unkown
|
page read and write
|
|
|
|
16D4E000
|
unkown
|
page read and write
|
|
|
|
1C997000
|
unkown
|
page read and write
|
|
|
|
DE20000
|
unkown
|
page read and write
|
|
|
|
18059000
|
unkown
|
page read and write
|
|
|
|
16888000
|
unkown
|
page read and write
|
|
|
|
ED4E000
|
unkown
|
page read and write
|
|
|
|
4AE0000
|
heap private
|
page read and write
|
|
|
|
16946000
|
unkown
|
page read and write
|
|
|
|
13734000
|
unkown
|
page read and write
|
|
|
|
171CCAD0000
|
unkown image
|
page readonly
|
|
|
|
20F45B40000
|
unkown
|
page read and write
|
|
|
|
7F390000
|
unkown image
|
page readonly
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
EDB1000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
18137000
|
unkown
|
page read and write
|
|
|
|
FDE7000
|
unkown
|
page read and write
|
|
|
|
1C958000
|
unkown
|
page read and write
|
|
|
|
1D185502000
|
unkown
|
page read and write
|
|
|
|
7FF5D58A7000
|
unkown image
|
page readonly
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
68073000
|
unkown image
|
page readonly
|
|
|
|
EB3C000
|
stack
|
page read and write
|
|
|
|
118A2000
|
unkown
|
page read and write
|
|
|
|
168F8000
|
unkown
|
page read and write
|
|
|
|
25BDEE29000
|
unkown
|
page read and write
|
|
|
|
7FF565513000
|
unkown image
|
page readonly
|
|
|
|
16876000
|
unkown
|
page read and write
|
|
|
|
199E0B88000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
7FF5DF422000
|
unkown image
|
page readonly
|
|
|
|
1CAE4000
|
unkown
|
page read and write
|
|
|
|
171CE202000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
2EE4000
|
heap default
|
page read and write
|
|
|
|
138B4000
|
unkown
|
page read and write
|
|
|
|
7FF5D583F000
|
unkown image
|
page readonly
|
|
|
|
1CCA4000
|
unkown
|
page read and write
|
|
|
|
7FF5DEBC0000
|
unkown image
|
page readonly
|
|
|
|
2403000
|
unkown image
|
page readonly
|
|
|
|
25BDEE00000
|
unkown
|
page read and write
|
|
|
|
FD9C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5921000
|
unkown image
|
page readonly
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
17BB6000
|
unkown
|
page read and write
|
|
|
|
1CC3B000
|
unkown
|
page read and write
|
|
|
|
1396C000
|
unkown
|
page read and write
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
180A5000
|
unkown
|
page read and write
|
|
|
|
680A0000
|
unkown image
|
page read and write
|
|
|
|
7FF5ABF19000
|
unkown image
|
page readonly
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
167D2000
|
unkown
|
page read and write
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
1C9F9000
|
unkown
|
page read and write
|
|
|
|
199E0B6D000
|
unkown
|
page read and write
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
2FD2000
|
unkown
|
page read and write
|
|
|
|
167D3000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2DE000
|
unkown image
|
page readonly
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
136E7000
|
unkown
|
page read and write
|
|
|
|
7FF5D5867000
|
unkown image
|
page readonly
|
|
|
|
7DF5798B2000
|
unkown image
|
page readonly
|
|
|
|
2E7F000
|
stack
|
page read and write
|
|
|
|
7FF5D5853000
|
unkown image
|
page readonly
|
|
|
|
1392E000
|
unkown
|
page read and write
|
|
|
|
16299000
|
unkown
|
page read and write
|
|
|
|
D7A8000
|
unkown
|
page read and write
|
|
|
|
1CA2E000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0C0000
|
unkown image
|
page readonly
|
|
|
|
199E0B58000
|
unkown
|
page read and write
|
|
|
|
7FF5DF1EA000
|
unkown image
|
page readonly
|
|
|
|
180C9000
|
unkown
|
page read and write
|
|
|
|
17433000
|
unkown
|
page read and write
|
|
|
|
13730000
|
unkown
|
page read and write
|
|
|
|
7FF5AC1C7000
|
unkown image
|
page readonly
|
|
|
|
7FF591AEB000
|
unkown image
|
page readonly
|
|
|
|
2E73000
|
heap default
|
page read and write
|
|
|
|
2E10000
|
unkown
|
page read and write
|
|
|
|
20F46930000
|
unkown
|
page readonly
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
168D5000
|
unkown
|
page read and write
|
|
|
|
1CA2E000
|
unkown
|
page read and write
|
|
|
|
138B4000
|
unkown
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
138AD000
|
unkown
|
page read and write
|
|
|
|
16834000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown image
|
page readonly
|
|
|
|
1C997000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
169FB000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
