Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
winlogon.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\winlogon.exe.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmpD7F1.tmp
|
XML 1.0 document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\UlhpAjSuVoTa.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0gbn1r51.3xf.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_brqhmx13.5q1.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\UlhpAjSuVoTa.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Documents\20211202\PowerShell_transcript.506013.Hm7BnSFA.20211202202210.txt
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\winlogon.exe
|
"C:\Users\user\Desktop\winlogon.exe"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\UlhpAjSuVoTa.exe
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
C:\Windows\System32\schtasks.exe" /Create /TN "Updates\UlhpAjSuVoTa" /XML "C:\Users\user\AppData\Local\Temp\tmpD7F1.tmp
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://smtp.stockmeieir.com
|
unknown
|
|
|
|
http://wwHpow.com
|
unknown
|
|
|
|
https://Qr1QL48h5BTOb.com
|
unknown
|
|
|
|
https://api.ipify.org%GETMozilla/5.0
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
http://us2.smtp.mailhostbox.com
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
|
|
|
https://api.ipify.org%
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
There are 1 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
smtp.stockmeieir.com
|
unknown
|
|
|
|
us2.smtp.mailhostbox.com
|
208.91.199.224
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
208.91.199.224
|
us2.smtp.mailhostbox.com
|
United States
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2901000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
2CB3000
|
unkown
|
page read and write
|
|
|
|
29B4000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
3BD9000
|
unkown
|
page read and write
|
|
|
|
2BD1000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
4F36000
|
unkown
|
page read and write
|
|
|
|
BB4000
|
heap default
|
page read and write
|
|
|
|
7DF5A5E32000
|
unkown image
|
page readonly
|
|
|
|
146C8BA1000
|
unkown
|
page read and write
|
|
|
|
56B0000
|
unkown
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D156B000
|
unkown image
|
page readonly
|
|
|
|
F9CC97B000
|
stack
|
page read and write
|
|
|
|
7FF5977D4000
|
unkown image
|
page readonly
|
|
|
|
28FE000
|
stack
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
4DD0000
|
unkown
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
5263000
|
heap private
|
page read and write
|
|
|
|
613E000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
2088E6B0000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
7FF56CC24000
|
unkown image
|
page readonly
|
|
|
|
7DF5829B0000
|
unkown image
|
page readonly
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
7FF5977E1000
|
unkown image
|
page readonly
|
|
|
|
146C829F000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5F21000
|
unkown
|
page read and write
|
|
|
|
5E0F000
|
unkown
|
page read and write
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
5E10000
|
stack
|
page execute and read and write
|
|
|
|
294AC07F000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
6A93000
|
unkown
|
page read and write
|
|
|
|
108E000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
7FF56D666000
|
unkown image
|
page readonly
|
|
|
|
7FF56CC49000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
8A3000
|
unkown
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
E9A000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
F16000
|
unkown
|
page execute and read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
7FF56CBCE000
|
unkown image
|
page readonly
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
23FF883C000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
294AC102000
|
unkown
|
page read and write
|
|
|
|
146C8B8C000
|
unkown
|
page read and write
|
|
|
|
146C82C2000
|
unkown
|
page read and write
|
|
|
|
2B0E000
|
stack
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
146C8BBF000
|
unkown
|
page read and write
|
|
|
|
7FF56D405000
|
unkown image
|
page readonly
|
|
|
|
7FF56D132000
|
unkown image
|
page readonly
|
|
|
|
5268000
|
heap private
|
page read and write
|
|
|
|
50C1000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
7FBD0000
|
unkown image
|
page readonly
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
7FF56CA21000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC872000
|
unkown image
|
page readonly
|
|
|
|
2A48000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF590D3D000
|
unkown image
|
page readonly
|
|
|
|
5E09000
|
stack
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
2102000
|
unkown image
|
page readonly
|
|
|
|
7FF590CEC000
|
unkown image
|
page readonly
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
5E3D000
|
unkown
|
page read and write
|
|
|
|
7FF56D81C000
|
unkown image
|
page readonly
|
|
|
|
7FBC2000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5E0E000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
7DF5E66D0000
|
unkown image
|
page readonly
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5976DC000
|
unkown image
|
page readonly
|
|
|
|
7FF596E0E000
|
unkown image
|
page readonly
|
|
|
|
1BE2C289000
|
unkown
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
146C8B57000
|
unkown
|
page read and write
|
|
|
|
5E36000
|
unkown
|
page read and write
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
7FBD0000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4E22000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
651E000
|
stack
|
page read and write
|
|
|
|
7FF56D88F000
|
unkown image
|
page readonly
|
|
|
|
BC6000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
870000
|
unkown image
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
1BE2C200000
|
unkown
|
page read and write
|
|
|
|
7DF5AC870000
|
unkown image
|
page readonly
|
|
|
|
146C8B8F000
|
unkown
|
page read and write
|
|
|
|
