Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
ClaimCopy-1848214335-12022021.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\ClaimCopy-1848214335-12022021.xlsb (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$ClaimCopy-1848214335-12022021.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\ClaimCopy-1848214335-12022021.xlsb.. (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3AC5173B-BE2E-4080-B9F2-503317BAB84A
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1E7802D5.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
|
|
|
C:\Users\user\Desktop\D1330000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\D1330000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2E2CF162.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
|
|
|
C:\Users\user\Desktop\1ED30000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\1ED30000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
|
There are 4 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech5;
|
unknown
|
|
|
|
http://158.69.133.78/337591964609.datQ
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://api.aadrm.com7
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://api.office.netvI5=
|
unknown
|
|
|
|
http://158.69.133.78/337591964609.dat2
|
158.69.133.78
|
|
|
|
http://ww.org
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies%
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizet-
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://settings.outlook.coml
|
unknown
|
|
|
|
http://158.69.133.78/337591964609.dat24
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize#
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizelj:;-
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
http://158.69.133.78/337591964609.dat
|
158.69.133.78
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
http://185.82.126.78/337591964609.dat2
|
185.82.126.78
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://substrate.office.coms
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asksE:
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeNjT;/
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech=9
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.comQ%g;D
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://api.office.net?J
|
unknown
|
|
|
|
https://graph.windows.netp
|
unknown
|
|
|
|
https://substrate.office.comP
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml)
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://api.diagnostics.office.comom
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickrz8_:.
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorized
|
unknown
|
|
|
|
https://nexus.officeap
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://powerlift.acompli.netm
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeX
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/workA
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeY
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeZ
|
unknown
|
|
|
|
https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptionslL
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeP
|
unknown
|
|
|
|
https://substrate.office.com/Todo-Internal.ReadWriten
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeQ
|
unknown
|
|
|
|
https://www.odwebp.svc.msom
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize-.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeT
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeU
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeW
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeH
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeI
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeJ
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeK
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeE
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeF
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeG
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize8
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile~9
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize9
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeU.Q;/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize?-
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize?
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizeD..;.
|
unknown
|
|
|
|
http://185.82.126.78/337591964609.dat
|
185.82.126.78
|
|
|
|
https://devnull.onenote.comed
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorizent
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://185.82.126.78/710203175032.dat
|
185.82.126.78
|
|
|
|
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
|
|
|
http://45.142.211.62/710203175032.dat2
|
45.142.211.62
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://158.69.133.78/710203175032.dat
|
158.69.133.78
|
|
|
|
http://45.142.211.62/710203175032.dat
|
45.142.211.62
|
|
|
|
http://185.82.126.78/710203175032.dat2
|
185.82.126.78
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://185.82.126.78/710203175032.dat2H
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/r
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://185.82.126.78/710203175032.dat2work
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://185.82.126.78/710203175032.dat(.
|
unknown
|
|
|
|
http://158.69.133.78/710203175032.dat2
|
158.69.133.78
|
|
|
|
http://158.69.133.78/710203175032.dat2l
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://158.69.133.78/710203175032.dat2t
|
unknown
|
|
There are 114 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.142.211.62
|
unknown
|
Russian Federation
|
|
|
|
158.69.133.78
|
unknown
|
Canada
|
|
|
|
185.82.126.78
|
unknown
|
Latvia
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
x38
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
y38
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\235BD
|
235BD
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
a$8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\3427A
|
3427A
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
<&,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2EE16
|
2EE16
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
:3,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3E051
|
3E051
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 59 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
C25D000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
155BC000
|
unkown
|
page read and write
|
|
|
|
CF9B000
|
unkown
|
page read and write
|
|
|
|
15E70000
|
unkown
|
page read and write
|
|
|
|
7DF577900000
|
unkown image
|
page readonly
|
|
|
|
CFA2000
|
unkown
|
page read and write
|
|
|
|
2A4E000
|
unkown image
|
page readonly
|
|
|
|
12D8F000
|
unkown
|
page read and write
|
|
|
|
2450000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
stack
|
page read and write
|
|
|
|
690D53E000
|
stack
|
page read and write
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
6A7E877000
|
stack
|
page read and write
|
|
|
|
2C3BCB95000
|
unkown
|
page read and write
|
|
|
|
7FF5B2FFE000
|
unkown image
|
page readonly
|
|
|
|
2B3A000
|
unkown image
|
page readonly
|
|
|
|
DC60000
|
unkown image
|
page read and write
|
|
|
|
3530000
|
unkown image
|
page readonly
|
|
|
|
2885D370000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9C000
|
unkown
|
page read and write
|
|
|
|
2C3BCB7B000
|
unkown
|
page read and write
|
|
|
|
14E00000
|
heap private
|
page read and write
|
|
|
|
191A6000
|
unkown
|
page read and write
|
|
|
|
12F39000
|
unkown
|
page read and write
|
|
|
|
15630000
|
unkown
|
page read and write
|
|
|
|
690DCFD000
|
stack
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
1555B000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
heap default
|
page read and write
|
|
|
|
248F000
|
unkown image
|
page readonly
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
12E46000
|
unkown
|
page read and write
|
|
|
|
E093000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
2C3BCB7D000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
28861AD0000
|
unkown
|
page read and write
|
|
|
|
16445000
|
unkown image
|
page read and write
|
|
|
|
7FDC0000
|
unkown image
|
page readonly
|
|
|
|
15795000
|
unkown
|
page read and write
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
15789000
|
unkown
|
page read and write
|
|
|
|
15DC0000
|
unkown
|
page read and write
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
12C85000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
7FF5AC6F1000
|
unkown image
|
page readonly
|
|
|
|
F3DF000
|
unkown
|
page read and write
|
|
|
|
2340000
|
heap default
|
page read and write
|
|
|
|
340C000
|
unkown
|
page read and write
|
|
|
|
15682000
|
unkown
|
page read and write
|
|
|
|
7FF4F60E5000
|
unkown image
|
page readonly
|
|
|
|
2B58000
|
unkown image
|
page readonly
|
|
|
|
15C831E0000
|
unkown image
|
page readonly
|
|
|
|
15070000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page read and write
|
|
|
|
21EA2720000
|
unkown image
|
page readonly
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
7FF569BA3000
|
unkown image
|
page readonly
|
|
|
|
F37C000
|
unkown
|
page read and write
|
|
|
|
E051000
|
unkown
|
page read and write
|
|
|
|
15343000
|
unkown
|
page read and write
|
|
|
|
3265000
|
unkown
|
page read and write
|
|
|
|
1A741BF0000
|
unkown image
|
page read and write
|
|
|
|
292E000
|
stack
|
page read and write
|
|
|
|
1F9E000
|
unkown image
|
page readonly
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
FFA61000
|
unkown
|
page execute read
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2885C980000
|
unkown image
|
page readonly
|
|
|
|
12E46000
|
unkown
|
page read and write
|
|
|
|
2BF1000
|
unkown image
|
page readonly
|
|
|
|
21EA26F0000
|
unkown image
|
page readonly
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
1578A000
|
unkown
|
page read and write
|
|
|
|
7FF5B30F4000
|
unkown image
|
page readonly
|
|
|
|
2885CD00000
|
unkown
|
page read and write
|
|
|
|
4203000
|
heap private
|
page read and write
|
|
|
|
AD97000
|
stack
|
page read and write
|
|
|
|
12F48000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown image
|
page readonly
|
|
|
|
4510000
|
unkown image
|
page readonly
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
7890000
|
unkown
|
page read and write
|
|
|
|
2A75000
|
unkown
|
page read and write
|
|
|
|
D26C000
|
stack
|
page read and write
|
|
|
|
F22B000
|
stack
|
page read and write
|
|
|
|
7F4D0000
|
unkown image
|
page readonly
|
|
|
|
7DF516480000
|
unkown image
|
page readonly
|
|
|
|
15561000
|
unkown
|
page read and write
|
|
|
|
7FF556DD1000
|
unkown image
|
page readonly
|
|
|
|
F3CF000
|
unkown
|
page read and write
|
|
|
|
7FF4F61C7000
|
unkown image
|
page readonly
|
|
|
|
32E5000
|
unkown
|
page read and write
|
|
|
|
15715000
|
unkown
|
page read and write
|
|
|
|
28861C3D000
|
unkown
|
page read and write
|
|
|
|
315A000
|
heap private
|
page read and write
|
|
|
|
ED6C000
|
stack
|
page read and write
|
|
|
|
7F4E2000
|
unkown image
|
page readonly
|
|
|
|
15C83EC0000
|
unkown
|
page read and write
|
|
|
|
15C83640000
|
unkown
|
page read and write
|
|
|
|
2885C476000
|
unkown
|
page read and write
|
|
|
|
2886197E000
|
unkown
|
page read and write
|
|
|
|
2B58000
|
unkown image
|
page readonly
|
|
|
|
21D0AD00000
|
unkown
|
page read and write
|
|
|
|
1141E000
|
stack
|
page read and write
|
|
|
|
2C3BC2D2000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EDD000
|
unkown image
|
page readonly
|
|
|
|
B135000
|
unkown
|
page read and write
|
|
|
|
156F1000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
3251000
|
unkown
|
page read and write
|
|
|
|
21EA2849000
|
unkown
|
page read and write
|
|
|
|
7FF51FA71000
|
unkown image
|
page readonly
|
|
|
|
15C84130000
|
unkown
|
page read and write
|
|
|
|
7F620000
|
unkown image
|
page readonly
|
|
|
|
2A5F000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
236E000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
7FF51F77B000
|
unkown image
|
page readonly
|
|
|
|
6A7E77B000
|
stack
|
page read and write
|
|
|
|
2536000
|
unkown image
|
page readonly
|
|
|
|
15614000
|
unkown
|
page read and write
|
|
|
|
1F73000
|
unkown image
|
page readonly
|
|
|
|
14D90000
|
heap private
|
page read and write
|
|
|
|
14D70000
|
unkown
|
page read and write
|
|
|
|
7DF52D6E0000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
F4E6000
|
unkown
|
page read and write
|
|
|
|
15220000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown image
|
page readonly
|
|
|
|
1A742280000
|
unkown image
|
page readonly
|
|
|
|
7FCA0000
|
unkown image
|
page readonly
|
|
|
|
156E2000
|
unkown
|
page read and write
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2885C502000
|
unkown
|
page read and write
|
|
|
|
2176000
|
unkown image
|
page readonly
|
|
|
|
7FF51F737000
|
unkown image
|
page readonly
|
|
|
|
12D29000
|
unkown
|
page read and write
|
|
|
|
E077000
|
unkown
|
page read and write
|
|
|
|
2C06000
|
unkown image
|
page readonly
|
|
|
|
28861A80000
|
unkown
|
page read and write
|
|
|
|
2C3BC24D000
|
unkown
|
page read and write
|
|
|
|
DB5E000
|
stack
|
page read and write
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
2B0E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F95000
|
unkown image
|
page readonly
|
|
|
|
2376000
|
unkown
|
page read and write
|
|
|
|
7F4F0000
|
unkown image
|
page readonly
|
|
|
|
786D000
|
stack
|
page read and write
|
|
|
|
2415000
|
unkown image
|
page readonly
|
|
|
|
2C3BCA02000
|
unkown
|
page read and write
|
|
|
|
28861978000
|
unkown
|
page read and write
|
|
|
|
7FF5B3033000
|
unkown image
|
page readonly
|
|
|
|
4200000
|
heap private
|
page read and write
|
|
|
|
7DF5C0D90000
|
unkown image
|
page readonly
|
|
|
|
2A0F000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
7DF516462000
|
unkown image
|
page readonly
|
|
|
|
7FF5087D2000
|
unkown image
|
page readonly
|
|
|
|
FFA68000
|
unkown
|
page execute read
|
|
|
|
3251000
|
unkown
|
page read and write
|
|
|
|
326C000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
7DF516470000
|
unkown image
|
page readonly
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
2A3B000
|
unkown
|
page read and write
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
2C3BCB98000
|
unkown
|
page read and write
|
|
|
|
15C83230000
|
unkown
|
page read and write
|
|
|
|
31D4000
|
heap private
|
page read and write
|
|
|
|
2C3BC2AF000
|
unkown
|
page read and write
|
|
|
|
7DF564F50000
|
unkown image
|
page readonly
|
|
|
|
2C3BCBBB000
|
unkown
|
page read and write
|
|
|
|
28861C62000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
2C3BCB84000
|
unkown
|
page read and write
|
|
|
|
7DF516472000
|
unkown image
|
page readonly
|
|
|
|
2DBB000
|
unkown
|
page read and write
|
|
|
|
7FF51F784000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
2885D460000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
300E000
|
stack
|
page read and write
|
|
|
|
3400000
|
unkown
|
page read and write
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
7FF5B2951000
|
unkown image
|
page readonly
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2BDF000
|
unkown image
|
page readonly
|
|
|
|
28861AD0000
|
unkown