136E7000
|
unkown
|
page read and write
|
|
|
|
180E5000
|
unkown
|
page read and write
|
|
|
|
20F45B38000
|
unkown
|
page read and write
|
|
|
|
73B0000
|
unkown
|
page read and write
|
|
|
|
24EB000
|
unkown image
|
page readonly
|
|
|
|
7FF591C0F000
|
unkown image
|
page readonly
|
|
|
|
167D3000
|
unkown
|
page read and write
|
|
|
|
5880000
|
unkown image
|
page readonly
|
|
|
|
20F46950000
|
unkown
|
page read and write
|
|
|
|
70CD47E000
|
stack
|
page read and write
|
|
|
|
1D1852E0000
|
unkown image
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
17220000
|
unkown
|
page read and write
|
|
|
|
2FDF000
|
unkown image
|
page read and write
|
|
|
|
7DF59F962000
|
unkown image
|
page readonly
|
|
|
|
11DC5000
|
stack
|
page read and write
|
|
|
|
75F000
|
stack
|
page read and write
|
|
|
|
2FB3000
|
heap default
|
page read and write
|
|
|
|
20F46080000
|
unkown image
|
page readonly
|
|
|
|
7DF5E35B0000
|
unkown image
|
page readonly
|
|
|
|
180F7000
|
unkown
|
page read and write
|
|
|
|
13706000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown image
|
page readonly
|
|
|
|
199E0B8A000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
20F459F0000
|
unkown image
|
page readonly
|
|
|
|
78AF8F9000
|
stack
|
page read and write
|
|
|
|
1CC38000
|
unkown
|
page read and write
|
|
|
|
25BDEBC0000
|
heap private
|
page read and write
|
|
|
|
199E0B10000
|
unkown
|
page read and write
|
|
|
|
180DB000
|
unkown
|
page read and write
|
|
|
|
1D6B97E000
|
stack
|
page read and write
|
|
|
|
18095000
|
unkown
|
page read and write
|
|
|
|
7FF56386A000
|
unkown image
|
page readonly
|
|
|
|
25FB000
|
unkown image
|
page readonly
|
|
|
|
FDA0000
|
unkown
|
page read and write
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
16870000
|
unkown
|
page read and write
|
|
|
|
1810B000
|
unkown
|
page read and write
|
|
|
|
27A92D50000
|
unkown image
|
page readonly
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
D489000
|
unkown
|
page read and write
|
|
|
|
1806B000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
20A8BC40000
|
heap default
|
page read and write
|
|
|
|
199E04D9000
|
unkown
|
page read and write
|
|
|
|
171CE0D0000
|
unkown
|
page read and write
|
|
|
|
FF6FE000
|
unkown
|
page execute read
|
|
|
|
169D5000
|
unkown
|
page read and write
|
|
|
|
20A8BE66000
|
unkown
|
page read and write
|
|
|
|
1D185400000
|
unkown
|
page read and write
|
|
|
|
7DF573220000
|
unkown image
|
page readonly
|
|
|
|
2EFA000
|
heap default
|
page read and write
|
|
|
|
1389C000
|
unkown
|
page read and write
|
|
|
|
2725000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC165000
|
unkown image
|
page readonly
|
|
|
|
180CD000
|
unkown
|
page read and write
|
|
|
|
1D185360000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF451000
|
unkown image
|
page readonly
|
|
|
|
16966000
|
unkown
|
page read and write
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
1388E000
|
unkown
|
page read and write
|
|
|
|
169B2000
|
unkown
|
page read and write
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
18135000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
1205E000
|
stack
|
page read and write
|
|
|
|
199E044E000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown
|
page read and write
|
|
|
|
12390000
|
unkown image
|
page read and write
|
|
|
|
16E4C000
|
unkown
|
page read and write
|
|
|
|
78AF97E000
|
stack
|
page read and write
|
|
|
|
2606000
|
unkown image
|
page readonly
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
167BE000
|
unkown
|
page read and write
|
|
|
|
158E0000
|
unkown
|
page read and write
|
|
|
|
7FF5ABE97000
|
unkown image
|
page readonly
|
|
|
|
169FB000
|
unkown
|
page read and write
|
|
|
|
20A8BE74000
|
unkown
|
page read and write
|
|
|
|
FF820000
|
unkown image
|
page readonly
|
|
|
|
199E0483000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
1CCA4000
|
unkown
|
page read and write
|
|
|
|
180B7000
|
unkown
|
page read and write
|
|
|
|
7FF5654D3000
|
unkown image
|
page readonly
|
|
|
|
20A8BF00000
|
unkown
|
page read and write
|
|
|
|
168F3000
|
unkown
|
page read and write
|
|
|
|
1C9F1000
|
unkown
|
page read and write
|
|
|
|
17240000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
27A929F6000
|
unkown
|
page read and write
|
|
|
|
7DF5BA022000
|
unkown image
|
page readonly