1BE2C180000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
1BE2C308000
|
unkown
|
page read and write
|
|
|
|
7FF5D1565000
|
unkown image
|
page readonly
|
|
|
|
F80000
|
heap private
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
E29000
|
unkown
|
page read and write
|
|
|
|
294AC002000
|
unkown
|
page read and write
|
|
|
|
7FF597593000
|
unkown image
|
page readonly
|
|
|
|
E52000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C8200000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
2088E8CE000
|
unkown
|
page read and write
|
|
|
|
146C8B5B000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
23F0000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B79CF77000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
heap private
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
146C82EC000
|
unkown
|
page read and write
|
|
|
|
7DF5AC862000
|
unkown image
|
page readonly
|
|
|
|
4E50000
|
unkown image
|
page readonly
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
50E0000
|
unkown
|
page read and write
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
9D7000
|
unkown
|
page read and write
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
7FF59774F000
|
unkown image
|
page readonly
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
146C8BAF000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
2088E690000
|
unkown image
|
page readonly
|
|
|
|
C91000
|
stack
|
page read and write
|
|
|
|
E61000
|
unkown
|
page read and write
|
|
|
|
7DF5829B2000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
5F21000
|
unkown
|
page read and write
|
|
|
|
1260000
|
heap private
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
146C8258000
|
unkown
|
page read and write
|
|
|
|
7FF56D738000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
E17000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
7FF56CB3C000
|
unkown image
|
page readonly
|
|
|
|
7FF56D3F6000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
122D000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7FF590CEF000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C9000000
|
unkown
|
page read and write
|
|
|
|
7FF56D183000
|
unkown image
|
page readonly
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
7DF5E66D2000
|
unkown image
|
page readonly
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
E8C000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF56C790000
|
unkown image
|
page readonly
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
146C8780000
|
unkown image
|
page readonly
|
|
|
|
146C8B00000
|
unkown
|
page read and write
|
|
|
|
7FF56D830000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
2088E800000
|
unkown image
|
page readonly
|
|
|
|
E9A000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
280F000
|
stack
|
page read and write
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
146C8600000
|
unkown image
|
page readonly
|
|
|
|
23F0000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
6A9A000
|
unkown
|
page read and write
|
|
|
|
528E000
|
stack
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
7FF56CCC1000
|
unkown image
|
page readonly
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
CF0000
|
stack
|
page read and write
|
|
|
|
7FF5D158F000
|
unkown image
|
page readonly
|
|
|
|
52F0000
|
unkown
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
7DF480870000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
2370000
|
unkown image
|
page read and write
|
|
|
|
7DF5829A0000
|
unkown image
|
page readonly
|
|
|
|
5E5E000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DF0000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
6A8C000
|
unkown
|
page read and write
|
|
|
|
7FF56D81A000
|
unkown image
|
page readonly
|
|
|
|
EFD000
|
unkown
|
page execute and read and write
|
|
|
|
146C82BB000
|
unkown
|
page read and write
|
|
|
|
7FF56D82E000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
2088E7A0000
|
unkown
|
page read and write
|
|
|
|
146C8B7A000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF56D914000
|
unkown image
|
page readonly
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
BDA000
|
unkown
|
page read and write
|
|
|
|
F0A000
|
unkown
|
page execute and read and write
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
146C8B62000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C82ED000
|
unkown
|
page read and write
|
|
|
|
7DF5A5E50000
|
unkown image
|
page readonly
|
|
|
|
5FF1000
|
stack
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
66BE000
|
stack
|
page read and write
|
|
|
|
7F442000
|
unkown image
|
page readonly
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
7F452000
|
unkown image
|
page readonly
|
|
|
|
7FF56CBDB000
|
unkown image
|
page readonly
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
2088E8CE000
|
unkown
|
page read and write
|
|
|
|
146C8B7F000
|
unkown
|
page read and write
|
|
|
|
73D937C000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
F0D000
|
unkown
|
page execute and read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7FF56D82A000
|
unkown image
|
page readonly
|
|
|
|
C90000
|
stack
|
page read and write
|
|
|
|
7FF56CACB000
|
unkown image
|
page readonly
|
|
|
|
7FF590CC0000
|
unkown image
|
page readonly
|
|
|
|
2380000
|
unkown image
|
page readonly
|
|
|
|
146C8B98000
|
unkown
|
page read and write
|
|
|
|
5280000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
146C82A6000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
F9CC9FE000
|
stack
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
7FF59765C000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF5977DA000
|
unkown image
|
page readonly
|
|
|
|
146C826F000
|
unkown
|
page read and write
|
|
|
|
7FF59771C000
|
unkown image
|
page readonly
|
|
|
|
E16000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
7DF5829B0000
|
unkown image
|
page readonly
|
|
|
|
146C823C000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF5975EB000
|
unkown image
|
page readonly
|
|
|
|
1BE2C302000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