|
page read and write
|
|
|
|
12EB7000
|
unkown
|
page read and write
|
|
|
|
22FD000
|
unkown image
|
page readonly
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
E0A5000
|
unkown
|
page read and write
|
|
|
|
12EAA000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
7F4D2000
|
unkown image
|
page readonly
|
|
|
|
7FF569A92000
|
unkown image
|
page readonly
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
2245000
|
heap default
|
page read and write
|
|
|
|
22C3000
|
unkown image
|
page readonly
|
|
|
|
15782000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
3262000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
2376000
|
unkown
|
page read and write
|
|
|
|
3243000
|
heap default
|
page read and write
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF2D000
|
unkown image
|
page readonly
|
|
|
|
106E0000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
F441000
|
unkown
|
page read and write
|
|
|
|
C596000
|
unkown
|
page read and write
|
|
|
|
2BE4000
|
unkown image
|
page readonly
|
|
|
|
FAEDAFF000
|
stack
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
7FF5087EA000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
stack
|
page read and write
|
|
|
|
7FF4F61DB000
|
unkown image
|
page readonly
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
156E1000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF40000
|
unkown image
|
page readonly
|
|
|
|
2F27EA4B000
|
unkown
|
page read and write
|
|
|
|
157B4000
|
unkown
|
page read and write
|
|
|
|
7FF5B3111000
|
unkown image
|
page readonly
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
2F27EA53000
|
unkown
|
page read and write
|
|
|
|
15E70000
|
unkown
|
page read and write
|
|
|
|
E0C8000
|
unkown
|
page read and write
|
|
|
|
15789000
|
unkown
|
page read and write
|
|
|
|
236E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2FC1000
|
unkown image
|
page readonly
|
|
|
|
15C832E1000
|
unkown
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
7F4E0000
|
unkown image
|
page readonly
|
|
|
|
2DA0000
|
unkown image
|
page read and write
|
|
|
|
15E20000
|
unkown
|
page read and write
|
|
|
|
1A741C10000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACB07000
|
unkown image
|
page readonly
|
|
|
|
28861C14000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
7FF5B2A8C000
|
unkown image
|
page readonly
|
|
|
|
2A26000
|
unkown image
|
page readonly
|
|
|
|
322A000
|
heap default
|
page read and write
|
|
|
|
2885C4FC000
|
unkown
|
page read and write
|
|
|
|
1563E000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
C3A7000
|
unkown
|
page read and write
|
|
|
|
7F970000
|
unkown image
|
page readonly
|
|
|
|
3411000
|
unkown
|
page read and write
|
|
|
|
F2E0000
|
unkown
|
page read and write
|
|
|
|
7FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EC9000
|
unkown image
|
page readonly
|
|
|
|
23D0000
|
unkown image
|
page read and write
|
|
|
|
63A0000
|
unkown image
|
page readonly
|
|
|
|
2885C4AD000
|
unkown
|
page read and write
|
|
|
|
1F67000
|
unkown image
|
page readonly
|
|
|
|
FFB70000
|
unkown image
|
page readonly
|
|
|
|
E098000
|
unkown
|
page read and write
|
|
|
|
E045000
|
unkown
|
page read and write
|
|
|
|
7FF569C75000
|
unkown image
|
page readonly
|
|
|
|
15622000
|
unkown
|
page read and write
|
|
|
|
7F4F0000
|
unkown image
|
page readonly
|
|
|
|
21EA2AD0000
|
unkown image
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF5B3101000
|
unkown image
|
page readonly
|
|
|
|
E29C000
|
stack
|
page read and write
|
|
|
|
7FF569BCB000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACDED000
|
unkown image
|
page readonly
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC80000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
F372000
|
unkown
|
page read and write
|
|
|
|
2885CD18000
|
unkown
|
page read and write
|
|
|
|
20DD000
|
unkown image
|
page readonly
|
|
|
|
12EB7000
|
unkown
|
page read and write
|
|
|
|
2C3BCB84000
|
unkown
|
page read and write
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
12E6D000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
E0C5000
|
unkown
|
page read and write
|
|
|
|
2210000
|
stack
|
page read and write
|
|
|
|
E0A9000
|
unkown
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
15C832C7000
|
heap default
|
page read and write
|
|
|
|
157BA000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
FFB90000
|
unkown image
|
page readonly
|
|
|
|
28861D00000
|
unkown
|
page read and write
|
|
|
|
FAED77B000
|
stack
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
2C3BC24A000
|
unkown
|
page read and write
|
|
|
|
7DF52D6D0000
|
unkown image
|
page readonly
|
|
|
|
7F9D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B310A000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
2A67000
|
unkown
|
page read and write
|
|
|
|
7E80000
|
unkown
|
page read and write
|
|
|
|
7DF5C0D70000
|
unkown image
|
page readonly
|
|
|
|
2885C3F0000
|
unkown image
|
page readonly
|
|
|
|
2409000
|
unkown image
|
page readonly
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
7FF5570A1000
|
unkown image
|
page readonly
|
|
|
|
2F27EA29000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
2C3BCB7D000
|
unkown
|
page read and write
|
|
|
|
155C1000
|
unkown
|
page read and write
|
|
|
|
2B4C000
|
unkown image
|
page readonly
|
|
|
|
15545000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
7FF51F97F000
|
unkown image
|
page readonly
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
683C7000
|
unkown image
|
page read and write
|
|
|
|
2583000
|
unkown
|
page read and write
|
|
|
|
15526000
|
unkown
|
page read and write
|
|
|
|
F250000
|
unkown
|
page read and write
|
|
|
|
2C3BCBBA000
|
unkown
|
page read and write
|
|
|
|
12E78000
|
unkown
|
page read and write
|
|
|
|
20A6000
|
unkown image
|
page readonly
|
|
|
|
7FF569B86000
|
unkown image
|
page readonly
|
|
|
|
7DF503EF2000
|
unkown image
|
page readonly
|
|
|
|
32BD000
|
stack
|
page read and write
|
|
|
|
2B30000
|
unkown image
|
page readonly
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
7DF564F70000
|
unkown image
|
page readonly
|
|
|
|
2C3BC6E0000
|
unkown image
|
page readonly
|
|
|
|
15220000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
15635000
|
unkown
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
24B1000
|
unkown image
|
page readonly
|
|
|
|
1DA0000
|
unkown image
|
page readonly
|
|
|
|
D72E000
|
stack
|
page read and write
|
|
|
|
249B000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB4A000
|
unkown
|
page read and write
|
|
|
|
7FF51F291000
|
unkown image
|
page readonly
|
|
|
|
7F612000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
242D000
|
unkown image
|
page readonly
|
|
|
|
7F510000
|
unkown image
|
page readonly
|
|
|
|
7FF51F9CE000
|
unkown image
|
page readonly
|
|
|
|
7FF51F979000
|
unkown image
|
page readonly
|
|
|
|
21EA26E0000
|
heap private
|
page read and write
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
21EA2770000
|
unkown
|
page read and write
|
|
|
|
7FF4F6199000
|
unkown image
|
page readonly
|
|
|
|
15E00000
|
heap private
|
page read and write
|
|
|
|
E07A000
|
unkown
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
21EA2900000
|
unkown
|
page read and write
|
|
|
|
33B0000
|
unkown
|
page read and write
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
21EA2E50000
|
unkown image
|
page readonly
|
|
|
|
27B0000
|
unkown
|
page read and write
|
|
|
|
7FF5AD01A000
|
unkown image
|
page readonly
|
|
|
|
15705000
|
unkown
|
page read and write
|
|
|
|
2A53000
|
heap default
|
page read and write
|
|
|
|
2885CBE1000
|
unkown
|
page read and write
|
|
|
|
1A741E40000
|
unkown
|
page read and write
|
|
|
|
7FDB2000
|
unkown image
|
page readonly
|
|
|
|
2E70000
|
unkown image
|
page readonly
|
|
|
|
12EAA000
|
unkown
|
page read and write
|
|
|
|
7F190000
|
unkown image
|
page readonly
|
|
|
|
21D0AE00000
|
unkown image
|
page readonly
|
|
|
|
1A741E27000
|
unkown
|
page read and write
|
|
|
|
7FF4F6281000
|
unkown image
|
page readonly
|
|
|
|
15AF7000
|
unkown
|
page read and write
|
|
|
|
3408000
|
unkown
|
page read and write
|
|
|
|
7FF51FA54000
|
unkown image
|
page readonly
|
|
|
|
252B000
|
unkown image
|
page readonly
|
|
|
|
7DF5778E2000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6187000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
2C3BCBCC000
|
unkown
|
page read and write
|
|
|
|
2C3BCBAD000
|
unkown
|
page read and write
|
|
|
|
2C3BCB96000
|
unkown
|
page read and write
|
|
|
|
39C0000
|
unkown image
|
page readonly
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
E079000
|
unkown
|
page read and write
|
|
|
|
21D0AA00000
|
unkown image
|
page readonly
|
|
|
|
156C3000
|
unkown
|
page read and write
|
|
|
|
F4E6000
|
unkown
|
page read and write
|
|
|
|
4190000
|
unkown
|
page read and write
|
|
|
|
7FF569509000
|
unkown image
|
page readonly
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
C220000
|
unkown
|
page read and write
|
|
|
|
2FB0000
|
unkown
|
page read and write
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
7FF5571FD000
|
unkown image
|
page readonly
|
|
|
|
DF30000
|
unkown
|
page read and write
|
|
|
|
DD5CCFB000
|
stack
|
page read and write
|
|
|
|
27CB000
|
unkown
|
page read and write
|
|
|
|
12E46000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
AC9C000
|
stack
|
page read and write
|
|
|
|
2B31000
|
unkown image
|
page readonly
|
|
|
|
2C3BC2E8000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2A39000
|
unkown image
|
page readonly
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
E00D000
|
unkown
|
page read and write
|
|
|
|
E09E000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9A000
|
unkown
|
page read and write
|
|
|
|
2C3BCB15000
|
unkown
|
page read and write
|
|
|
|
E0BE000
|
unkown
|
page read and write
|
|
|
|
15DE0000
|
unkown
|
page read and write
|
|
|
|
DC80000
|
unkown image
|
page read and write
|
|
|
|
2837000
|
heap private
|
page read and write
|
|
|
|
2F27F202000
|
unkown
|
page read and write
|
|
|
|
ECB5877000
|
stack
|
page read and write
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
7DF52D6D0000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
12D2E000
|
unkown
|
page read and write
|
|
|
|
7FF55726A000
|
unkown image
|
page readonly
|
|
|
|
7FF508713000
|
unkown image
|
page readonly
|
|
|
|
7970000
|
unkown
|
page read and write
|
|
|
|
157B4000
|
unkown
|
page read and write
|
|
|
|
DF90000
|
unkown
|
page read and write
|
|
|
|
2C18000
|
unkown image
|
page readonly
|
|
|
|
1578C000
|
unkown
|
page read and write
|
|
|
|
12EAA000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown image
|
page readonly
|
|
|
|
7FF55721E000
|
unkown image
|
page readonly
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
2885C2C0000
|
unkown image
|
page readonly
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
C328000
|
unkown
|
page read and write
|
|
|
|
15D50000
|
heap private
|
page read and write
|
|
|
|
12D25000
|
unkown
|
page read and write
|
|
|
|
15D60000
|
unkown image
|
page readonly
|
|
|
|
1919E000
|
unkown
|
page read and write
|
|
|
|
7DF5BACA0000
|
unkown image
|
page readonly
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2C3BC200000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
28861C00000
|
unkown
|
page read and write
|
|
|
|
15713000
|
unkown
|
page read and write
|
|
|
|
CFA7000
|
unkown
|
page read and write
|
|
|
|
3262000
|
unkown
|
page read and write
|
|
|
|
2C3BCB45000
|
unkown
|
page read and write
|
|
|
|
1561F000
|
unkown
|
page read and write
|
|
|
|
D532000
|
unkown
|
page read and write
|
|
|
|
3257000
|
unkown
|
page read and write
|
|
|
|
2720000
|
unkown image
|
page read and write
|
|
|
|
E072000
|
unkown
|
page read and write
|
|
|
|
7FF5ACDF0000
|
unkown image
|
page readonly
|
|
|
|
1531E000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
12ED6000
|
unkown
|
page read and write
|
|
|
|
7FF5ACCA5000
|
unkown image
|
page readonly
|
|
|
|
2E40000
|
unkown image
|
page readonly
|
|
|
|
D54F000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
15510000
|
unkown
|
page read and write
|
|
|
|
683BC000
|
unkown image
|
page read and write
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
3270000
|
unkown image
|
page readonly
|
|
|
|
6A7E57E000
|
stack
|
page read and write
|
|
|
|
7FF5B2F1F000
|
unkown image
|
page readonly
|
|
|
|
156D3000
|
unkown
|
page read and write
|
|
|
|
FAED37C000
|
unkown
|
page read and write
|
|
|
|
12F45000
|
unkown
|
page read and write
|
|
|
|
587000
|
unkown image
|
page readonly
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
2C70000
|
heap default
|
page read and write
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
2BD4000
|
heap private
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
191A6000
|
unkown
|
page read and write
|
|
|
|
158FD000
|
unkown
|
page read and write
|
|
|
|
12F18000
|
unkown
|
page read and write
|
|
|
|
FFA43000
|
unkown
|
page execute read
|
|
|
|
7FF51FA49000
|
unkown image
|
page readonly
|
|
|
|
157A9000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
15D30000
|
unkown image
|
page readonly
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2250000
|
unkown image
|
page readonly
|
|
|
|
7FF50870F000
|
unkown image
|
page readonly
|
|
|
|
2C3BC2A9000
|
unkown
|
page read and write
|
|
|
|
21EA288A000
|
unkown
|
page read and write
|
|
|
|
1570B000
|
unkown
|
page read and write
|
|
|
|
241B000
|
unkown image
|
page readonly
|
|
|
|
12E6D000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
15703000
|
unkown
|
page read and write
|
|
|
|
28861AA0000
|
unkown
|
page read and write
|
|
|
|
155EA000
|
unkown
|
page read and write
|
|
|
|
15C83280000
|
heap default
|
page read and write
|
|
|
|
7DF503F00000
|
unkown image
|
page readonly
|
|
|
|
DF80000
|
unkown
|
page read and write
|
|
|
|
157B4000
|
unkown
|
page read and write
|
|
|
|
20C5000
|
unkown image
|
page readonly
|
|
|
|
23FA000
|
unkown image
|
page readonly
|
|
|
|
119FE000
|
stack
|
page read and write
|
|
|
|
2C3BCB98000
|
unkown
|
page read and write
|
|
|
|
2ACF000
|
unkown image
|
page readonly
|
|
|
|
C235000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF7E000
|
unkown image
|
page readonly
|
|
|
|
2A40000
|
unkown image
|
page readonly
|
|
|
|
F42B000
|
unkown
|
page read and write
|
|
|
|
14F90000
|
unkown
|
page read and write
|
|
|
|
DCC0000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9B000
|
unkown
|
page read and write
|
|
|
|
78C0000
|
unkown
|
page read and write
|
|
|
|
EE6C000
|
stack
|
page read and write
|
|
|
|
C279000
|
unkown
|
page read and write
|
|
|
|
2B3B000
|
unkown image
|
page readonly
|
|
|
|
21D0A9D0000
|
heap private
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
7FF5570FF000
|
unkown image
|
page readonly
|
|
|
|
C51D000
|
unkown
|
page read and write
|
|
|
|
21A0000
|
unkown image
|
page readonly
|
|
|
|
7FF569C52000
|
unkown image
|
page readonly
|
|
|
|
2C3BC2BC000
|
unkown
|
page read and write
|
|
|
|
7FF555B91000
|
unkown image
|
page readonly
|
|
|
|
20EB000
|
unkown image
|
page readonly
|
|
|
|
FFB70000
|
unkown image
|
page readonly
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
78B0000
|
unkown
|