|
|
|
|
31D0000
|
stack
|
page read and write
|
|
|
|
167F3000
|
unkown
|
page read and write
|
|
|
|
20A8BBE0000
|
heap private
|
page read and write
|
|
|
|
16490000
|
heap private
|
page read and write
|
|
|
|
1808D000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
heap default
|
page read and write
|
|
|
|
7F882000
|
unkown image
|
page readonly
|
|
|
|
FDA0000
|
unkown
|
page read and write
|
|
|
|
16B72000
|
unkown
|
page read and write
|
|
|
|
180D5000
|
unkown
|
page read and write
|
|
|
|
199E01B0000
|
heap private
|
page read and write
|
|
|
|
168F2000
|
unkown
|
page read and write
|
|
|
|
16762000
|
unkown
|
page read and write
|
|
|
|
16AD6000
|
unkown
|
page read and write
|
|
|
|
16881000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
13972000
|
unkown
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
16859000
|
unkown
|
page read and write
|
|
|
|
7FF563606000
|
unkown image
|
page readonly
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
169B9000
|
unkown
|
page read and write
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
162BE000
|
unkown
|
page read and write
|
|
|
|
7FF563633000
|
unkown image
|
page readonly
|
|
|
|
D3A7000
|
unkown
|
page read and write
|
|
|
|
3AC0FE000
|
stack
|
page read and write
|
|
|
|
3ABB3C000
|
unkown
|
page read and write
|
|
|
|
25BDEE4D000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
25C7000
|
unkown image
|
page readonly
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
2EEC000
|
unkown
|
page read and write
|
|
|
|
18097000
|
unkown
|
page read and write
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
7FF56BB9B000
|
unkown image
|
page readonly
|
|
|
|
199E0B9C000
|
unkown
|
page read and write
|
|
|
|
7FF562F2F000
|
unkown image
|
page readonly
|
|
|
|
19F8B000
|
unkown image
|
page read and write
|
|
|
|
199E0488000
|
unkown
|
page read and write
|
|
|
|
199E0B92000
|
unkown
|
page read and write
|
|
|
|
16F90000
|
unkown
|
page read and write
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
171CC600000
|
unkown
|
page read and write
|
|
|
|
16B08000
|
unkown
|
page read and write
|
|
|
|
16680000
|
unkown
|
page read and write
|
|
|
|
17260000
|
unkown
|
page read and write
|
|
|
|
15D9F000
|
unkown
|
page read and write
|
|
|
|
1808F000
|
unkown
|
page read and write
|
|
|
|
171CC71B000
|
unkown
|
page read and write
|
|
|
|
7FF5DF44A000
|
unkown image
|
page readonly
|
|
|
|
1D185473000
|
unkown
|
page read and write
|
|
|
|
16E49000
|
unkown
|
page read and write
|
|
|
|
7FF5637D2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D58AD000
|
unkown image
|
page readonly
|
|
|
|
16888000
|
unkown
|
page read and write
|
|
|
|
7DF5BA012000
|
unkown image
|
page readonly
|
|
|
|
16F01000
|
unkown
|
page read and write
|
|
|
|
1CAEC000
|
unkown
|
page read and write
|
|
|
|
1686B000
|
unkown
|
page read and write
|
|
|
|
1C009000
|
unkown
|
page read and write
|
|
|
|
1C031000
|
unkown
|
page read and write
|
|
|
|
1CAF4000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0D0000
|
unkown image
|
page readonly
|
|
|
|
7F9A0000
|
unkown image
|
page readonly
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
17F93000
|
unkown
|
page read and write
|
|
|
|
13706000
|
unkown
|
page read and write
|
|
|
|
16B7A000
|
unkown
|
page read and write
|
|
|
|
1CADF000
|
unkown
|
page read and write
|
|
|
|
1CC9A000
|
unkown
|
page read and write
|
|
|
|
16710000
|
unkown
|
page read and write
|
|
|
|
2D65000
|
heap default
|
page read and write
|
|
|
|
16760000
|
unkown
|
page read and write
|
|
|
|
FDEF000
|
unkown
|
page read and write
|
|
|
|
20A8BE81000
|
unkown
|
page read and write
|
|
|
|
169D5000
|
unkown
|
page read and write
|
|
|
|
ED49000
|
unkown
|
page read and write
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
16AC3000
|
unkown
|
page read and write
|
|
|
|
FE13000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
78AF67C000
|
unkown
|
page read and write
|
|
|
|
7FF5AC3B0000
|
unkown image
|
page readonly
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
137D0000
|
unkown
|
page read and write
|
|
|
|
199E0B00000
|
unkown
|
page read and write
|
|
|
|
1D185453000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
23DB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC39A000
|
unkown image
|
page readonly
|
|
|
|
138F8000
|
unkown
|
page read and write
|
|
|
|
7DF5714E2000
|
unkown image
|
page readonly
|
|
|
|
11DCA000
|
stack
|
page read and write
|
|
|
|
11F0E000
|
stack
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
FF800000
|
unkown image
|
page readonly
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
7FF591CF1000
|
unkown image
|
page readonly
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
20F45E60000
|
heap private
|
page read and write
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
2F05000
|
unkown
|
page read and write
|
|
|
|
168D8000
|
unkown
|
page read and write
|
|
|
|
16866000
|
unkown
|
page read and write
|
|
|
|
7FF5ABFAF000
|
unkown image
|
page readonly
|
|
|
|
16680000
|
unkown
|
page read and write
|
|
|
|
27BB000
|
unkown image
|
page readonly
|
|
|
|
2E70000
|
unkown image
|
page readonly
|
|
|
|
199E106A000
|
unkown
|
page read and write
|
|
|
|
EDDD000
|
unkown
|
page read and write
|
|
|
|
1CA19000
|
unkown
|
page read and write
|
|
|
|
28BB000
|
unkown image
|
page readonly
|
|
|
|
EDC0000
|
unkown
|
page read and write
|
|
|
|
180D7000
|
unkown
|
page read and write
|
|
|
|
199E0B89000
|
unkown
|
page read and write
|
|
|
|
16B72000
|
unkown
|
page read and write
|
|
|
|
169C4000
|
unkown
|
page read and write
|
|
|
|
CE68000
|
unkown
|
page read and write
|
|
|
|
1CB97000
|
unkown
|
page read and write
|
|
|
|
171CC713000
|
unkown
|
page read and write
|
|
|
|
7DF571500000
|
unkown image
|
page readonly
|
|
|
|
1373B000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
283F000
|
unkown image
|
page readonly
|
|
|
|
138B6000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
1CA26000
|
unkown
|
page read and write
|
|
|
|
167F3000
|
unkown
|
page read and write
|
|
|
|
13725000
|
unkown
|
page read and write
|
|
|
|
16839000
|
unkown
|
page read and write
|
|
|
|
7DF5E3590000
|
unkown image
|
page readonly
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
7FF591C77000
|
unkown image
|
page readonly
|
|
|
|
17FBB000
|
unkown
|
page read and write
|
|
|
|
1CA4C000
|
unkown
|
page read and write
|
|
|
|
15DC6000
|
unkown
|
page read and write
|
|
|
|
199E02F0000
|
unkown image
|
page readonly
|
|
|
|
FF6F8000
|
unkown
|
page execute read
|
|
|
|
7FF5DECD9000
|
unkown image
|
page readonly
|
|
|
|
68BF2FE000
|
stack
|
page read and write
|
|
|
|
17270000
|
unkown
|
page read and write
|
|
|
|
7DF573232000
|
unkown image
|
page readonly
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
FEF0000
|
unkown
|
page read and write
|
|
|
|
16B08000
|
unkown
|
page read and write
|
|
|
|
7DF5714E2000
|
unkown image
|
page readonly
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
7CAF000
|
stack
|
page read and write
|
|
|
|
DAEA000
|
unkown
|
page read and write
|
|
|
|
138EC000
|
unkown
|
page read and write
|
|
|
|
FF802000
|
unkown image
|
page readonly
|
|
|
|
1CA2B000
|
unkown
|
page read and write
|
|
|
|
7FF56344C000
|
unkown image
|
page readonly
|
|
|
|
255F000
|
unkown image
|
page readonly
|
|
|
|
15D86000
|
unkown
|
page read and write
|
|
|
|
7FF591CD9000
|
unkown image
|
page readonly
|
|
|
|
7FF56366B000
|
unkown image
|
page readonly
|
|
|
|
1D18544D000
|
unkown
|
page read and write
|
|
|
|
20A8BBF0000
|
unkown image
|
page readonly
|
|
|
|
2EC0000
|
unkown
|
page read and write
|
|
|
|
70CCCEB000
|
unkown
|
page read and write
|
|
|
|
7FF5654CF000
|
unkown image
|
page readonly
|
|
|
|
1CAE7000
|
unkown
|
page read and write
|
|
|
|
7FF5D585E000
|
unkown image
|
page readonly
|
|
|
|
1CAE4000
|
unkown
|
page read and write
|
|
|
|
1D185470000
|
unkown
|
page read and write
|
|
|
|
7DF5798C0000
|
unkown image
|
page readonly
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
7FF5DF370000
|
unkown image
|
page readonly
|
|
|
|
15DC1000
|
unkown
|
page read and write
|
|
|
|
FF6DB000
|
unkown
|
page execute read
|
|
|
|
7FF5AC394000
|
unkown image
|
page readonly
|
|
|
|
168C8000
|
unkown
|
page read and write
|
|
|
|
7FF565346000
|
unkown image
|
page readonly
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
3ABBBD000
|
stack
|
page read and write
|
|
|
|
11E0E000
|
stack
|
page read and write
|
|
|
|
138B3000
|
unkown
|
page read and write
|
|
|
|
16894000
|
unkown
|
page read and write
|
|
|
|
7F490000
|
unkown image
|
page readonly
|
|
|
|
281A000
|
unkown image
|
page readonly
|
|
|
|
27A92A13000
|
unkown
|
page read and write
|
|
|
|
7FF5654F7000