page read and write
|
|
|
|
32E1000
|
unkown
|
page read and write
|
|
|
|
7FF4F595B000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACE8C000
|
unkown image
|
page readonly
|
|
|
|
2C3BD06A000
|
unkown
|
page read and write
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
D4BC000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
7FF51F766000
|
unkown image
|
page readonly
|
|
|
|
7FF508723000
|
unkown image
|
page readonly
|
|
|
|
7F192000
|
unkown image
|
page readonly
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
15C84110000
|
unkown
|
page read and write
|
|
|
|
15C83E60000
|
unkown
|
page read and write
|
|
|
|
ECB5CFD000
|
stack
|
page read and write
|
|
|
|
11AFE000
|
stack
|
page read and write
|
|
|
|
7FF5B308A000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2E96000
|
unkown image
|
page readonly
|
|
|
|
7FF5B301D000
|
unkown image
|
page readonly
|
|
|
|
2C93000
|
heap default
|
page read and write
|
|
|
|
C57C000
|
unkown
|
page read and write
|
|
|
|
2C3BCB86000
|
unkown
|
page read and write
|
|
|
|
FFA6C000
|
unkown
|
page execute read
|
|
|
|
7FF569BDE000
|
unkown image
|
page readonly
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC82000
|
unkown image
|
page readonly
|
|
|
|
2B58000
|
unkown image
|
page readonly
|
|
|
|
7FF4F61A3000
|
unkown image
|
page readonly
|
|
|
|
27D0000
|
unkown image
|
page readonly
|
|
|
|
7FF56950E000
|
unkown image
|
page readonly
|
|
|
|
F510000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7F1A2000
|
unkown image
|
page readonly
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
2D4A000
|
heap default
|
page read and write
|
|
|
|
1564F000
|
unkown
|
page read and write
|
|
|
|
113DEFB000
|
stack
|
page read and write
|
|
|
|
2885CD02000
|
unkown
|
page read and write
|
|
|
|
15542000
|
unkown
|
page read and write
|
|
|
|
23DF000
|
unkown image
|
page readonly
|
|
|
|
7F190000
|
unkown image
|
page readonly
|
|
|
|
2770000
|
unkown image
|
page readonly
|
|
|
|
F4E7000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
3157000
|
heap private
|
page read and write
|
|
|
|
E0BA000
|
unkown
|
page read and write
|
|
|
|
DCD0000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
28861CF4000
|
unkown
|
page read and write
|
|
|
|
C1EF000
|
unkown
|
page read and write
|
|
|
|
2970000
|
unkown
|
page read and write
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
2F27E8E0000
|
unkown image
|
page readonly
|
|
|
|
2406000
|
unkown image
|
page readonly
|
|
|
|
7F192000
|
unkown image
|
page readonly
|
|
|
|
28861AD0000
|
unkown
|
page read and write
|
|
|
|
7FF51F22E000
|
unkown image
|
page readonly
|
|
|
|
20D2000
|
unkown
|
page read and write
|
|
|
|
7FF5571E7000
|
unkown image
|
page readonly
|
|
|
|
2F20000
|
unkown image
|
page readonly
|
|
|
|
7FF51F7B6000
|
unkown image
|
page readonly
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
7DF52D6F0000
|
unkown image
|
page readonly
|
|
|
|
12F16000
|
unkown
|
page read and write
|
|
|
|
C1ED000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
E063000
|
unkown
|
page read and write
|
|
|
|
683BF000
|
unkown image
|
page write copy
|
|
|
|
157A4000
|
unkown
|
page read and write
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
28861CFB000
|
unkown
|
page read and write
|
|
|
|
21A0000
|
stack
|
page read and write
|
|
|
|
244F000
|
unkown image
|
page readonly
|
|
|
|
7DF564F50000
|
unkown image
|
page readonly
|
|
|
|
F430000
|
unkown
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
1570E000
|
unkown
|
page read and write
|
|
|
|
2C3BC282000
|
unkown
|
page read and write
|
|
|
|
1555B000
|
unkown
|
page read and write
|
|
|
|
28861CFD000
|
unkown
|
page read and write
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
C326000
|
unkown
|
page read and write
|
|
|
|
C268000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
15C83630000
|
heap private
|
page read and write
|
|
|
|
2C1E000
|
stack
|
page read and write
|
|
|
|
2A95000
|
unkown image
|
page readonly
|
|
|
|
113DE7E000
|
stack
|
page read and write
|
|
|
|
15E10000
|
unkown
|
page read and write
|
|
|
|
F0EC000
|
stack
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
15C83450000
|
unkown image
|
page readonly
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
DD5C6EB000
|
unkown
|
page read and write
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
12F2C000
|
unkown
|
page read and write
|
|
|
|
32ED000
|
unkown
|
page read and write
|
|
|
|
7F190000
|
unkown image
|
page readonly
|
|
|
|
E0C2000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
24D8000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2E6F000
|
unkown image
|
page readonly
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
E072000
|
unkown
|
page read and write
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
32F1000
|
unkown
|
page read and write
|
|
|
|
15790000
|
unkown
|
page read and write
|
|
|
|
7FF569B93000
|
unkown image
|
page readonly
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
15703000
|
unkown
|
page read and write
|
|
|
|
7FF4F628A000
|
unkown image
|
page readonly
|
|
|
|
105DD000
|
stack
|
page read and write
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
2C3BC249000
|
unkown
|
page read and write
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
2B31000
|
unkown image
|
page readonly
|
|
|
|
2F27EA4F000
|
unkown
|
page read and write
|
|
|
|
7FF5AC6EB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2A77000
|
unkown image
|
page readonly
|
|
|
|
7FF51FA5A000
|
unkown image
|
page readonly
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
156AD000
|
unkown
|
page read and write
|
|
|
|
2B46000
|
unkown image
|
page readonly
|
|
|
|
2F27EA7D000
|
unkown
|
page read and write
|
|
|
|
12F68000
|
unkown
|
page read and write
|
|
|
|
6A7E97F000
|
stack
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
2A9F000
|
unkown image
|
page readonly
|
|
|
|
2188000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB6A000
|
unkown
|
page read and write
|
|
|
|
157C4000
|
unkown
|
page read and write
|
|
|
|
12F16000
|
unkown
|
page read and write
|
|
|
|
12F68000
|
unkown
|
page read and write
|
|
|
|
2D60000
|
unkown
|
page read and write
|
|
|
|
363A000
|
heap private
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
15545000
|
unkown
|
page read and write
|
|
|
|
DAAF000
|
stack
|
page read and write
|
|
|
|
7FF569A97000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
DD5CAF7000
|
stack
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
12F1D000
|
unkown
|
page read and write
|
|
|
|
2F27EA46000
|
unkown
|
page read and write
|
|
|
|
DC5F000
|
stack
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
7FF51F812000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0D82000
|
unkown image
|
page readonly
|
|
|
|
E093000
|
unkown
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
117B0000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
7FE0000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
15901000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
106DA000
|
stack
|
page read and write
|
|
|
|
7FF507FC1000
|
unkown image
|
page readonly
|
|
|
|
E42D000
|
stack
|
page read and write
|
|
|
|
15C84190000
|
unkown
|
page read and write
|
|
|
|
12E78000
|
unkown
|
page read and write
|
|
|
|
2F27EA6B000
|
unkown
|
page read and write
|
|
|
|
FAEDCFE000
|
stack
|
page read and write
|
|
|
|
12C60000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
1D90000
|
unkown image
|
page readonly
|
|
|
|
C2E1000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E61000
|
unkown image
|
page readonly
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
155B5000
|
unkown
|
page read and write
|
|
|
|
E068000
|
unkown
|
page read and write
|
|
|
|
7FF5087E4000
|
unkown image
|
page readonly
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
C156000
|
unkown
|
page read and write
|
|
|
|
F4F5000
|
unkown
|
page read and write
|
|
|
|
23CE000
|
unkown image
|
page readonly
|
|
|
|
E073000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown image
|
page readonly
|
|
|
|
15E30000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
unkown image
|
page read and write
|
|
|
|
82FDDFF000
|
stack
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
24D8000
|
unkown image
|
page readonly
|
|
|
|
31D0000
|
heap private
|
page read and write
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2F27EB02000
|
unkown
|
page read and write
|
|
|
|
E0C6000
|
unkown
|
page read and write
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
E025000
|
unkown
|
page read and write
|
|
|
|
113E07D000
|
stack
|
page read and write
|
|
|
|
12CA4000
|
unkown
|
page read and write
|
|
|
|
DD5D17F000
|
stack
|
page read and write
|
|
|
|
1A741E2A000
|
unkown
|
page read and write
|
|
|
|
7FF51FA6A000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
6510000
|
unkown image
|
page readonly
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
15C84120000
|
unkown
|
page readonly
|
|
|
|
7FF5B30E9000
|
unkown image
|
page readonly
|
|
|
|
12D1C000
|
unkown
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
F429000
|
unkown
|
page read and write
|
|
|
|
1A741C30000
|
unkown image
|
page readonly
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
7FF51F9E7000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB91000
|
unkown
|
page read and write
|
|
|
|
12E6D000
|
unkown
|
page read and write
|
|
|
|
2C3BCB6D000
|
unkown
|
page read and write
|
|
|
|
2C3BCB90000
|
unkown
|
page read and write
|
|
|
|
7F4D2000
|
unkown image
|
page readonly
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
2885CC15000
|
unkown
|
page read and write
|
|
|
|
241F000
|
unkown image
|
page readonly
|
|
|
|
2F27E8B0000
|
heap private
|
page read and write
|
|
|
|
15703000
|
unkown
|
page read and write
|
|
|
|
2C3BCB98000
|
unkown
|
page read and write
|
|
|
|
15AF6000
|
unkown
|
page read and write
|
|
|
|
32E8000
|
unkown
|
page read and write
|
|
|
|
D5A0000
|
unkown image
|
page readonly
|
|
|
|
12ED6000
|
unkown
|
page read and write
|
|
|
|
7DF564F52000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6041000
|
unkown image
|
page readonly
|
|
|
|
15E60000
|
unkown
|
page read and write
|
|
|
|
2FD0000
|
unkown image
|
page readonly
|
|
|
|
2FC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACE2F000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
2C3BCB90000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF9A000
|
unkown image
|
page readonly
|
|
|
|
ECB597E000
|
stack
|
page read and write
|
|
|
|
15DE0000
|
unkown
|
page read and write
|
|
|
|
2D60000
|
unkown image
|
page readonly
|
|
|
|
156ED000
|
unkown
|
page read and write
|
|
|
|
2B24000
|
unkown image
|
page readonly
|
|
|
|
28861AC0000
|
unkown
|
page read and write
|
|
|
|
21D0AA10000
|
unkown image
|
page readonly
|
|
|
|
21D0A9E0000
|
unkown image
|
page readonly
|
|
|
|
157B4000
|
unkown
|
page read and write
|
|
|
|
2885C49F000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
DD5D87B000
|
stack
|
page read and write
|
|
|
|
12EAA000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
251B000
|
unkown image
|
page readonly
|
|
|
|
2CA1000
|
unkown
|
page read and write
|
|
|
|
12D90000
|
unkown
|
page read and write
|
|
|
|
155BF000
|
unkown
|
page read and write
|
|
|
|
7FF569C64000
|
unkown image
|
page readonly
|
|
|
|
2369000
|
unkown
|
page read and write
|
|
|
|
2154000
|
unkown image
|
page readonly
|
|
|
|
7FF51F97D000
|
unkown image
|
page readonly
|
|
|
|
7FF5AD021000
|
unkown image
|
page readonly
|
|
|
|
7F4D0000
|
unkown image
|
page readonly
|
|
|
|
15E80000
|
unkown
|
page read and write
|
|
|
|
2A86000
|
unkown image
|
page readonly
|
|
|
|
28861CF8000
|
unkown
|
page read and write
|
|
|
|
16440000
|
unkown image
|
page read and write
|
|
|
|
7FF5B2FEA000
|
unkown image
|
page readonly
|
|
|
|
3F80000
|
unkown image
|
page readonly
|
|
|
|
20D8000
|
unkown
|
page read and write
|
|
|
|
155BC000
|
unkown
|
page read and write
|
|
|
|
15A7C000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
2885C2B0000
|
heap private
|
page read and write
|
|
|
|
7FF557076000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
2543000
|
unkown image
|
page readonly
|
|
|
|
80C0000
|
unkown
|
page read and write
|
|
|
|
155ED000
|
unkown
|
page read and write
|
|
|
|
157C4000
|
unkown
|
page read and write
|
|
|
|
ECB5DFD000
|
stack
|
page read and write
|
|
|
|
3245000
|
unkown
|
page read and write
|
|
|
|
15713000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
7FF51F8F5000
|
unkown image
|
page readonly
|
|
|
|
7FF569487000
|
unkown image
|
page readonly
|
|
|
|
7FF557203000
|
unkown image
|
page readonly
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
2C3BCB98000
|
unkown
|
page read and write
|
|
|
|
21D0AD13000
|
unkown
|
page read and write
|
|
|
|
3030000
|
heap private
|
page read and write
|
|
|
|
7FF5572C2000
|
unkown image
|
page readonly
|
|
|
|
FAED3FE000
|
stack
|
page read and write
|
|
|
|
2C3BCF50000
|
unkown
|
page read and write
|
|
|
|
7FF5ACFF2000
|
unkown image
|
page readonly
|
|
|
|
324D000
|
unkown
|
page read and write
|
|
|
|
7F190000
|
unkown image
|
page readonly
|
|
|
|
12EC4000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
7FF557217000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0D70000
|
unkown image
|
page readonly
|
|
|
|
7DF5778F0000
|
unkown image
|
page readonly
|
|
|
|
8E3000
|
unkown image
|
page readonly
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
7FF569A1A000
|
unkown image
|
page readonly
|
|
|
|
C3AA000
|
unkown
|
page read and write
|
|
|
|
7F9C0000
|
unkown image
|
page readonly
|
|
|
|
7FA90000
|
unkown image
|
page readonly
|
|
|
|
2A4F000
|
unkown image
|
page readonly
|
|
|
|
1532C000
|
unkown
|
page read and write
|
|
|
|
2F27EA55000
|
unkown
|
page read and write
|
|
|
|
DD5D47D000
|
stack
|
page read and write
|
|
|
|
2885C2E0000
|
unkown image
|
page readonly
|
|
|
|
FAED9F7000
|
stack
|
page read and write
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
283A000
|
heap private
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
28861990000
|
unkown
|
page read and write
|
|
|
|
7FF508801000
|
unkown image
|
page readonly
|
|
|
|
DD5D27A000
|
stack
|
page read and write
|
|
|
|
2C3BCF50000
|
unkown
|
page read and write
|
|
|
|
7FF4F605D000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2A7B000
|
unkown image
|
page readonly
|
|
|
|
E0B6000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown image
|
page readonly
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
ECB547F000
|
stack
|
page read and write
|
|
|
|
325B000
|
unkown
|
page read and write
|
|
|
|
7FF4F5961000
|
unkown image
|
page readonly
|
|
|
|
7F1A2000
|
unkown image
|
page readonly
|
|
|
|
2C3BD163000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
F4F3000
|
unkown
|
page read and write
|
|
|
|
DD5CDFF000
|
stack
|
page read and write
|
|
|
|
78AE000
|
stack
|
page read and write
|
|
|
|
3527000
|
heap private
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC82000
|
unkown image
|
page readonly
|
|
|
|
1E40000
|
unkown
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
2A7C000
|
unkown
|
page read and write
|
|
|
|
32E8000
|
unkown
|
page read and write