|
unkown image
|
page readonly
|
|
|
|
15D9D000
|
unkown
|
page read and write
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
2746000
|
unkown image
|
page readonly
|
|
|
|
6EEC7F000
|
stack
|
page read and write
|
|
|
|
2816000
|
unkown image
|
page readonly
|
|
|
|
16B86000
|
unkown
|
page read and write
|
|
|
|
199E04AF000
|
unkown
|
page read and write
|
|
|
|
7FF56BC45000
|
unkown image
|
page readonly
|
|
|
|
D1E3000
|
unkown
|
page read and write
|
|
|
|
1CADA000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
heap private
|
page read and write
|
|
|
|
DAE5000
|
unkown
|
page read and write
|
|
|
|
13870000
|
unkown
|
page read and write
|
|
|
|
FF6D1000
|
unkown
|
page execute read
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
D08D000
|
unkown
|
page read and write
|
|
|
|
7FF5AC115000
|
unkown image
|
page readonly
|
|
|
|
17B9D000
|
unkown
|
page read and write
|
|
|
|
7FF563777000
|
unkown image
|
page readonly
|
|
|
|
16B72000
|
unkown
|
page read and write
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
heap default
|
page read and write
|
|
|
|
13739000
|
unkown
|
page read and write
|
|
|
|
70CCDEE000
|
stack
|
page read and write
|
|
|
|
1C9FC000
|
unkown
|
page read and write
|
|
|
|
1CC9C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5700000
|
unkown image
|
page readonly
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page read and write
|
|
|
|
18117000
|
unkown
|
page read and write
|
|
|
|
1807F000
|
unkown
|
page read and write
|
|
|
|
1BFC3000
|
unkown
|
page read and write
|
|
|
|
7FF5651BF000
|
unkown image
|
page readonly
|
|
|
|
2E79000
|
heap default
|
page read and write
|
|
|
|
1CE7B000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
1C9F6000
|
unkown
|
page read and write
|
|
|
|
167EF000
|
unkown
|
page read and write
|
|
|
|
1D6B19E000
|
stack
|
page read and write
|
|
|
|
7F4A2000
|
unkown image
|
page readonly
|
|
|
|
20F45AF0000
|
heap default
|
page read and write
|
|
|
|
1684E000
|
unkown
|
page read and write
|
|
|
|
2A36000
|
unkown
|
page read and write
|
|
|
|
29C0000
|
unkown image
|
page readonly
|
|
|
|
20A8BD20000
|
unkown image
|
page readonly
|
|
|
|
1684E000
|
unkown
|
page read and write
|
|
|
|
271B000
|
unkown image
|
page readonly
|
|
|
|
ED94000
|
unkown
|
page read and write
|
|
|
|
FDE2000
|
unkown
|
page read and write
|
|
|
|
7F492000
|
unkown image
|
page readonly
|
|
|
|
78AF87A000
|
stack
|
page read and write
|
|
|
|
1373D000
|
unkown
|
page read and write
|
|
|
|
7FF56BB7E000
|
unkown image
|
page readonly
|
|
|
|
7F882000
|
unkown image
|
page readonly
|
|
|
|
7DF5BA010000
|
unkown image
|
page readonly
|
|
|
|
7FF5DF35F000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC19B000
|
unkown image
|
page readonly
|
|
|
|
13734000
|
unkown
|
page read and write
|
|
|
|
1CB90000
|
unkown
|
page read and write
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
199E0BB7000
|
unkown
|
page read and write
|
|
|
|
1228E000
|
stack
|
page read and write
|
|
|
|
FD68000
|
unkown
|
page read and write
|
|
|
|
2549000
|
unkown image
|
page readonly
|
|
|
|
17E7F000
|
unkown
|
page read and write
|
|
|
|
1686D000
|
unkown
|
page read and write
|
|
|
|
199E0B69000
|
unkown
|
page read and write
|
|
|
|
DAA6000
|
unkown
|
page read and write
|
|
|
|
20F45A10000
|
unkown image
|
page readonly
|
|
|
|
199E04E2000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
6809F000
|
unkown image
|
page write copy
|
|
|
|
FF00000
|
unkown image
|
page readonly
|
|
|
|
7F890000
|
unkown image
|
page readonly
|
|
|
|
20A8C3A0000
|
unkown
|
page read and write
|
|
|
|
EDE8000
|
unkown
|
page read and write
|
|
|
|
15D60000
|
unkown
|
page read and write
|
|
|
|
199E04A2000
|
unkown
|
page read and write
|
|
|
|
3052000
|
unkown image
|
page read and write
|
|
|
|
158E0000
|
unkown
|
page read and write
|
|
|
|
D28C000
|
unkown
|
page read and write
|
|
|
|
7FF5AC0F4000
|
unkown image
|
page readonly
|
|
|
|
FF802000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC28A000
|
unkown image
|
page readonly
|
|
|
|
199E0B98000
|
unkown
|
page read and write
|
|
|
|
D8F2000
|
unkown
|
page read and write
|
|
|
|
440000
|
unkown image
|
page readonly
|
|
|
|
171CC700000
|
unkown
|
page read and write
|
|
|
|
7FF5AC327000
|
unkown image
|
page readonly
|
|
|
|
7DF5E35B0000
|
unkown image
|
page readonly
|
|
|