|
|
|
|
21D0AC72000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
7FF4F5AB3000
|
unkown image
|
page readonly
|
|
|
|
15613000
|
unkown
|
page read and write
|
|
|
|
41B0000
|
unkown image
|
page write copy
|
|
|
|
690D4BB000
|
unkown
|
page read and write
|
|
|
|
2C3BC26F000
|
unkown
|
page read and write
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
2370000
|
unkown
|
page read and write
|
|
|
|
34AE000
|
stack
|
page read and write
|
|
|
|
7FF51F675000
|
unkown image
|
page readonly
|
|
|
|
2D85000
|
unkown
|
page read and write
|
|
|
|
2830000
|
heap private
|
page read and write
|
|
|
|
2D71000
|
unkown
|
page read and write
|
|
|
|
28861CA2000
|
unkown
|
page read and write
|
|
|
|
1A742100000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB90000
|
unkown
|
page read and write
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
15526000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC92000
|
unkown image
|
page readonly
|
|
|
|
12F1C000
|
unkown
|
page read and write
|
|
|
|
7FF557267000
|
unkown image
|
page readonly
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
2C3BC950000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
2A58000
|
unkown
|
page read and write
|
|
|
|
12ED6000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2F27EA3C000
|
unkown
|
page read and write
|
|
|
|
2885C513000
|
unkown
|
page read and write
|
|
|
|
2C3BC24E000
|
unkown
|
page read and write
|
|
|
|
15703000
|
unkown
|
page read and write
|
|
|
|
2C3BC6D0000
|
unkown image
|
page readonly
|
|
|
|
E098000
|
unkown
|
page read and write
|
|
|
|
156B3000
|
unkown
|
page read and write
|
|
|
|
263B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2CE7000
|
unkown image
|
page readonly
|
|
|
|
F7D000
|
unkown image
|
page readonly
|
|
|
|
246A000
|
unkown image
|
page readonly
|
|
|
|
12F97000
|
unkown
|
page read and write
|
|
|
|
28861AD0000
|
unkown
|
page read and write
|
|
|
|
7DF52D6D2000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
2C3BCB86000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
2466000
|
unkown image
|
page readonly
|
|
|
|
7F610000
|
unkown image
|
page readonly
|
|
|
|
7FF4F607B000
|
unkown image
|
page readonly
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
2436000
|
unkown image
|
page readonly
|
|
|
|
2F27EA87000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
2333000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
E0C9000
|
unkown
|
page read and write
|
|
|
|
155C1000
|
unkown
|
page read and write
|
|
|
|
2B49000
|
unkown image
|
page readonly
|
|
|
|
12D8F000
|
unkown
|
page read and write
|
|
|
|
1554A000
|
unkown
|
page read and write
|
|
|
|
7FF508753000
|
unkown image
|
page readonly
|
|
|
|
7FF51F932000
|
unkown image
|
page readonly
|
|
|
|
C57E000
|
unkown
|
page read and write
|
|
|
|
15050000
|
unkown
|
page read and write
|
|
|
|
2AF6000
|
unkown image
|
page readonly
|
|
|
|
2C3BC180000
|
unkown image
|
page read and write
|
|
|
|
2F27EA51000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
heap private
|
page read and write
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
15647000
|
unkown
|
page read and write
|
|
|
|
3241000
|
unkown
|
page read and write
|
|
|
|
E52C000
|
stack
|
page read and write
|
|
|
|
1A741E16000
|
heap default
|
page read and write
|
|
|
|
E0AE000
|
unkown
|
page read and write
|
|
|
|
1533E000
|
unkown
|
page read and write
|
|
|
|
7FF51F1EB000
|
unkown image
|
page readonly
|
|
|
|
7DF5778F0000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
7F1A2000
|
unkown image
|
page readonly
|
|
|
|
15C832D8000
|
unkown
|
page read and write
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
683C0000
|
unkown image
|
page read and write
|
|
|
|
7FF5B2C77000
|
unkown image
|
page readonly
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
7DF503EF2000
|
unkown image
|
page readonly
|
|
|
|
330C000
|
unkown
|
page read and write
|
|
|
|
2290000
|
heap default
|
page read and write
|
|
|
|
2AFC000
|
unkown image
|
page readonly
|
|
|
|
E074000
|
unkown
|
page read and write
|
|
|
|
238D000
|
unkown
|
page read and write
|
|
|
|
15C83A50000
|
unkown image
|
page readonly
|
|
|
|
2C3BC256000
|
unkown
|
page read and write
|
|
|
|
F439000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
2C3BD002000
|
unkown
|
page read and write
|
|
|
|
303A000
|
heap private
|
page read and write
|
|
|
|
7FF51F82C000
|
unkown image
|
page readonly
|
|
|
|
D3C0000
|
unkown image
|
page readonly
|
|
|
|
15647000
|
unkown
|
page read and write
|
|
|
|
2885CD59000
|
unkown
|
page read and write
|
|
|
|
DFD0000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC80000
|
unkown image
|
page readonly
|
|
|
|
1644A000
|
unkown image
|
page read and write
|
|
|
|
15312000
|
unkown
|
page read and write
|
|
|
|
2D68000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
D4D1000
|
unkown
|
page read and write
|
|
|
|
15AF6000
|
unkown
|
page read and write
|
|
|
|
15567000
|
unkown
|
page read and write
|
|
|
|
DD5D77F000
|
stack
|
page read and write
|
|
|
|
D4DB000
|
unkown
|
page read and write
|
|
|
|
F2F0000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
15C83210000
|
unkown image
|
page readonly
|
|
|
|
2A50000
|
unkown image
|
page readonly
|
|
|
|
2F27E8F0000
|
unkown image
|
page readonly
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
21EA2870000
|
unkown
|
page read and write
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
21D0000
|
stack
|
page read and write
|
|
|
|
E072000
|
unkown
|
page read and write
|
|
|
|
DFE0000
|
unkown
|
page read and write
|
|
|
|
2F27E8C0000
|
unkown image
|
page readonly
|
|
|
|
15D80000
|
unkown image
|
page readonly
|
|
|
|
206D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F627A000
|
unkown image
|
page readonly
|
|
|
|
2B7B000
|
unkown image
|
page readonly
|
|
|
|
7FF5570C0000
|
unkown image
|
page readonly
|
|
|
|
12F45000
|
unkown
|
page read and write
|
|
|
|
2C98000
|
unkown
|
page read and write
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
7FF51F1F5000
|
unkown image
|
page readonly
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown image
|
page readonly
|
|
|
|
113DBED000
|
stack
|
page read and write
|
|
|
|
32C0000
|
heap default
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
7F1A2000
|
unkown image
|
page readonly
|
|
|
|
7FF51F94A000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
7FF569BFA000
|
unkown image
|
page readonly
|
|
|
|
2B36000
|
unkown image
|
page readonly
|
|
|
|
15C831D0000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown image
|
page readonly
|
|
|
|
2C3BC24F000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
E3E0000
|
heap private
|
page read and write
|
|
|
|
E08C000
|
unkown
|
page read and write
|
|
|
|
F434000
|
unkown
|
page read and write
|
|
|
|
7DF5778E2000
|
unkown image
|
page readonly
|
|
|
|
E0B3000
|
unkown
|
page read and write
|
|
|
|
2A3A000
|
heap default
|
page read and write
|
|
|
|
2C3BCB6F000
|
unkown
|
page read and write
|
|
|
|
7FF51F99E000
|
unkown image
|
page readonly
|
|
|
|
7DF577900000
|
unkown image
|
page readonly
|
|
|
|
291E000
|
unkown image
|
page readonly
|
|
|
|
2885C413000
|
unkown
|
page read and write
|
|
|
|
1166E000
|
stack
|
page read and write
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
1682B000
|
unkown image
|
page read and write
|
|
|
|
DD5D0FE000
|
stack
|
page read and write
|
|
|
|
21EA287E000
|
unkown
|
page read and write
|
|
|
|
21D0AD02000
|
unkown
|
page read and write
|
|
|
|
158FF000
|
unkown
|
page read and write
|
|
|
|
21D0AC13000
|
unkown
|
page read and write
|
|
|
|
32F1000
|
unkown
|
page read and write
|
|
|
|
12E6A000
|
unkown
|
page read and write
|
|
|
|
1554C000
|
unkown
|
page read and write
|
|
|
|
24C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FBF000
|
unkown image
|
page readonly
|
|
|
|
1559F000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2A58000
|
unkown
|
page read and write
|
|
|
|
2AEB000
|
unkown image
|
page readonly
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
322E000
|
stack
|
page read and write
|
|
|
|
7FF50874B000
|
unkown image
|
page readonly
|
|
|
|
15789000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
7DF564F60000
|
unkown image
|
page readonly
|
|
|
|
7FF569C81000
|
unkown image
|
page readonly
|
|
|
|
7DF503EF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5571F9000
|
unkown image
|
page readonly
|
|
|
|
2B58000
|
unkown image
|
page readonly
|
|
|
|
12BE0000
|
unkown
|
page read and write
|
|
|
|
12F7D000
|
unkown
|
page read and write
|
|
|
|
21EA284C000
|
unkown
|
page read and write
|
|
|
|
D4C6000
|
unkown
|
page read and write
|
|
|
|
7FF5ACE7B000
|
unkown image
|
page readonly
|
|
|
|
1555B000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
2AD0000
|
unkown image
|
page readonly
|
|
|
|
7DF564F52000
|
unkown image
|
page readonly
|
|
|
|
2C3BC2DF000
|
unkown
|
page read and write
|
|
|
|
2A21000
|
unkown image
|
page readonly
|
|
|
|
7FF4F609F000
|
unkown image
|
page readonly
|
|
|
|
F432000
|
unkown
|
page read and write
|
|
|
|
7FF5AD011000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF57000
|
unkown image
|
page readonly
|
|
|
|
DD5D07E000
|
stack
|
page read and write
|
|
|
|
15343000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
2A5C000
|
unkown
|
page read and write
|
|
|
|
303A000
|
unkown
|
page read and write
|
|
|
|
D490000
|
unkown
|
page read and write
|
|
|
|
2C3BCB7D000
|
unkown
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
7FF557171000
|
unkown image
|
page readonly
|
|
|
|
1A741F00000
|
unkown image
|
page readonly
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2A61000
|
unkown
|
page read and write
|
|
|
|
7FF569C7A000
|
unkown image
|
page readonly
|
|
|
|
2C3BCBCD000
|
unkown
|
page read and write
|
|
|
|
7FF508720000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB6F000
|
unkown
|
page read and write
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
2717000
|
stack
|
page read and write
|
|
|
|
E019000
|
unkown
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
12F16000
|
unkown
|
page read and write
|
|
|
|
7FF51F792000
|
unkown image
|
page readonly
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
7F192000
|
unkown image
|
page readonly
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
2D6C000
|
unkown
|
page read and write
|
|
|
|
1534B000
|
unkown
|
page read and write
|
|
|
|
2C3BC2C3000
|
unkown
|
page read and write
|
|
|
|
E0C2000
|
unkown
|
page read and write
|
|
|
|
12EEA000
|
unkown
|
page read and write
|
|
|
|
15715000
|
unkown
|
page read and write
|
|
|
|
157A9000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
C258000
|
unkown
|
page read and write
|
|
|
|
683C9000
|
unkown image
|
page readonly
|
|
|
|
2C3BC227000
|
unkown
|
page read and write
|
|
|
|
15634000
|
unkown
|
page read and write
|
|
|
|
7DF5778E0000
|
unkown image
|
page readonly
|
|
|
|
2C3BC28A000
|
unkown
|
page read and write
|
|
|
|
7FF5570BD000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6274000
|
unkown image
|
page readonly
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
16438000
|
unkown image
|
page read and write
|
|
|
|
21D0AC4D000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
28861C1D000
|
unkown
|
page read and write
|
|
|
|
7FF5B3063000
|
unkown image
|
page readonly
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
2B2B000
|
unkown image
|
page readonly
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
7FF4F5D71000
|
unkown image
|
page readonly
|
|
|
|
1A741E2B000
|
unkown
|
page read and write
|
|
|
|
ECB577F000
|
stack
|
page read and write
|
|
|
|
12E6D000
|
unkown
|
page read and write
|
|
|
|
2C3BD000000
|
unkown
|
page read and write
|
|
|
|
7DF52D6E2000
|
unkown image
|
page readonly
|
|
|
|
15C831E0000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
7FF4F6291000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB88000
|
unkown
|
page read and write
|
|
|
|
7FF4F61EE000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
7FF556F75000
|
unkown image
|
page readonly
|
|
|
|
ECB5AFF000
|
stack
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
156D9000
|
unkown
|
page read and write
|
|
|
|
7FF5B2FD2000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
DCD0000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
2C3BCB13000
|
unkown
|
page read and write
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
7FF4F5D77000
|
unkown image
|
page readonly
|
|
|
|
3069000
|
unkown
|
page read and write
|
|
|
|
1A741E11000
|
unkown
|
page read and write
|
|
|
|
2ABB000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB6D000
|
unkown
|
page read and write
|
|
|
|
28861850000
|
unkown
|
page read and write
|
|
|
|
E0B2000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF29000
|
unkown image
|
page readonly
|
|
|
|
C1D9000
|
unkown
|
page read and write
|
|
|
|
E0BA000
|
unkown
|
page read and write
|
|
|
|
7FF5B28D5000
|
unkown image
|
page readonly
|
|
|
|
31B0000
|
unkown image
|
page readonly
|
|
|
|
12D30000
|
unkown
|
page read and write
|
|
|
|
F500000
|
unkown
|
page read and write
|
|
|
|
EFEC000
|
stack
|
page read and write
|
|
|
|
C5CA000
|
unkown
|
page read and write
|
|
|
|
2990000
|
heap private
|
page read and write
|
|
|
|
2885CA70000
|
unkown
|
page read and write
|
|
|
|
D9AE000
|
stack
|
page read and write
|
|
|
|
2C20000
|
heap default
|
page read and write
|
|
|
|
F42D000
|
unkown
|
page read and write
|
|
|
|
7FF51F825000
|
unkown image
|
page readonly
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
7FF557243000
|
unkown image
|
page readonly
|
|
|
|
2C3BCBD9000
|
unkown
|
page read and write
|
|
|
|
3280000
|
unkown
|
page read and write
|
|
|
|
2C3BC1A0000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
3040000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
2797000
|
heap private
|
page read and write
|
|
|
|
2943000
|
unkown image
|
page readonly
|
|
|
|
38B0000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB75000
|
unkown
|
page read and write
|
|
|
|
2680000
|
unkown image
|
page readonly
|
|
|
|
2E70000
|
unkown image
|
page readonly
|
|
|
|
157B4000
|
unkown
|
page read and write
|
|
|
|
31D4000
|
heap private
|
page read and write
|
|
|
|
7FF5ACF9D000
|
unkown image
|
page readonly
|
|
|
|
F432000
|
unkown
|
page read and write
|
|
|
|
FAED8FB000
|
stack
|
page read and write
|
|
|
|
7F9B2000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
2514000
|
unkown image
|
page readonly
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
7DF52D6F0000
|
unkown image
|
page readonly
|
|
|
|
24AB000
|
unkown image
|
page readonly
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
7FF55714B000
|
unkown image
|
page readonly
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
156D3000
|
unkown
|
page read and write
|
|
|
|
2885CC00000
|
unkown
|
page read and write
|
|
|
|
35C0000
|
unkown image
|
page readonly
|
|
|
|
2F27EA6B000
|
unkown
|
page read and write
|
|
|
|
1A741E3F000
|
unkown
|
page read and write
|
|
|
|
236D000
|
unkown image
|
page readonly
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
2F27EA4A000
|
unkown
|
page read and write
|
|
|
|
2F27EA13000
|
unkown
|
page read and write
|
|
|
|
15E50000
|
unkown
|
page read and write
|
|
|
|
2C3BC23C000
|
unkown
|
page read and write
|
|
|
|
7FF51F95E000
|
unkown image
|
page readonly
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
3350000
|
heap default
|
page read and write
|
|
|
|
F41C000
|
unkown
|
page read and write
|
|
|
|
216B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B30E2000
|
unkown image
|
page readonly
|
|
|
|
1A741D40000
|
unkown
|
page read and write
|
|
|
|
2885CB80000
|
unkown image
|
page read and write
|
|
|
|
214B000
|
unkown image
|
page readonly
|
|
|
|
18CD0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F22000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3030000
|
unkown image
|
page readonly
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
2C3BCB6A000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
12EB4000
|
unkown
|
page read and write
|
|
|
|
7FF56941F000
|
unkown image
|
page readonly
|
|
|
|
2CA8000
|
unkown
|
page read and write
|
|
|
|
21D0B202000
|
unkown
|
page read and write
|
|
|
|
2BBE000
|
stack
|
page read and write
|
|
|
|
D2AD000
|
stack
|
page read and write
|
|
|
|
7FF50870D000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB91000
|
unkown
|
page read and write
|
|
|
|
2C3BC2A5000
|
unkown
|
page read and write
|
|
|
|
E0B6000
|
unkown
|
page read and write
|
|
|
|
2C9C000
|
unkown
|
page read and write
|
|
|
|
E098000
|
unkown
|
page read and write
|
|
|
|
21D0AC00000
|
unkown
|
page read and write
|
|
|
|
7FA72000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
2C3BC229000
|
unkown
|
page read and write
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
D5EE000
|
stack
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
D480000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6269000
|
unkown image
|
page readonly
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
21EA283C000
|
unkown
|
page read and write
|
|
|
|
156C3000
|
unkown
|
page read and write
|
|
|
|
1D90000
|
unkown image
|
page readonly
|
|
|
|
690DAF7000
|
stack
|
page read and write
|
|
|
|
E04F000
|
unkown
|
page read and write
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
2C3BC1A0000
|
unkown image
|
page readonly
|
|
|
|
82FE07F000
|
stack
|
page read and write
|
|
|
|
690D5BE000
|
stack
|
page read and write
|
|
|
|
2180000
|
stack
|
page read and write
|
|
|
|
267B000
|
unkown
|
page read and write
|
|
|
|
15C83635000
|
heap private
|
page read and write
|
|
|
|
E093000
|
unkown
|
page read and write
|
|
|
|
33E0000
|
heap default
|
page read and write
|
|
|
|
2370000
|
unkown
|
page read and write
|
|
|
|
296E000
|
stack
|
page read and write
|
|
|
|
2B60000
|
unkown image
|
page readonly
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC92000
|
unkown image
|
page readonly
|
|
|
|
2885D290000
|
unkown image
|
page read and write
|
|
|
|
2C3BCB8E000
|
unkown
|
page read and write
|
|
|
|
1A741C10000
|
unkown image
|
page readonly
|
|
|
|
249D000
|
unkown image
|
page readonly
|
|
|
|
F300000
|
unkown
|
page read and write
|
|
|
|
DD5D2FF000
|
stack
|
page read and write
|
|
|
|
28E7000
|
unkown image
|
page readonly
|
|
|
|
7FF508716000
|
unkown image
|
page readonly
|
|
|
|
21EA284F000
|
unkown
|
page read and write
|
|
|
|
34EE000
|
stack
|
page read and write
|
|
|
|
191A5000
|
unkown
|
page read and write
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
C21B000
|
unkown
|
page read and write
|
|
|
|
3220000
|
heap default
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
690DDFF000
|
stack
|
page read and write
|
|
|
|
1A741D80000
|
unkown image
|
page readonly
|
|
|
|
7FF555B91000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF6B000
|
unkown image
|
page readonly
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
7FF51F941000
|
unkown image
|
page readonly
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2713000
|
stack
|
page read and write
|
|
|
|
12EBF000
|
unkown
|
page read and write
|
|
|
|
2C13000
|
unkown image
|
page readonly
|
|
|
|
7DF5BACA0000
|
unkown image
|
page readonly
|
|
|
|
2885D263000
|
unkown
|
page read and write
|
|
|
|
2C3BCB84000
|
unkown
|
page read and write
|
|
|
|
2820000
|
unkown
|
page read and write
|
|
|
|
15C832CF000
|
heap default
|
page read and write
|
|
|
|
7DF42B5A0000
|
unkown image
|
page readonly
|
|
|
|
2D50000
|
unkown image
|
page read and write
|
|
|
|
2C3BCB7C000
|
unkown
|
page read and write
|
|
|
|
29D4000
|
unkown
|
page read and write
|
|
|
|
12D8F000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E56000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF4E000
|
unkown image
|
page readonly
|
|
|
|
DCB0000
|
unkown
|
page read and write
|
|
|
|
15C83270000
|
unkown image
|
page readonly
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
15704000
|
unkown
|
page read and write
|
|
|
|
1505C000
|
stack
|
page read and write
|
|
|
|
2AAD000
|
unkown image
|
page readonly
|
|
|
|
7F3D0000
|
unkown image
|
page readonly
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
7FF5087D9000
|
unkown image
|
page readonly
|
|
|
|
158FE000
|
unkown
|
page read and write
|
|
|
|
1E3C000
|
unkown
|
page read and write
|
|
|
|
12E9B000
|
unkown
|
page read and write
|
|
|
|
C14D000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
2885D450000
|
unkown image
|
page readonly
|
|
|
|
2F27E910000
|
heap default
|
page read and write
|
|
|
|
2A72000
|
unkown
|
page read and write
|
|
|
|
2C3BD002000
|
unkown
|
page read and write
|
|
|
|
12E78000
|
unkown
|
page read and write
|
|
|
|
117B0000
|
unkown
|
page read and write
|
|
|
|
2B5B000
|
unkown image
|
page readonly
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
DD5C76E000
|
stack
|
page read and write
|
|
|
|
21D0AC3C000
|
unkown
|
page read and write
|
|
|
|
2F49000
|
unkown
|
page read and write
|
|
|
|
ECB54FE000
|
stack
|
page read and write
|
|
|
|
F457000
|
unkown
|
page read and write
|
|
|
|
7FF5087FA000
|
unkown image
|
page readonly
|
|
|
|
15DF0000
|
unkown
|
page read and write
|
|
|
|
7DF4BEC40000
|
unkown image
|
page readonly
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
12E9B000
|
unkown
|
page read and write
|
|
|
|
15C83304000
|
heap default
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
2690000
|
unkown image
|
page readonly
|
|
|
|
7FF557227000
|
unkown image
|
page readonly
|
|
|
|
3730000
|
unkown image
|
page readonly
|
|
|
|
7FF4F61B0000
|
unkown image
|
page readonly
|
|
|
|
12E6D000
|
unkown
|
page read and write
|
|
|
|
7FF50877A000
|
unkown image
|
page readonly
|
|
|
|
E0C5000
|
unkown
|
page read and write
|
|
|
|
2885CD59000
|
unkown
|
page read and write
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
12E78000
|
unkown
|
page read and write
|
|
|
|
C3C6000
|
unkown
|
page read and write
|
|
|
|
E0BD000
|
unkown
|
page read and write
|
|
|
|
F12D000
|
stack
|
page read and write
|
|
|
|
325E000
|
stack
|
page read and write
|
|
|
|
2C3BCBAB000
|
unkown
|
page read and write
|
|
|
|
12F20000
|
unkown
|
page read and write
|
|
|
|
2C3BCB6A000
|
unkown
|
page read and write
|
|
|
|
7DF52D6E2000
|
unkown image
|
page readonly
|
|
|
|
250F000
|
unkown image
|
page readonly
|
|
|
|
2F70000
|
unkown image
|
page readonly
|
|
|
|
7F622000
|
unkown image
|
page readonly
|
|
|
|
C271000
|
unkown
|
page read and write
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3019000
|
unkown image
|
page readonly
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
21D0AC02000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
21EA3002000
|
unkown
|
page read and write
|
|
|
|
2548000
|
unkown image
|
page readonly
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
15220000
|
unkown
|
page read and write
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
D82F000
|
stack
|
page read and write
|
|
|
|
14DE0000
|
heap private
|
page read and write
|
|
|
|
2F27E8C0000
|
unkown image
|
page readonly
|
|
|
|
7F1A2000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
27FA000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
F4E6000
|
unkown
|
page read and write
|
|
|
|
15623000
|
unkown
|
page read and write
|
|
|
|
12F8D000
|
unkown
|
page read and write
|
|
|
|
12F60000
|
unkown
|
page read and write
|
|
|
|
1176E000
|
stack
|
page read and write
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
2885D260000
|
unkown
|
page read and write
|
|
|
|
C464000
|
unkown
|
page read and write
|
|
|
|
20B9000
|
unkown image
|
page readonly
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
7FF5AD021000
|
unkown image
|
page readonly
|
|
|
|
C218000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
7DF5C0D80000
|
unkown image
|
page readonly
|
|
|
|
15645000
|
unkown
|
page read and write
|
|
|
|
7FF569489000
|
unkown image
|
page readonly
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
288619A0000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
7DF4B8B50000
|
unkown image
|
page readonly
|
|
|
|
12F16000
|
unkown
|
page read and write
|
|
|
|
2C3BCB96000
|
unkown
|
page read and write
|
|
|
|
14DDD000
|
stack
|
page read and write
|
|
|
|
3514000
|
heap private
|
page read and write
|
|
|
|
2885C310000
|
heap default
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
155B2000
|
unkown
|
page read and write
|
|
|
|
3520000
|
heap private
|
page read and write
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
3840000
|
unkown image
|
page readonly
|
|
|
|
7FA80000
|
unkown image
|
page readonly
|
|
|
|
15C83639000
|
heap private
|
page read and write
|
|
|
|
7F4E0000
|
unkown image
|
page readonly
|
|
|
|
29FE000
|
unkown image
|
page readonly
|
|
|
|
16453000
|
unkown image
|
page read and write
|
|
|
|
352A000
|
heap private
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
F3E8000
|
unkown
|
page read and write
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
7FF557175000
|
unkown image
|
page readonly
|
|
|
|
21EA2710000
|
unkown image
|
page readonly
|
|
|
|
2F27EA00000
|
unkown
|
page read and write
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
237E000
|
unkown
|
page read and write
|
|
|
|
7FF51F5DE000
|
unkown image
|
page readonly
|
|
|
|
296E000
|
unkown image
|
page readonly
|
|
|
|
20DE000
|
unkown
|
page read and write
|
|
|
|
12FD7000
|
unkown
|
page read and write
|
|
|
|
7FF55726D000
|
unkown image
|
page readonly
|
|
|
|
3F50000
|
unkown image
|
page readonly
|
|
|
|
2B58000
|
unkown image
|
page readonly
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
7FF51F9EA000
|
unkown image
|
page readonly
|
|
|
|
15C835D0000
|
unkown image
|
page readonly
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
6A7E47B000
|
unkown
|
page read and write
|
|
|
|
12E78000
|
unkown
|
page read and write
|
|
|
|
2885C800000
|
unkown image
|
page readonly
|
|
|
|
7FF569BD2000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
2C3BCB99000
|
unkown
|
page read and write
|
|
|
|
7FF5B27DB000
|
unkown image
|
page readonly
|
|
|
|
15790000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown image
|
page readonly
|
|
|
|
7FF51F754000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB78000
|
unkown
|
page read and write
|
|
|
|
215B000
|
unkown image
|
page readonly
|
|
|
|
82FE0F9000
|
stack
|
page read and write
|
|
|
|
2C3BCB80000
|
unkown
|
page read and write
|
|
|
|
2A2E000
|
unkown image
|
page readonly
|
|
|
|
7DF503F00000
|
unkown image
|
page readonly
|
|
|
|
28861C2B000
|
unkown
|
page read and write
|
|
|
|
7FDB2000
|
unkown image
|
page readonly
|
|
|
|
24A4000
|
unkown image
|
page readonly
|
|
|
|
7FF4F60FC000
|
unkown image
|
page readonly
|
|
|
|
82FE17E000
|
stack
|
page read and write
|
|
|
|
15613000
|
unkown
|
page read and write
|
|
|
|
E0D0000
|
heap private
|
page read and write
|
|
|
|
2C3BC213000
|
unkown
|
page read and write
|
|
|
|
2C3BCB78000
|
unkown
|
page read and write
|
|
|
|
15E80000
|
unkown
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
D4E1000
|
unkown
|
page read and write
|
|
|
|
12D27000
|
unkown
|
page read and write
|
|
|
|
15E90000
|
unkown
|
page read and write
|
|
|
|
15705000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E54000
|
unkown image
|
page readonly
|
|
|
|
2C0C000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
2A6B000
|
unkown
|
page read and write
|
|
|
|
5B10000
|
unkown image
|
page readonly
|
|
|
|
28861870000
|
unkown
|
page read and write
|
|
|
|
7FF557213000
|
unkown image
|
page readonly
|
|
|
|
15AB6000
|
unkown
|
page read and write
|
|
|
|
683C6000
|
unkown image
|
page write copy
|
|
|
|
32A0000
|
heap default
|
page read and write
|
|
|
|
C222000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
24C6000
|
unkown image
|
page readonly
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
15C832DF000
|
unkown
|
page read and write
|
|
|
|
2358000
|
heap default
|
page read and write
|
|
|
|
2B55000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
82FDD7F000
|
stack
|
page read and write
|
|
|
|
2BEB000
|
unkown image
|
page readonly
|
|
|
|
D6EF000
|
stack
|
page read and write
|
|
|
|
7FF5572E1000
|
unkown image
|
page readonly
|
|
|
|
7DF516462000
|
unkown image
|
page readonly
|
|
|
|
DD5C7EE000
|
stack
|
page read and write
|
|
|
|
2790000
|
unkown image
|
page read and write
|
|
|
|
2885C429000
|
unkown
|
page read and write
|
|
|
|
2C90000
|
unkown
|
page read and write
|
|
|
|
1578F000
|
unkown
|
page read and write
|
|
|
|
E0C9000
|
unkown
|
page read and write
|
|
|
|
2885C49D000
|
unkown
|
page read and write
|
|
|
|
7FF569C59000
|
unkown image
|
page readonly
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
7DF503F02000
|
unkown image
|
page readonly
|
|
|
|
20CB000
|
unkown image
|
page readonly
|
|
|
|
7FA82000
|
unkown image
|
page readonly
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
15C83200000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EC1000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
2CB5000
|
unkown
|
page read and write
|
|
|
|
2C3BCB74000
|
unkown
|
page read and write
|
|
|
|
7FF51F8F1000
|
unkown image
|
page readonly
|
|
|
|
7FF51F983000
|
unkown image
|
page readonly
|
|
|
|
7FF569482000
|
unkown image
|
page readonly
|
|
|
|
FFA41000
|
unkown
|
page execute read
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
2C3BC2E5000
|
unkown
|
page read and write
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
2F27EC00000
|
unkown image
|
page readonly
|
|
|
|
156C4000
|
unkown
|
page read and write
|
|
|
|
45F0000
|
heap private
|
page read and write
|
|
|
|
E083000
|
unkown
|
page read and write
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
7DF401DC0000
|
unkown image
|
page readonly
|
|
|
|
2885C48B000
|
unkown
|
page read and write
|
|
|
|
11B00000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
7DF4757B0000
|
unkown image
|
page readonly
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
12EC4000
|
unkown
|
page read and write
|
|
|
|
E083000
|
unkown
|
page read and write
|
|
|
|
21EA2800000
|
unkown
|
page read and write
|
|
|
|
14F10000
|
unkown
|
page read and write
|
|
|
|
2C3BC302000
|
unkown
|
page read and write
|
|
|
|
2810000
|
unkown image
|
page readonly
|
|
|
|
3262000
|
unkown
|
page read and write
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
2A2A000
|
unkown image
|
page readonly
|
|
|
|