|
15880000
|
heap private
|
page read and write
|
|
|
|
20F45CC0000
|
unkown image
|
page readonly
|
|
|
|
199E0B68000
|
unkown
|
page read and write
|
|
|
|
EDB8000
|
unkown
|
page read and write
|
|
|
|
1D185330000
|
unkown image
|
page readonly
|
|
|
|
168E3000
|
unkown
|
page read and write
|
|
|
|
1CB95000
|
unkown
|
page read and write
|
|
|
|
70CD1FB000
|
stack
|
page read and write
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
E94E000
|
stack
|
page read and write
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
7F982000
|
unkown image
|
page readonly
|
|
|
|
16700000
|
unkown
|
page read and write
|
|
|
|
7FF5DF451000
|
unkown image
|
page readonly
|
|
|
|
FF6FA000
|
unkown
|
page readonly
|
|
|
|
16B7C000
|
unkown
|
page read and write
|
|
|
|
1D0A6000
|
unkown
|
page read and write
|
|
|
|
15800000
|
unkown
|
page read and write
|
|
|
|
180B9000
|
unkown
|
page read and write
|
|
|
|
1373D000
|
unkown
|
page read and write
|
|
|
|
FE8F000
|
unkown
|
page read and write
|
|
|
|
13330000
|
unkown
|
page read and write
|
|
|
|
138A7000
|
unkown
|
page read and write
|
|
|
|
13739000
|
unkown
|
page read and write
|
|
|
|
3500000
|
unkown image
|
page readonly
|
|
|
|
167C6000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2E7000
|
unkown image
|
page readonly
|
|
|
|
7FF56361F000
|
unkown image
|
page readonly
|
|
|
|
16690000
|
unkown
|
page read and write
|
|
|
|
14D60000
|
unkown
|
page read and write
|
|
|
|
1800B000
|
unkown
|
page read and write
|
|
|
|
17260000
|
unkown
|
page read and write
|
|
|
|
680A6000
|
unkown image
|
page write copy
|
|
|
|
16B9D000
|
unkown
|
page read and write
|
|
|
|
3105000
|
unkown image
|
page read and write
|
|
|
|
7FF5AC3A1000
|
unkown image
|
page readonly
|
|
|
|
DE30000
|
unkown
|
page read and write
|
|
|
|
17FA7000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
7F9A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5650A7000
|
unkown image
|
page readonly
|
|
|
|
16470000
|
unkown image
|
page readonly
|
|
|
|
FD4F000
|
unkown
|
page read and write
|
|
|
|
1CC97000
|
unkown
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
7DF4710F0000
|
unkown image
|
page readonly
|
|
|
|
16B58000
|
unkown
|
page read and write
|
|
|
|
FDF8000
|
unkown
|
page read and write
|
|
|
|
7FF5AC2D0000
|
unkown image
|
page readonly
|
|
|
|
2B40000
|
unkown image
|
page read and write
|
|
|
|
FDE9000
|
unkown
|
page read and write
|
|
|
|
13727000
|
unkown
|
page read and write
|
|
|
|
7FF5D5909000
|
unkown image
|
page readonly
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
FD82000
|
unkown
|
page read and write
|
|
|
|
16B80000
|
unkown
|
page read and write
|
|
|
|
167C7000
|
unkown
|
page read and write
|
|
|
|
7DF5714F2000
|
unkown image
|
page readonly
|
|
|
|
31D7000
|
heap private
|
page read and write
|
|
|
|
16A68000
|
unkown
|
page read and write
|
|
|
|
20A8BE70000
|
unkown
|
page read and write
|
|
|
|
16AF2000
|
unkown
|
page read and write
|
|
|
|
27A929E6000
|
heap default
|
page read and write
|
|
|
|
7FF563852000
|
unkown image
|
page readonly
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
7FF563881000
|
unkown image
|
page readonly
|
|
|
|
1CE7A000
|
unkown
|
page read and write
|
|
|
|
1BF9E000
|
unkown
|
page read and write
|
|
|
|
7FF5630A4000
|
unkown image
|
page readonly
|
|
|
|
EB73000
|
unkown
|
page read and write
|
|
|
|
199E0513000
|
unkown
|
page read and write
|
|
|
|
199E0600000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABB71000
|
unkown image
|
page readonly
|
|
|
|
1CA01000
|
unkown
|
page read and write
|
|
|
|
FD75000
|
unkown
|
page read and write
|
|
|
|
16B6C000
|
unkown
|
page read and write
|
|
|
|
180B3000
|
unkown
|
page read and write
|
|
|
|
13603000
|
unkown
|
page read and write
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
7FF5DF366000
|
unkown image
|
page readonly
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
20A8BF13000
|
unkown
|
page read and write
|
|
|
|
17250000
|
unkown
|
page read and write
|
|
|
|
16878000
|
unkown
|
page read and write
|
|
|
|
16A29000
|
unkown
|
page read and write
|
|
|
|
EF8C000
|
stack
|
page read and write
|
|
|
|
16A04000
|
unkown
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0C0000
|
unkown image
|
page readonly
|
|
|
|
15D9D000
|
unkown
|
page read and write
|
|
|
|
16B9F000
|
unkown
|
page read and write