12C91000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EE0000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
2F27EB13000
|
unkown
|
page read and write
|
|
|
|
D551000
|
unkown
|
page read and write
|
|
|
|
1554A000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F619D000
|
unkown image
|
page readonly
|
|
|
|
FFB90000
|
unkown image
|
page readonly
|
|
|
|
2885D480000
|
unkown image
|
page readonly
|
|
|
|
DE0D000
|
stack
|
page read and write
|
|
|
|
156EB000
|
unkown
|
page read and write
|
|
|
|
C6EA000
|
unkown
|
page read and write
|
|
|
|
7FF51F8E4000
|
unkown image
|
page readonly
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
DC70000
|
unkown image
|
page read and write
|
|
|
|
FFB72000
|
unkown image
|
page readonly
|
|
|
|
7FF5572F1000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2BF7000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown
|
page read and write
|
|
|
|
7FF51F78A000
|
unkown image
|
page readonly
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
2C3BC253000
|
unkown
|
page read and write
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB1D000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
2DFB000
|
unkown
|
page read and write
|
|
|
|
12F78000
|
unkown
|
page read and write
|
|
|
|
7FF55723B000
|
unkown image
|
page readonly
|
|
|
|
E073000
|
unkown
|
page read and write
|
|
|
|
156D9000
|
unkown
|
page read and write
|
|
|
|
2A36000
|
unkown image
|
page readonly
|
|
|
|
12F8D000
|
unkown
|
page read and write
|
|
|
|
15D40000
|
heap private
|
page read and write
|
|
|
|
7FF51F768000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6115000
|
unkown image
|
page readonly
|
|
|
|
12EF9000
|
unkown
|
page read and write
|
|
|
|
12D34000
|
unkown
|
page read and write
|
|
|
|
7FF4F61E3000
|
unkown image
|
page readonly
|
|
|
|
FFA66000
|
unkown
|
page execute read
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
15AEA000
|
unkown
|
page read and write
|
|
|
|
7FF508041000
|
unkown image
|
page readonly
|
|
|
|
82FDCFA000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9F000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
heap default
|
page read and write
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
288619B0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D95000
|
unkown image
|
page readonly
|
|
|
|
7FDE000
|
stack
|
page read and write
|
|
|
|
7FF507FC5000
|
unkown image
|
page readonly
|
|
|
|
7FF5570DB000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB93000
|
unkown
|
page read and write
|
|
|
|
DCE0000
|
unkown
|
page read and write
|
|
|
|
7FF51F7CF000
|
unkown image
|
page readonly
|
|
|
|
15AF6000
|
unkown
|
page read and write
|
|
|
|
2C3BC1C0000
|
unkown image
|
page readonly
|
|
|
|
28861860000
|
unkown
|
page read and write
|
|
|
|
21D0AC80000
|
unkown
|
page read and write
|
|
|
|
250B000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB77000
|
unkown
|
page read and write
|
|
|
|
156ED000
|
unkown
|
page read and write
|
|
|
|
7DF516480000
|
unkown image
|
page readonly
|
|
|
|
15EA0000
|
unkown
|
page read and write
|
|
|
|
28861970000
|
unkown
|
page read and write
|
|
|
|
2A5D000
|
unkown
|
page read and write
|
|
|
|
15943000
|
unkown
|
page read and write
|
|
|
|
1593C000
|
unkown
|
page read and write
|
|
|
|
7DF52D6E0000
|
unkown image
|
page readonly
|
|
|
|
15543000
|
unkown
|
page read and write
|
|
|
|
2790000
|
heap private
|
page read and write
|
|
|
|
E0C2000
|
unkown
|
page read and write
|
|
|
|
2C3BC29E000
|
unkown
|
page read and write
|
|
|
|
15F00000
|
heap private
|
page read and write
|
|
|
|
E0C8000
|
unkown
|
page read and write
|
|
|
|
7FF4F6060000
|
unkown image
|
page readonly
|
|
|
|
12D32000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F91000
|
unkown image
|
page readonly
|
|
|
|
3418000
|
unkown
|
page read and write
|
|
|
|
7FF5AD004000
|
unkown image
|
page readonly
|
|
|
|
2240000
|
heap default
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
2C98000
|
unkown
|
page read and write
|
|
|
|
1533F000
|
unkown
|
page read and write
|
|
|
|
157BA000
|
unkown
|
page read and write
|
|
|
|
7FF51F7C1000
|
unkown image
|
page readonly
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E1B000
|
unkown image
|
page readonly
|
|
|
|
16350000
|
unkown
|
page read and write
|
|
|
|
7FF4F619F000
|
unkown image
|
page readonly
|
|
|
|
28861C88000
|
unkown
|
page read and write
|
|
|
|
7DF564F62000
|
unkown image
|
page readonly
|
|
|
|
7FF51F990000
|
unkown image
|
page readonly
|
|
|
|
3FA0000
|
heap private
|
page read and write
|
|
|
|
306D000
|
unkown
|
page read and write
|
|
|
|
7FF51F953000
|
unkown image
|
page readonly
|
|
|
|
12EBA000
|
unkown
|
page read and write
|
|
|
|
12C7D000
|
unkown
|
page read and write
|
|
|
|
21EA26D0000
|
unkown image
|
page read and write
|
|
|
|
7FF5B2CE4000
|
unkown image
|
page readonly
|
|
|
|
2885C2F0000
|
unkown image
|
page readonly
|
|
|
|
2C3BD06A000
|
unkown
|
page read and write
|
|
|
|
2C3BC258000
|
unkown
|
page read and write
|
|
|
|
2461000
|
unkown image
|
page readonly
|
|
|
|
DF20000
|
unkown image
|
page readonly
|
|
|
|
15AF6000
|
unkown
|
page read and write
|
|
|
|
7FF51F5D7000
|
unkown image
|
page readonly
|
|
|
|
21D0B000000
|
unkown image
|
page readonly
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
15310000
|
unkown
|
page read and write
|
|
|
|
7FF5ACDD1000
|
unkown image
|
page readonly
|
|
|
|
15220000
|
unkown
|
page read and write
|
|
|
|
28861A90000
|
unkown
|
page read and write
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
15788000
|
unkown
|
page read and write
|
|
|
|
2885C46E000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown image
|
page readonly
|
|
|
|
2B08000
|
unkown image
|
page readonly
|
|
|
|
23F1000
|
unkown image
|
page readonly
|
|
|
|
7FF51F9C2000
|
unkown image
|
page readonly
|
|
|
|
2C3BC313000
|
unkown
|
page read and write
|
|
|
|
28861970000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
1554C000
|
unkown
|
page read and write
|
|
|
|
7FDA2000
|
unkown image
|
page readonly
|
|
|
|
3F40000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2E75000
|
unkown image
|
page readonly
|
|
|
|
7FF50875E000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3110000
|
unkown image
|
page readonly
|
|
|
|
15715000
|
unkown
|
page read and write
|
|
|
|
1564E000
|
unkown
|
page read and write
|
|
|
|
7FF4F61BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5572F1000
|
unkown image
|
page readonly
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
2770000
|
unkown image
|
page readonly
|
|
|
|
F441000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F27000
|
unkown image
|
page readonly
|
|
|
|
3150000
|
heap private
|
page read and write
|
|
|
|
2C3BCB82000
|
unkown
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
7FF569B8D000
|
unkown image
|
page readonly
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
15786000
|
unkown
|
page read and write
|
|
|
|
2327000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FEE000
|
unkown image
|
page readonly
|
|
|
|
15C832EA000
|
heap default
|
page read and write
|
|
|
|
2C3BCB75000
|
unkown
|
page read and write
|
|
|
|
68393000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
stack
|
page read and write
|
|
|
|
24AB000
|
unkown image
|
page readonly
|
|
|
|
2C3BD002000
|
unkown
|
page read and write
|
|
|
|
7FF51F3EC000
|
unkown image
|
page readonly
|
|
|
|
F434000
|
unkown
|
page read and write
|
|
|
|
7E70000
|
unkown
|
page read and write
|
|
|
|
14F0E000
|
stack
|
page read and write
|
|
|
|
DFB0000
|
unkown
|
page read and write
|
|
|
|
33EA000
|
heap default
|
page read and write
|
|
|
|
E0BC000
|
unkown
|
page read and write
|
|
|
|
7FF569B8F000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF33000
|
unkown image
|
page readonly
|
|
|
|
2C7A000
|
heap default
|
page read and write
|
|
|
|
2C3BC1D0000
|
unkown image
|
page readonly
|
|
|
|
27D0000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB96000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
7FF5B30FA000
|
unkown image
|
page readonly
|
|
|
|
2C3BC24B000
|
unkown
|
page read and write
|
|
|
|
7DF5C0D90000
|
unkown image
|
page readonly
|
|
|
|
234E000
|
heap default
|
page read and write
|
|
|
|
14D80000
|
unkown
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F5F15000
|
unkown image
|
page readonly
|
|
|
|
2B1F000
|
unkown image
|
page readonly
|
|
|
|
2A45000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
heap default
|
page read and write
|
|
|
|
7FF5B2DD7000
|
unkown image
|
page readonly
|
|
|
|
35DE000
|
stack
|
page read and write
|
|
|
|
7FF50877D000
|
unkown image
|
page readonly
|
|
|
|
C347000
|
unkown
|
page read and write
|
|
|
|
7FF5ACFF9000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB98000
|
unkown
|
page read and write
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
F43B000
|
unkown
|
page read and write
|
|
|
|
15C83ED0000
|
unkown
|
page read and write
|
|
|
|
7FF51F967000
|
unkown image
|
page readonly
|
|
|
|
15341000
|
unkown
|
page read and write
|
|
|
|
157A4000
|
unkown
|
page read and write
|
|
|
|
20B6000
|
unkown image
|
page readonly
|
|
|
|
2BFE000
|
stack
|
page read and write
|
|
|
|
7FF5ACF97000
|
unkown image
|
page readonly
|
|
|
|
2C3BD100000
|
unkown
|
page read and write
|
|
|
|
3403000
|
heap default
|
page read and write
|
|
|
|
12EC4000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EFB000
|
unkown image
|
page readonly
|
|
|
|
6A7E4FE000
|
stack
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
2A3D000
|
unkown image
|
page readonly
|
|
|
|
21D0A9E0000
|
unkown image
|
page readonly
|
|
|
|
2A76000
|
unkown image
|
page readonly
|
|
|
|
3F70000
|
unkown image
|
page readonly
|
|
|
|
2C3BD102000
|
unkown
|
page read and write
|
|
|
|
2C3BCB86000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
2B46000
|
unkown image
|
page readonly
|
|
|
|
7DF503F02000
|
unkown image
|
page readonly
|
|
|
|
7600000
|
unkown
|
page read and write
|
|
|
|
2C3BCBCD000
|
unkown
|
page read and write
|
|
|
|
15DF0000
|
unkown
|
page read and write
|
|
|
|
45F4000
|
heap private
|
page read and write
|
|
|
|
E0AF000
|
unkown
|
page read and write
|
|
|
|
21D0B180000
|
unkown image
|
page readonly
|
|
|
|
7DF5BAC90000
|
unkown image
|
page readonly
|
|
|
|
288619B4000
|
unkown
|
page read and write
|
|
|
|
F457000
|
unkown
|
page read and write
|
|
|
|
F4B6000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
ECB5A7A000
|
stack
|
page read and write
|
|
|
|
2B90000
|
unkown image
|
page readonly
|
|
|
|
12F48000
|
unkown
|
page read and write
|
|
|
|
15315000
|
unkown
|
page read and write
|
|
|
|
7FF51F993000
|
unkown image
|
page readonly
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
2AD4000
|
unkown image
|
page readonly
|
|
|
|
15AF6000
|
unkown
|
page read and write
|
|
|
|
FFA63000
|
unkown
|
page execute read
|
|
|
|
7FDB0000
|
unkown image
|
page readonly
|
|
|
|
7FF51F2ED000
|
unkown image
|
page readonly
|
|
|
|
1919E000
|
unkown
|
page read and write
|
|
|
|
7F192000
|
unkown image
|
page readonly
|
|
|
|
2ADB000
|
unkown image
|
page readonly
|
|
|
|
248B000
|
unkown image
|
page readonly
|
|
|
|
156A5000
|
unkown
|
page read and write
|
|
|
|
15655000
|
unkown
|
page read and write
|
|
|
|
7FF51F7F6000
|
unkown image
|
page readonly
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
7FF51F61F000
|
unkown image
|
page readonly
|
|
|
|
2C57000
|
heap private
|
page read and write
|
|
|
|
7FF5AD00A000
|
unkown image
|
page readonly
|
|
|
|
21D0AC8A000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
156F1000
|
unkown
|
page read and write
|
|
|
|
1A741E00000
|
heap default
|
page read and write
|
|
|
|
7FF4F620A000
|
unkown image
|
page readonly
|
|
|
|
15928000
|
unkown
|
page read and write
|
|
|
|
3637000
|
heap private
|
page read and write
|
|
|
|
7FF5ACF43000
|
unkown image
|
page readonly
|
|
|
|
155DA000
|
unkown
|
page read and write
|
|
|
|
7FF51FA61000
|
unkown image
|
page readonly
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
E09F000
|
unkown
|
page read and write
|
|
|
|
7DF462E20000
|
unkown image
|
page readonly
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3007000
|
unkown image
|
page readonly
|
|
|
|
15050000
|
unkown
|
page read and write
|
|
|
|
15DE0000
|
unkown
|
page read and write
|
|
|
|
2D63000
|
unkown
|
page read and write
|
|
|
|
7FF5B2E09000
|
unkown image
|
page readonly
|
|
|
|
2F27EA4C000
|
unkown
|
page read and write
|
|
|
|
32EC000
|
unkown
|
page read and write
|
|
|
|
7DF5778F2000
|
unkown image
|
page readonly
|
|
|
|
24A6000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACF73000
|
unkown image
|
page readonly
|
|
|
|
7FF4F620D000
|
unkown image
|
page readonly
|
|
|
|
7FF51F829000
|
unkown image
|
page readonly
|
|
|
|
C32A000
|
unkown
|
page read and write
|
|
|
|
7FF5087F1000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6262000
|
unkown image
|
page readonly
|
|
|
|
C3A5000
|
unkown
|
page read and write
|
|
|
|
20E1000
|
unkown
|
page read and write
|
|
|
|
2885C990000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB9D000
|
unkown
|
page read and write
|
|
|
|
15705000
|
unkown
|
page read and write
|
|
|
|
7FF557145000
|
unkown image
|
page readonly
|
|
|
|
2AFD000
|
unkown image
|
page readonly
|
|
|
|
7FF569C71000
|
unkown image
|
page readonly
|
|
|
|
2D78000
|
unkown
|
page read and write
|
|
|
|
278A000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF47000
|
unkown image
|
page readonly
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
2C3BCB72000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
DD5CFFE000
|
stack
|
page read and write
|
|
|
|
5DA0000
|
unkown image
|
page readonly
|
|
|
|
2885C2A0000
|
unkown image
|
page read and write
|
|
|
|
2C3BCB75000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
2885C473000
|
unkown
|
page read and write
|
|
|
|
2ECA000
|
unkown
|
page read and write
|
|
|
|
11002000
|
unkown
|
page read and write
|
|
|
|
2A4B000
|
unkown image
|
page readonly
|
|
|
|
2521000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
7DF52D6D2000
|
unkown image
|
page readonly
|
|
|
|
E09C000
|
unkown
|
page read and write
|
|
|
|
1A741D90000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6291000
|
unkown image
|
page readonly
|
|
|
|
12F57000
|
unkown
|
page read and write
|
|
|
|
7FF569BFD000
|
unkown image
|
page readonly
|
|
|
|
DD0D000
|
stack
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
1625C000
|
unkown
|
page read and write
|
|
|
|
2C3BC25B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C79000
|
unkown image
|
page readonly
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
2994000
|
heap private
|
page read and write
|
|
|
|
D3B0000
|
unkown
|
page read and write
|
|
|
|
7DF516472000
|
unkown image
|
page readonly
|
|
|
|
162EE000
|
unkown
|
page read and write
|
|
|
|
2885C43D000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
21D0AC81000
|
unkown
|
page read and write
|
|
|
|
2190000
|
stack
|
page read and write
|
|
|
|
7FF51F5D9000
|
unkown image
|
page readonly
|
|
|
|
21D0AC70000
|
unkown
|
page read and write
|
|
|
|
7FF5B303E000
|
unkown image
|
page readonly
|
|
|
|
2D68000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