|
|
|
|
166D0000
|
unkown
|
page read and write
|
|
|
|
7FF5637A0000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown image
|
page read and write
|
|
|
|
67E50000
|
unkown image
|
page readonly
|
|
|
|
7FF563875000
|
unkown image
|
page readonly
|
|
|
|
199E0B96000
|
unkown
|
page read and write
|
|
|
|
16902000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
168A1000
|
unkown
|
page read and write
|
|
|
|
138B4000
|
unkown
|
page read and write
|
|
|
|
FE83000
|
unkown
|
page read and write
|
|
|
|
13310000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BC29000
|
unkown image
|
page readonly
|
|
|
|
138A9000
|
unkown
|
page read and write
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
7DF573230000
|
unkown image
|
page readonly
|
|
|
|
1813F000
|
unkown
|
page read and write
|
|
|
|
138CE000
|
unkown
|
page read and write
|
|
|
|
199E0BB6000
|
unkown
|
page read and write
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
171CC642000
|
unkown
|
page read and write
|
|
|
|
31BE000
|
stack
|
page read and write
|
|
|
|
2A27000
|
heap private
|
page read and write
|
|
|
|
16D15000
|
unkown
|
page read and write
|
|
|
|
1812F000
|
unkown
|
page read and write
|
|
|
|
16797000
|
unkown
|
page read and write
|
|
|
|
27AF000
|
unkown image
|
page readonly
|
|
|
|
13725000
|
unkown
|
page read and write
|
|
|
|
20F45B3F000
|
unkown
|
page read and write
|
|
|
|
1C6D0000
|
unkown
|
page read and write
|
|
|
|
ED98000
|
unkown
|
page read and write
|
|
|
|
FF6D9000
|
unkown
|
page execute read
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
EDCA000
|
unkown
|
page read and write
|
|
|
|
13990000
|
unkown
|
page read and write
|
|
|
|
1CB92000
|
unkown
|
page read and write
|
|
|
|
FE69000
|
unkown
|
page read and write
|
|
|
|
EF90000
|
unkown
|
page read and write
|
|
|
|
25D3000
|
unkown image
|
page readonly
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
20A8BC10000
|
unkown image
|
page readonly
|
|
|
|
16F02000
|
unkown
|
page read and write
|
|
|
|
199E01E0000
|
unkown image
|
page readonly
|
|
|
|
1C9F6000
|
unkown
|
page read and write
|
|
|
|
30F8000
|
unkown image
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
3160000
|
stack
|
page read and write
|
|
|
|
27A92AF0000
|
unkown image
|
page readonly
|
|
|
|
20A8BE13000
|
unkown
|
page read and write
|
|
|
|
1361A000
|
unkown
|
page read and write
|
|
|
|
16A60000
|
unkown
|
page read and write
|
|
|
|
1763A000
|
stack
|
page read and write
|
|
|
|
180AF000
|
unkown
|
page read and write
|
|
|
|
330A000
|
heap private
|
page read and write
|
|
|
|
2CF7000
|
unkown
|
page read and write
|
|
|
|
7FF56B40D000
|
unkown image
|
page readonly
|
|
|
|
FE23000
|
unkown
|
page read and write
|
|
|
|
3560000
|
unkown image
|
page readonly
|
|
|
|
7F990000
|
unkown image
|
page readonly
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
619E000
|
stack
|
page read and write
|
|
|
|
18111000
|
unkown
|
page read and write
|
|
|
|
20F459E0000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
1CC26000
|
unkown
|
page read and write
|
|
|
|
D180000
|
unkown
|
page read and write
|
|
|
|
138AD000
|
unkown
|
page read and write
|
|
|
|
199E0F40000
|
unkown image
|
page write copy
|
|
|
|
138CF000
|
unkown
|
page read and write
|
|
|
|
FE05000
|
unkown
|
page read and write
|
|
|
|
13759000
|
unkown
|
page read and write
|
|
|
|
167AD000
|
unkown
|
page read and write
|
|
|
|
EDE4000
|
unkown
|
page read and write
|
|
|
|
FDFC000
|
unkown
|
page read and write
|
|
|
|
1672F000
|
unkown
|
page read and write
|
|
|
|
20F45A60000
|
unkown
|
page read and write
|
|
|
|
169FA000
|
unkown
|
page read and write
|
|
|
|
7DF573230000
|
unkown image
|
page readonly
|
|
|
|
138C4000
|
unkown
|
page read and write
|
|
|
|
7F770000
|
unkown image
|
page readonly
|
|
|
|
167C6000
|
unkown
|
page read and write
|
|
|
|
FF6F1000
|
unkown
|
page execute read
|
|
|
|
2B05000
|
unkown
|
page read and write
|
|
|
|
1CC38000
|
unkown
|
page read and write
|
|
|
|
167FF000
|
unkown
|
page read and write
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
20F45AD0000
|
unkown
|
page read and write
|
|
|
|
15D6A000
|
unkown
|
page read and write
|
|
|
|
7DF5ED0B2000
|
unkown image
|
page readonly
|
|
|
|
1D185350000
|
heap default
|
page read and write
|
|
|
|
18123000
|
unkown
|
page read and write
|
|
|
|
13948000
|