15C832DF000
|
unkown
|
page read and write
|
|
|
|
F430000
|
unkown
|
page read and write
|
|
|
|
16464000
|
unkown image
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
3408000
|
unkown
|
page read and write
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
3248000
|
unkown
|
page read and write
|
|
|
|
E022000
|
unkown
|
page read and write
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
1517D000
|
stack
|
page read and write
|
|
|
|
28D0000
|
heap default
|
page read and write
|
|
|
|
E0AF000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
14F20000
|
unkown
|
page read and write
|
|
|
|
7DF5C0D72000
|
unkown image
|
page readonly
|
|
|
|
12E46000
|
unkown
|
page read and write
|
|
|
|
C370000
|
unkown
|
page read and write
|
|
|
|
7FF5ACEA1000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2DE2000
|
unkown image
|
page readonly
|
|
|
|
7FF51F823000
|
unkown image
|
page readonly
|
|
|
|
C150000
|
unkown
|
page read and write
|
|
|
|
D536000
|
unkown
|
page read and write
|
|
|
|
2A7A000
|
unkown image
|
page readonly
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
12F69000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
heap private
|
page read and write
|
|
|
|
257F000
|
unkown
|
page read and write
|
|
|
|
217C000
|
unkown image
|
page readonly
|
|
|
|
784E000
|
stack
|
page read and write
|
|
|
|
27E0000
|
unkown image
|
page readonly
|
|
|
|
2AE1000
|
unkown image
|
page readonly
|
|
|
|
321E000
|
stack
|
page read and write
|
|
|
|
2BFB000
|
unkown image
|
page readonly
|
|
|
|
7FF4F61B3000
|
unkown image
|
page readonly
|
|
|
|
7FF5572EA000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB6D000
|
unkown
|
page read and write
|
|
|
|
E09B000
|
unkown
|
page read and write
|
|
|
|
7FF569C81000
|
unkown image
|
page readonly
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
DD5CBF9000
|
stack
|
page read and write
|
|
|
|
1A741D20000
|
unkown
|
page read and write
|
|
|
|
2B1F000
|
unkown image
|
page readonly
|
|
|
|
FFA6E000
|
unkown
|
page execute read
|
|
|
|
2F27F070000
|
unkown
|
page read and write
|
|
|
|
F4F3000
|
unkown
|
page read and write
|
|
|
|
7FF55724E000
|
unkown image
|
page readonly
|
|
|
|
21EA2908000
|
unkown
|
page read and write
|
|
|
|
15AF7000
|
unkown
|
page read and write
|
|
|
|
2885C600000
|
unkown image
|
page readonly
|
|
|
|
7F1A0000
|
unkown image
|
page readonly
|
|
|
|
7DF503F10000
|
unkown image
|
page readonly
|
|
|
|
32E3000
|
heap default
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
326E000
|
stack
|
page read and write
|
|
|
|
15318000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
7DF564F62000
|
unkown image
|
page readonly
|
|
|
|
2476000
|
unkown image
|
page readonly
|
|
|
|
21D0AD08000
|
unkown
|
page read and write
|
|
|
|
2C3BCB7B000
|
unkown
|
page read and write
|
|
|
|
28861994000
|
unkown
|
page read and write
|
|
|
|
7DF503F10000
|
unkown image
|
page readonly
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
E072000
|
unkown
|
page read and write
|
|
|
|
ECB5BF9000
|
stack
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
FAED7FE000
|
stack
|
page read and write
|
|
|
|
2710000
|
stack
|
page read and write
|
|
|
|
7DF564F70000
|
unkown image
|
page readonly
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
14570000
|
unkown
|
page read and write
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
12D5D000
|
unkown
|
page read and write
|
|
|
|
7FF51F66F000
|
unkown image
|
page readonly
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
D86E000
|
stack
|
page read and write
|
|
|
|
2C3BCB8C000
|
unkown
|
page read and write
|
|
|
|
2C3BD002000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
2C3BCF50000
|
unkown
|
page read and write
|
|
|
|
2C3BD002000
|
unkown
|
page read and write
|
|
|
|
7DF503EF0000
|
unkown image
|
page readonly
|
|
|
|
155A6000
|
unkown
|
page read and write
|
|
|
|
21D0AA30000
|
heap default
|
page read and write
|
|
|
|
2C3BCB6B000
|
unkown
|
page read and write
|
|
|
|
7FF557210000
|
unkown image
|
page readonly
|
|
|
|
7FF5B27E1000
|
unkown image
|
page readonly
|
|
|
|
2188000
|
unkown image
|
page readonly
|
|
|
|
7FF51F742000
|
unkown image
|
page readonly
|
|
|
|
DD5D37E000
|
stack
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
E093000
|
unkown
|
page read and write
|
|
|
|
12D20000
|
unkown
|
page read and write
|
|
|
|
156E4000
|
unkown
|
page read and write
|
|
|
|
19026000
|
unkown
|
page read and write
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
7FF5ACDA6000
|
unkown image
|
page readonly
|
|
|
|
2F27E8A0000
|
unkown image
|
page read and write
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
2885CC02000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
68171000
|
unkown image
|
page execute read
|
|
|
|
FFB82000
|
unkown image
|
page readonly
|
|
|
|
12E69000
|
unkown
|
page read and write
|
|
|
|
28861CDC000
|
unkown
|
page read and write
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
2C3BCF60000
|
unkown image
|
page read and write
|
|
|
|
3425000
|
unkown
|
page read and write
|
|
|
|
27F0000
|
unkown
|
page read and write
|
|
|
|
3F60000
|
unkown image
|
page readonly
|
|
|
|
7FF51F93E000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6207000
|
unkown image
|
page readonly
|
|
|
|
7FF5B305B000
|
unkown image
|
page readonly
|
|
|
|
2885C456000
|
unkown
|
page read and write
|
|
|
|
21D0AC29000
|
unkown
|
page read and write
|
|
|
|
690D9FB000
|
stack
|
page read and write
|
|
|
|
2A61000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
E028000
|
unkown
|
page read and write
|
|
|
|
2BDB000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3037000
|
unkown image
|
page readonly
|
|
|
|
F445000
|
unkown
|
page read and write
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
7FF569AEC000
|
unkown image
|
page readonly
|
|
|
|
2F27EA4E000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
21D0AC52000
|
unkown
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
7FF508727000
|
unkown image
|
page readonly
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
7FF50872E000
|
unkown image
|
page readonly
|
|
|
|
C4D5000
|
unkown
|
page read and write
|
|
|
|
2838000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
2B53000
|
unkown image
|
page readonly
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
CF9F000
|
unkown
|
page read and write
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
heap private
|
page read and write
|
|
|
|
D3AB000
|
stack
|
page read and write
|
|
|
|
7FF4F6016000
|
unkown image
|
page readonly
|
|
|
|
2885D470000
|
unkown image
|
page readonly
|
|
|
|
2F27EA58000
|
unkown
|
page read and write
|
|
|
|
7FF5B2EC5000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
E0BB000
|
unkown
|
page read and write
|
|
|
|
253C000
|
unkown image
|
page readonly
|
|
|
|
2885C400000
|
unkown
|
page read and write
|
|
|
|
7FF556DD7000
|
unkown image
|
page readonly
|
|
|
|
C703000
|
unkown
|
page read and write
|
|
|
|
20A1000
|
unkown image
|
page readonly
|
|
|
|
2A72000
|
unkown
|
page read and write
|
|
|
|
3630000
|
heap private
|
page read and write
|
|
|
|
7FF5B3087000
|
unkown image
|
page readonly
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
2C5A000
|
heap private
|
page read and write
|
|
|
|
15AB9000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF17000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB5B000
|
unkown
|
page read and write
|
|
|
|
2A66000
|
unkown image
|
page readonly
|
|
|
|
28BE000
|
stack
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
28861AB0000
|
unkown
|
page read and write
|
|
|
|
2485000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
12F88000
|
unkown
|
page read and write
|
|
|
|
346E000
|
stack
|
page read and write
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
E092000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9F000
|
unkown
|
page read and write
|
|
|
|
156AD000
|
unkown
|
page read and write
|
|
|
|
2834000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
7F9B2000
|
unkown image
|
page readonly
|
|
|
|
155F0000
|
unkown
|
page read and write
|
|
|
|
12F52000
|
unkown
|
page read and write
|
|
|
|
2C3BCB96000
|
unkown
|
page read and write
|
|
|
|
2F27EE00000
|
unkown image
|
page readonly
|
|
|
|
2B20000
|
unkown image
|
page readonly
|
|
|
|
15A78000
|
unkown
|
page read and write
|
|
|
|
113DF79000
|
stack
|
page read and write
|
|
|
|
12F48000
|
unkown
|
page read and write
|
|
|
|
7FF5B28D1000
|
unkown image
|
page readonly
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown image
|
page readonly
|
|
|
|
7FF51F9ED000
|
unkown image
|
page readonly
|
|
|
|
7DF414330000
|
unkown image
|
page readonly
|
|
|
|
ECB5EF8000
|
stack
|
page read and write
|
|
|
|
2A03000
|
unkown image
|
page readonly
|
|
|
|
2B6D000
|
unkown image
|
page readonly
|
|
|
|
E0C4000
|
unkown
|
page read and write
|
|
|
|
2A55000
|
unkown
|
page read and write
|
|
|
|
12F55000
|
unkown
|
page read and write
|
|
|
|
E0B7000
|
unkown
|
page read and write
|
|
|
|
7FF5572DA000
|
unkown image
|
page readonly
|
|
|
|
7FF5B3047000
|
unkown image
|
page readonly
|
|
|
|
7FF51FA42000
|
unkown image
|
page readonly
|
|
|
|
21D0AC56000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
F3A0000
|
unkown
|
page read and write
|
|
|
|
21EA2902000
|
unkown
|
page read and write
|
|
|
|
2C3BCB96000
|
unkown
|
page read and write
|
|
|
|
2885D270000
|
unkown
|
page read and write
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
21C0000
|
stack
|
page read and write
|
|
|
|
2A3D000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACE0B000
|
unkown image
|
page readonly
|
|
|
|
12F2E000
|
unkown
|
page read and write
|
|
|
|
2885D4A0000
|
unkown image
|
page readonly
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
2A89000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
2B5F000
|
unkown image
|
page readonly
|
|
|
|
15548000
|
unkown
|
page read and write
|
|
|
|
7FF51F7B4000
|
unkown image
|
page readonly
|
|
|
|
7FF5ACB01000
|
unkown image
|
page readonly
|
|
|
|
12EC1000
|
unkown
|
page read and write
|
|
|
|
2C3BC860000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2F65000
|
unkown image
|
page readonly
|
|
|
|
29ED000
|
unkown image
|
page readonly
|
|
|
|
15656000
|
unkown
|
page read and write
|
|
|
|
7FF5AC843000
|
unkown image
|
page readonly
|
|
|
|
2720000
|
unkown image
|
page readonly
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
7F70000
|
unkown
|
page read and write
|
|
|
|
15E60000
|
unkown
|
page read and write
|
|
|
|
12F7D000
|
unkown
|
page read and write
|
|
|
|
7DF516470000
|
unkown image
|
page readonly
|
|
|
|
14530000
|
unkown
|
page read and write
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
156EB000
|
unkown
|
page read and write
|
|
|
|
2C3BC259000
|
unkown
|
page read and write
|
|
|
|
11540000
|
unkown
|
page read and write
|
|
|
|
21EA2CD0000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
11CA0000
|
unkown
|
page read and write
|
|
|
|
2F27E9F0000
|
unkown image
|
page readonly
|
|
|
|
15901000
|
unkown
|
page read and write
|
|
|
|
242D000
|
unkown image
|
page readonly
|
|
|
|
207E000
|
unkown image
|
page readonly
|
|
|
|
15517000
|
unkown
|
page read and write
|
|
|
|
15704000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F6B000
|
unkown image
|
page readonly
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
7E6F000
|
stack
|
page read and write
|
|
|
|
12F9A000
|
unkown
|
page read and write
|
|
|
|
238D000
|
unkown
|
page read and write
|
|
|
|
2A5D000
|
unkown image
|
page readonly
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
7FF5572D4000
|
unkown image
|
page readonly
|
|
|
|
2C3BC254000
|
unkown
|
page read and write
|
|
|
|
15DD0000
|
unkown
|
page read and write
|
|
|
|
2376000
|
unkown
|
page read and write
|
|
|
|
2161000
|
unkown image
|
page readonly
|
|
|
|
7FF51F997000
|
unkown image
|
page readonly
|
|
|
|
E01F000
|
unkown
|
page read and write
|
|
|
|
297D000
|
unkown image
|
page readonly
|
|
|
|
2F27EF80000
|
unkown image
|
page readonly
|
|
|
|
E083000
|
unkown
|
page read and write
|
|
|
|
2C3BCB94000
|
unkown
|
page read and write
|
|
|
|
1DE6000
|
unkown
|
page read and write
|
|
|
|
FFB80000
|
unkown image
|
page readonly
|
|
|
|
15789000
|
unkown
|
page read and write
|
|
|
|
15C83620000
|
unkown
|
page read and write
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
243E000
|
unkown image
|
page readonly
|
|
|
|
156F3000
|
unkown
|
page read and write
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
7FF5ACE75000
|
unkown image
|
page readonly
|
|
|
|
E0B8000
|
unkown
|
page read and write
|
|
|
|
28861991000
|
unkown
|
page read and write
|
|
|
|
15C83250000
|
unkown
|
page read and write
|
|
|
|
1DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF564F60000
|
unkown image
|
page readonly
|
|
|
|
12FD7000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page read and write
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
7F622000
|
unkown image
|
page readonly
|
|
|
|
28861A40000
|
unkown
|
page read and write
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
2C3BC308000
|
unkown
|
page read and write
|
|
|
|
7FF5ACF2F000
|
unkown image
|
page readonly
|
|
|
|
7F9C2000
|
unkown image
|
page readonly
|
|
|
|
20AA000
|
unkown image
|
page readonly
|
|
|
|
14550000
|
unkown
|
page read and write
|
|
|
|
7FF51F9BB000
|
unkown image
|
page readonly
|
|
|
|
2937000
|
unkown image
|
page readonly
|
|
|
|
1151E000
|
stack
|
page read and write
|
|
|
|
15C84140000
|
unkown
|
page read and write
|
|
|
|
F422000
|
unkown
|
page read and write
|
|
|
|
2367000
|
unkown
|
page read and write
|
|
|
|
24BB000
|
unkown image
|
page readonly
|
|
|
|
D16C000
|
stack
|
page read and write
|
|
|
|
15548000
|
unkown
|
page read and write
|
|
|
|
12F92000
|
unkown
|
page read and write
|
|
|
|
7FF51F94E000
|
unkown image
|
page readonly
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
7F192000
|
unkown image
|
page readonly
|
|
|
|
FFB72000
|
unkown image
|
page readonly
|
|
|
|
33EC0000
|
unkown
|
page execute read
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
FFA67000
|
unkown
|
page readonly
|
|
|
|
2DE0000
|
unkown image
|
page readonly
|
|
|
|
24D3000
|
unkown image
|
page readonly
|
|
|
|
7FF569B96000
|
unkown image
|
page readonly
|
|
|
|
157BA000
|
unkown
|
page read and write
|
|
|
|
2C3BC1F0000
|
heap default
|
page read and write
|
|
|
|
12ED6000
|
unkown
|
page read and write
|
|
|
|
15791000
|
unkown
|
page read and write
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
162A2000
|
unkown
|
page read and write
|
|
|
|
FFB80000
|
unkown image
|
page readonly
|
|
|
|
15C832DF000
|
unkown
|
page read and write
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
7F612000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB00000
|
unkown
|
page read and write
|
|
|
|
28861D02000
|
unkown
|
page read and write
|
|
|
|
2346000
|
heap default
|
page read and write
|
|
|
|
20E6000
|
unkown image
|
page readonly
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
2C3BC4D0000
|
unkown image
|
page readonly
|
|
|
|
12F45000
|
unkown
|
page read and write
|
|
|
|
7FF51F83D000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