unkown
|
page read and write
|
|
|
|
1692F000
|
unkown
|
page read and write
|
|
|
|
167D5000
|
unkown
|
page read and write
|
|
|
|
2F0F000
|
heap default
|
page read and write
|
|
|
|
7FF56309F000
|
unkown image
|
page readonly
|
|
|
|
13876000
|
unkown
|
page read and write
|
|
|
|
7FF565599000
|
unkown image
|
page readonly
|
|
|
|
16FA0000
|
unkown
|
page read and write
|
|
|
|
7DF5BA012000
|
unkown image
|
page readonly
|
|
|
|
1809D000
|
unkown
|
page read and write
|
|
|
|
2E00000
|
unkown image
|
page readonly
|
|
|
|
168C4000
|
unkown
|
page read and write
|
|
|
|
7FF5631DD000
|
unkown image
|
page readonly
|
|
|
|
13958000
|
unkown
|
page read and write
|
|
|
|
7FF56BC51000
|
unkown image
|
page readonly
|
|
|
|
FE6F000
|
unkown
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
7DF59F962000
|
unkown image
|
page readonly
|
|
|
|
2DA0000
|
unkown image
|
page readonly
|
|
|
|
2F82000
|
unkown image
|
page read and write
|
|
|
|
4B0000
|
unkown image
|
page readonly
|
|
|
|
1D185429000
|
unkown
|
page read and write
|
|
|
|
138AF000
|
unkown
|
page read and write
|
|
|
|
EDEF000
|
unkown
|
page read and write
|
|
|
|
FDAF000
|
unkown
|
page read and write
|
|
|
|
17F1B000
|
unkown
|
page read and write
|
|
|
|
13818000
|
unkown
|
page read and write
|
|
|
|
1CC9F000
|
unkown
|
page read and write
|
|
|
|
1D0B3000
|
unkown
|
page read and write
|
|
|
|
7DF5E35A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC10F000
|
unkown image
|
page readonly
|
|
|
|
25BDEF02000
|
unkown
|
page read and write
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
13879000
|
unkown
|
page read and write
|
|
|
|
EAE0000
|
unkown
|
page read and write
|
|
|
|
1687D000
|
unkown
|
page read and write
|
|
|
|
199E1002000
|
unkown
|
page read and write
|
|
|
|
FE09000
|
unkown
|
page read and write
|
|
|
|
16780000
|
unkown
|
page read and write
|
|
|
|
11F5E000
|
stack
|
page read and write
|
|
|
|
7FF5AC303000
|
unkown image
|
page readonly
|
|
|
|
199E0BAA000
|
unkown
|
page read and write
|
|
|
|
7FF5D578B000
|
unkown image
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
heap private
|
page read and write
|
|
|
|
199E01A0000
|
unkown image
|
page read and write
|
|
|
|
15AA0000
|
unkown
|
page read and write
|
|
|
|
18047000
|
unkown
|
page read and write
|
|
|
|
FF6D5000
|
unkown
|
page execute read
|
|
|
|
7DF59F960000
|
unkown image
|
page readonly
|
|
|
|
ED1D000
|
unkown
|
page read and write
|
|
|
|
16ADA000
|
unkown
|
page read and write
|
|
|
|
2856000
|
unkown image
|
page readonly
|
|
|
|
199E04EE000
|
unkown
|
page read and write
|
|
|
|
FE8E000
|
unkown
|
page read and write
|
|
|
|
180B5000
|
unkown
|
page read and write
|
|
|
|
FF6FB000
|
unkown
|
page execute read
|
|
|
|
D02A000
|
unkown
|
page read and write
|
|
|
|
68BF97C000
|
stack
|
page read and write
|
|
|
|
3001000
|
unkown image
|
page read and write
|
|
|
|
27A92ED0000
|
unkown image
|
page readonly
|
|
|
|
168BC000
|
unkown
|
page read and write
|
|
|
|
7FF5DF262000
|
unkown image
|
page readonly
|
|
|
|
16945000
|
unkown
|
page read and write
|
|
|
|
27A929F5000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown image
|
page readonly
|
|
|
|
1689C000
|
unkown
|
page read and write
|
|
|
|
7DF59F972000
|
unkown image
|
page readonly
|
|
|
|
199E04ED000
|
unkown
|
page read and write
|
|
|
|
25BDEE50000
|
unkown
|
page read and write
|
|
|
|
7FF5AC180000
|
unkown image
|
page readonly
|
|
|
|
13961000
|
unkown
|
page read and write
|
|
|
|
1D185380000
|
unkown
|
page read and write
|
|
|
|
167D0000
|
unkown
|
page read and write
|
|
|
|
3AC3FF000
|
stack
|
page read and write
|
|
|
|
4F80000
|
heap private
|
page read and write
|
|
|
|
16886000
|
unkown
|
page read and write
|
|
|
|
EDDB000
|
unkown
|
page read and write
|
|
|
|
16772000
|
unkown
|
page read and write
|
|
|
|
13939000
|
unkown
|
page read and write
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
180A9000
|
unkown
|
page read and write
|
|
|
|
E67E000
|
stack
|
page read and write
|
|
|
|
7FF5635FB000
|
unkown image
|
page readonly
|
|
|
|
7FF5AC21C000
|
unkown image
|
page readonly
|
|
|
|
7FF591B85000
|
unkown image
|
page readonly
|
|
|
|
167FE000
|
unkown
|
page read and write
|
|
|
|
27C1000
|
unkown image
|
page readonly
|
|
|
|
168ED000
|
unkown
|
page read and write
|
|
There are 2694 hidden memdumps, click here to show them.