FFA45000
|
unkown
|
page execute read
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
15692000
|
unkown
|
page read and write
|
|
|
|
2B70000
|
heap default
|
page read and write
|
|
|
|
2A6B000
|
unkown image
|
page readonly
|
|
|
|
7F00000
|
unkown
|
page read and write
|
|
|
|
1A741D65000
|
heap private
|
page read and write
|
|
|
|
12F20000
|
unkown
|
page read and write
|
|
|
|
6A7EA7F000
|
stack
|
page read and write
|
|
|
|
12F3F000
|
unkown
|
page read and write
|
|
|
|
82FE1FE000
|
stack
|
page read and write
|
|
|
|
113DFFE000
|
stack
|
page read and write
|
|
|
|
3248000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
F37F000
|
unkown
|
page read and write
|
|
|
|
12F77000
|
unkown
|
page read and write
|
|
|
|
2C3BC970000
|
unkown image
|
page readonly
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
22B7000
|
unkown image
|
page readonly
|
|
|
|
12F9D000
|
unkown
|
page read and write
|
|
|
|
208F000
|
unkown image
|
page readonly
|
|
|
|
D96F000
|
stack
|
page read and write
|
|
|
|
233D000
|
heap default
|
page read and write
|
|
|
|
7FA70000
|
unkown image
|
page readonly
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
21D0AC27000
|
unkown
|
page read and write
|
|
|
|
7F1B0000
|
unkown image
|
page readonly
|
|
|
|
12FAA000
|
unkown
|
page read and write
|
|
|
|
243B000
|
unkown image
|
page readonly
|
|
|
|
3304000
|
unkown
|
page read and write
|
|
|
|
3FC0000
|
unkown image
|
page readonly
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
15703000
|
unkown
|
page read and write
|
|
|
|
DD5D57C000
|
stack
|
page read and write
|
|
|
|
F366000
|
unkown
|
page read and write
|
|
|
|
21EA2913000
|
unkown
|
page read and write
|
|
|
|
21EA2740000
|
heap default
|
page read and write
|
|
|
|
7FF51F85B000
|
unkown image
|
page readonly
|
|
|
|
DCF0000
|
unkown
|
page read and write
|
|
|
|
F4F5000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown image
|
page readonly
|
|
|
|
F439000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
2A72000
|
unkown
|
page read and write
|
|
|
|
C225000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
2C3BC190000
|
heap private
|
page read and write
|
|
|
|
2885CD13000
|
unkown
|
page read and write
|
|
|
|
235E000
|
unkown image
|
page readonly
|
|
|
|
7F620000
|
unkown image
|
page readonly
|
|
|
|
7F190000
|
unkown image
|
page readonly
|
|
|
|
79B0000
|
unkown
|
page read and write
|
|
|
|
7F4E2000
|
unkown image
|
page readonly
|
|
|
|
15C831C0000
|
unkown image
|
page read and write
|
|
|
|
7FDA0000
|
unkown image
|
page readonly
|
|
|
|
15674000
|
unkown
|
page read and write
|
|
|
|
2B70000
|
unkown
|
page read and write
|
|
|
|
ECB519B000
|
unkown
|
page read and write
|
|
|
|
15AEB000
|
unkown
|
page read and write
|
|
|
|
12F1B000
|
unkown
|
page read and write
|
|
|
|
2ACB000
|
unkown image
|
page readonly
|
|
|
|
12D1E000
|
unkown
|
page read and write
|
|
|
|
15684000
|
unkown
|
page read and write
|
|
|
|
7FF5571FF000
|
unkown image
|
page readonly
|
|
|
|
32CA000
|
heap default
|
page read and write
|
|
|
|
158FE000
|
unkown
|
page read and write
|
|
|
|
24CC000
|
unkown image
|
page readonly
|
|
|
|
12F2B000
|
unkown
|
page read and write
|
|
|
|
E0A3000
|
unkown
|
page read and write
|
|
|
|
2C3BD102000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
2371000
|
unkown
|
page read and write
|
|
|
|
E065000
|
unkown
|
page read and write
|
|
|
|
2548000
|
unkown image
|
page readonly
|
|
|
|
2AB6000
|
unkown image
|
page readonly
|
|
|
|
1631F000
|
unkown
|
page read and write
|
|
|
|
788E000
|
stack
|
page read and write
|
|
|
|
2D20000
|
unkown image
|
page readonly
|
|
|
|
7FF4F6111000
|
unkown image
|
page readonly
|
|
|
|
7FF569C6A000
|
unkown image
|
page readonly
|
|
|
|
E0C6000
|
unkown
|
page read and write
|
|
|
|
7FF5572C9000
|
unkown image
|
page readonly
|
|
|
|
2885D490000
|
unkown image
|
page readonly
|
|
|
|
15653000
|
unkown
|
page read and write
|
|
|
|
1570B000
|
unkown
|
page read and write
|
|
|
|
7F090000
|
unkown image
|
page readonly
|
|
|
|
7FF51F8DC000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
7DF5778E0000
|
unkown image
|
page readonly
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
7FF5B2F7C000
|
unkown image
|
page readonly
|
|
|
|
23F6000
|
unkown image
|
page readonly
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
12F75000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
12ED6000
|
unkown
|
page read and write
|
|
|
|
12F33000
|
unkown
|
page read and write
|
|
|
|
7FF51F91F000
|
unkown image
|
page readonly
|
|
|
|
324C000
|
unkown
|
page read and write
|
|
|
|
2348000
|
heap default
|
page read and write
|
|
|
|
2DB0000
|
unkown image
|
page readonly
|
|
|
|
E39E000
|
stack
|
page read and write
|
|
|
|
2F27EA70000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown image
|
page read and write
|
|
|
|
12F62000
|
unkown
|
page read and write
|
|
|
|
1FAD000
|
unkown image
|
page readonly
|
|
|
|
2A80000
|
unkown image
|
page readonly
|
|
|
|
21EA2813000
|
unkown
|
page read and write
|
|
|
|
2B76000
|
unkown image
|
page readonly
|
|
|
|
2F95000
|
unkown
|
page read and write
|
|
|
|
C473000
|
unkown
|
page read and write
|
|
|
|
1568C000
|
unkown
|
page read and write
|
|
|
|
FAED67F000
|
stack
|
page read and write
|
|
|
|
DD5CF7F000
|
stack
|
page read and write
|
|
|
|
15941000
|
unkown
|
page read and write
|
|
|
|
2369000
|
unkown
|
page read and write
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
2B03000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
12EC4000
|
unkown
|
page read and write
|
|
|
|
2F27EB00000
|
unkown
|
page read and write
|
|
|
|
3510000
|
heap private
|
page read and write
|
|
|
|
32F7000
|
unkown
|
page read and write
|
|
|
|
21D0A9C0000
|
unkown image
|
page read and write
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
2885CD18000
|
unkown
|
page read and write
|
|
|
|
12FD0000
|
unkown
|
page read and write
|
|
|
|
1919D000
|
unkown
|
page read and write
|
|
|
|
12EB4000
|
unkown
|
page read and write
|
|
|
|
2190000
|
stack
|
page read and write
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
12FB7000
|
unkown
|
page read and write
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
D4A0000
|
unkown
|
page read and write
|
|
|
|
F445000
|
unkown
|
page read and write
|
|
|
|
7FF5B301F000
|
unkown image
|
page readonly
|
|
|
|
FAEDBFD000
|
stack
|
page read and write
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
C141000
|
unkown
|
page read and write
|
|
|
|
15C83287000
|
heap default
|
page read and write
|
|
|
|
2B1B000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2BF1000
|
unkown image
|
page readonly
|
|
|
|
DF60000
|
unkown
|
page read and write
|
|
|
|
21EA2829000
|
unkown
|
page read and write
|
|
|
|
E098000
|
unkown
|
page read and write
|
|
|
|
DD5CEFB000
|
stack
|
page read and write
|
|
|
|
F240000
|
unkown
|
page read and write
|
|
|
|
2A71000
|
unkown image
|
page readonly
|
|
|
|
7FF51F7D5000
|
unkown image
|
page readonly
|
|
|
|
2760000
|
unkown
|
page read and write
|
|
|
|
15598000
|
unkown
|
page read and write
|
|
|
|
2C3BC316000
|
unkown
|
page read and write
|
|
|
|
2885D280000
|
unkown
|
page read and write
|
|
|
|
1561E000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
68170000
|
unkown image
|
page readonly
|
|
|
|
2A9B000
|
unkown image
|
page readonly
|
|
|
|
29F7000
|
unkown image
|
page readonly
|
|
|
|
249F000
|
unkown image
|
page readonly
|
|
|
|
113DB6B000
|
unkown
|
page read and write
|
|
|
|
2F0B000
|
unkown
|
page read and write
|
|
|
|
15758000
|
unkown
|
page read and write
|
|
|
|
7FF4F61B7000
|
unkown image
|
page readonly
|
|
|
|
2F27EA49000
|
unkown
|
page read and write
|
|
|
|
2C3BC9A0000
|
unkown image
|
page write copy
|
|
|
|
1591B000
|
unkown
|
page read and write
|
|
|
|
1570B000
|
unkown
|
page read and write
|
|
|
|
E0B6000
|
unkown
|
page read and write
|
|
|
|
E0BC000
|
unkown
|
page read and write
|
|
|
|
FFB82000
|
unkown image
|
page readonly
|
|
|
|
2C3BCBBA000
|
unkown
|
page read and write
|
|
|
|
15940000
|
unkown
|
page read and write
|
|
|
|
12FC9000
|
unkown
|
page read and write
|
|
|
|
2F45000
|
unkown
|
page read and write
|
|
|
|
F43B000
|
unkown
|
page read and write
|
|
|
|
2885C478000
|
unkown
|
page read and write
|
|
|
|
7FDC0000
|
unkown image
|
page readonly
|
|
|
|
15615000
|
unkown
|
page read and write
|
|
|
|
C581000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
690DBFF000
|
stack
|
page read and write
|
|
|
|
15633000
|
unkown
|
page read and write
|
|
|
|
15707000
|
unkown
|
page read and write
|
|
|
|
15666000
|
unkown
|
page read and write
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
7FF51FA6E000
|
unkown image
|
page readonly
|
|
|
|
15923000
|
unkown
|
page read and write
|
|
|
|
11530000
|
unkown
|
page read and write
|
|
|
|
20CF000
|
unkown image
|
page readonly
|
|
|
|
21D0AB10000
|
unkown image
|
page readonly
|
|
|
|
7FF569421000
|
unkown image
|
page readonly
|
|
|
|
28861C4A000
|
unkown
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
7FF569BA0000
|
unkown image
|
page readonly
|
|
|
|
7FF56940F000
|
unkown image
|
page readonly
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown image
|
page readonly
|
|
|
|
15780000
|
unkown
|
page read and write
|
|
|
|
12F16000
|
unkown
|
page read and write
|
|
|
|
15707000
|
unkown
|
page read and write
|
|
|
|
15930000
|
unkown
|
page read and write
|
|
|
|
7F8B0000
|
unkown image
|
page readonly
|
|
|
|
15925000
|
unkown
|
page read and write
|
|
|
|
7DF5778F2000
|
unkown image
|
page readonly
|
|
|
|
7FF5B306E000
|
unkown image
|
page readonly
|
|
|
|
22EE000
|
unkown image
|
page readonly
|
|
|
|
15C83850000
|
unkown image
|
page readonly
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
2885C492000
|
unkown
|
page read and write
|
|
|
|
E07D000
|
unkown
|
page read and write
|
|
|
|
1592C000
|
unkown
|
page read and write
|
|
|
|
7FF5087F5000
|
unkown image
|
page readonly
|
|
|
|
214F000
|
unkown image
|
page readonly
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
2C30000
|
unkown
|
page read and write
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
15642000
|
unkown
|
page read and write
|
|
|
|
2C3BC25C000
|
unkown
|
page read and write
|
|
|
|
C13E000
|
unkown
|
page read and write
|
|
|
|
157A9000
|
unkown
|
page read and write
|
|
|
|
2F27EB08000
|
unkown
|
page read and write
|
|
|
|
3037000
|
heap private
|
page read and write
|
|
|
|
2B08000
|
unkown image
|
page readonly
|
|
|
|
F330000
|
unkown
|
page read and write
|
|
|
|
C22F000
|
unkown
|
page read and write
|
|
|
|
C43E000
|
unkown
|
page read and write
|
|
|
|
34E0000
|
unkown image
|
page readonly
|
|
|
|
2885C2C0000
|
unkown image
|
page readonly
|
|
|
|
1591E000
|
unkown
|
page read and write
|
|
|
|
3F90000
|
unkown
|
page read and write
|
|
|
|
E06A000
|
unkown
|
page read and write
|
|
|
|
F230000
|
unkown
|
page read and write
|
|
|
|
7DF516460000
|
unkown image
|
page readonly
|
|
|
|
33C0000
|
unkown image
|
page readonly
|
|
|
|
7DF516460000
|
unkown image
|
page readonly
|
|
|
|
1592E000
|
unkown
|
page read and write
|
|
|
|
7DF5BAC90000
|
unkown image
|
page readonly
|
|
|
|
158FE000
|
unkown
|
page read and write
|
|
|
|
2C3BCB9A000
|
unkown
|
page read and write
|
|
|
|
7FF5ACEA5000
|
unkown image
|
page readonly
|
|
|
|
1563B000
|
unkown
|
page read and write
|
|
|
|
2183000
|
unkown image
|
page readonly
|
|
|
|
2160000
|
unkown image
|
page readonly
|
|
|
|
15673000
|
unkown
|
page read and write
|
|
|
|
361E000
|
stack
|
page read and write
|
|
|
|
FFA70000
|
unkown image
|
page readonly
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
12FA8000
|
unkown
|
page read and write
|
|
|
|
21D0B190000
|
unkown
|
page read and write
|
|
|
|
7FF5B308D000
|
unkown image
|
page readonly
|
|
|
|
E0B0000
|
unkown
|
page read and write
|
|
|
|
28861CED000
|
unkown
|
page read and write
|
|
|
|
2479000
|
unkown image
|
page readonly
|
|
|
|
238D000
|
unkown
|
page read and write
|
|
|
|
21EA2750000
|
unkown image
|
page readonly
|
|
|
|
2A51000
|
unkown
|
page read and write
|
|
|
|
3640000
|
unkown image
|
page readonly
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
15E40000
|
unkown
|
page read and write
|
|
|
|
3740000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0D72000
|
unkown image
|
page readonly
|
|
|
|
7FF5B2FF3000
|
unkown image
|
page readonly
|
|
|
|
15707000
|
unkown
|
page read and write
|
|
|
|
2C3BC2E9000
|
unkown
|
page read and write
|
|
|
|
1A741D60000
|
heap private
|
page read and write
|
|
|
|
2C18000
|
unkown image
|
page readonly
|
|
|
|
156E1000
|
unkown
|
page read and write
|
|
|
|
1564A000
|
unkown
|
page read and write
|
|
|
|
12E9B000
|
unkown
|
page read and write
|
|
|
|
15AF8000
|
unkown
|
page read and write
|
|
|
|
7FF51F9A7000
|
unkown image
|
page readonly
|
|
|
|
117B0000
|
unkown
|
page read and write
|
|
|
|
12D5B000
|
unkown
|
page read and write
|
|
|
|
1553B000
|
unkown
|
page read and write
|
|
|
|
2885D7F0000
|
unkown
|
page read and write
|
|
|
|
1A741E28000
|
unkown
|
page read and write
|
|
|
|
23BD000
|
unkown image
|
page readonly
|
|
|
|
2C3BC2F8000
|
unkown
|
page read and write
|
|
|
|
7FF5B3023000
|
unkown image
|
page readonly
|
|
|
|
7DF5C0D82000
|
unkown image
|
page readonly
|
|
|
|
7FF51F5C3000
|
unkown image
|
page readonly
|
|
|
|
15319000
|
unkown
|
page read and write
|
|
|
|
155CA000
|
unkown
|
page read and write
|
|
|
|
7DF5C0D80000
|
unkown image
|
page readonly
|
|
|
|
2C3BCB9C000
|
unkown
|
page read and write
|
|
|
|
21EA26F0000
|
unkown image
|
page readonly
|
|
|
|
32FB000
|
unkown
|
page read and write
|
|
|
|
7FF5569C1000
|
unkown image
|
page readonly
|
|
|
|
7FF55715C000
|
unkown image
|
page readonly
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
15656000
|
unkown
|
page read and write
|
|
|
|
2F99000
|
unkown
|
page read and write
|
|
|
|
287D000
|
stack
|
page read and write
|
|
|
|
7FF51F780000
|
unkown image
|
page readonly
|
|
|
|
ECB56F9000
|
stack
|
page read and write
|
|
|
|
2D30000
|
unkown image
|
page readonly
|
|
|
|
7F610000
|
unkown image
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
7FF4F60EB000
|
unkown image
|
page readonly
|
|
|
|
15768000
|
unkown
|
page read and write
|
|
|
|
14F30000
|
unkown
|
page read and write
|
|
|
|
288619A0000
|
unkown
|
page read and write
|
|
|
|
307B000
|
unkown
|
page read and write
|
|
|
|
15DE0000
|
unkown
|
page read and write
|
|
|
|
15C832C5000
|
heap default
|
page read and write
|
|
|
|
E073000
|
unkown
|
page read and write
|
|
|
|
15720000
|
unkown
|
page read and write
|
|
|
|
12EC4000
|
unkown
|
page read and write
|
|
|
|
7FF508801000
|
unkown image
|
page readonly
|
|
|
|
158FE000
|
unkown
|
page read and write
|
|
|
|
15AB5000
|
unkown
|
page read and write
|
|
|
|
15932000
|
unkown
|
page read and write
|
|
|
|
156B3000
|
unkown
|
page read and write
|
|
|
|
158F6000
|
unkown
|
page read and write
|
|
|
|
15718000
|
unkown
|
page read and write
|
|
|
|
E00F000
|
unkown
|
page read and write
|
|
|
|
28F3000
|
unkown image
|
page readonly
|
|
|
|
2C3BCBA9000
|
unkown
|
page read and write
|
|
|
|
12FDE000
|
unkown
|
page read and write
|
|
There are 2545 hidden memdumps, click here to show them.