146C8B7F000
|
unkown
|
page read and write
|
|
|
|
4E2D000
|
unkown
|
page read and write
|
|
|
|
294AC013000
|
unkown
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
146C9063000
|
unkown
|
page read and write
|
|
|
|
7FF5D1403000
|
unkown image
|
page readonly
|
|
|
|
7FF590A40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D14CC000
|
unkown image
|
page readonly
|
|
|
|
23FF8913000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
549D000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
9BA38F7000
|
stack
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
EE0000
|
unkown
|
page read and write
|
|
|
|
2A52000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5B17000
|
unkown
|
page read and write
|
|
|
|
23FF85E0000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
146C8B8E000
|
unkown
|
page read and write
|
|
|
|
50B0000
|
unkown
|
page read and write
|
|
|
|
BE4000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
2639000
|
unkown
|
page read and write
|
|
|
|
7FF597654000
|
unkown image
|
page readonly
|
|
|
|
7FF56D6DA000
|
unkown image
|
page readonly
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
55F4000
|
unkown
|
page read and write
|
|
|
|
F9CCCFE000
|
stack
|
page read and write
|
|
|
|
7FF5D1313000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
2B70000
|
heap private
|
page execute and read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
7FF59771F000
|
unkown image
|
page readonly
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
7FF5D1441000
|
unkown image
|
page readonly
|
|
|
|
B79D07D000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C8BCF000
|
unkown
|
page read and write
|
|
|
|
73D92FF000
|
stack
|
page read and write
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
2088E885000
|
heap private
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
9BA39FE000
|
stack
|
page read and write
|
|
|
|
DB0000
|
heap default
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
206F000
|
unkown image
|
page readonly
|
|
|
|
53AE000
|
stack
|
page read and write
|
|
|
|
55B0000
|
unkown
|
page read and write
|
|
|
|
1DF9000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page read and write
|
|
|
|
BE9000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF5976EE000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
63FE000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
1214000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
1300000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
2640000
|
unkown
|
page read and write
|
|
|
|
52CE000
|
stack
|
page read and write
|
|
|
|
7FF56CCC2000
|
unkown image
|
page readonly
|
|
|
|
146C81D0000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
55ED000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7DF5829A2000
|
unkown image
|
page readonly
|
|
|
|
50C1000
|
unkown
|
page read and write
|
|
|
|
7FF597727000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8249000
|
unkown
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
F9CC6FE000
|
stack
|
page read and write
|
|
|
|
E8C000
|
unkown
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
7DF5A5E32000
|
unkown image
|
page readonly
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
146C80D0000
|
unkown image
|
page readonly
|
|
|
|
E61000
|
unkown
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
146C8B99000
|
unkown
|
page read and write
|
|
|
|
5463000
|
unkown
|
page read and write
|
|
|
|
146C8B80000
|
unkown
|
page read and write
|
|
|
|
4F30000
|
unkown
|
page read and write
|
|
|
|
7FF5D1120000
|
unkown image
|
page readonly
|
|
|
|
23FF8A00000
|
unkown image
|
page readonly
|
|
|
|
7D2000
|
unkown image
|
page readonly
|
|
|
|
146C80A0000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
7DF5829A0000
|
unkown image
|
page readonly
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
5461000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
B3C000
|
stack
|
page read and write
|
|
|
|
5E40000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
5440000
|
unkown
|
page execute and read and write
|
|
|
|
15F0000
|
unkown image
|
page readonly
|
|
|
|
5E30000
|
unkown
|
page read and write
|
|
|
|
5E70000
|
unkown
|
page read and write
|
|
|
|
2108000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
1470000
|
unkown image
|
page readonly
|
|
|
|
CB0000
|
stack
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7FF5D1644000
|
unkown image
|
page readonly
|
|
|
|
E89000
|
unkown
|
page read and write
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
C90000
|
stack
|
page execute and read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
D65000
|
heap default
|
page read and write
|
|
|
|
5B00000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
1BE2C080000
|
unkown image
|
page readonly
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
5FD0000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7DF581D42000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF59763D000
|
unkown image
|
page readonly
|
|
|
|
F17000
|
unkown
|
page execute and read and write
|
|
|
|
27CE000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
DEF000
|
heap default
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
BBD000
|
unkown
|
page read and write
|
|
|
|
294AC4D0000
|
unkown image
|
page readonly
|
|
|
|
E9A000
|
unkown
|
page read and write
|
|
|
|
2BA0000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
23FF885E000
|
unkown
|
page read and write
|
|
|
|
4E04000
|
heap private
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
7FF56D5B0000
|
unkown image
|
page readonly
|
|
|
|
4E51000
|
unkown
|
page read and write
|
|
|
|
549C000
|
unkown
|
page read and write
|
|
|
|
294ABF90000
|
heap private
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
207F000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5EA0000
|
unkown
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4E1B000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C8308000
|
unkown
|
page read and write
|
|
|
|
23DD000
|
unkown
|
page read and write
|
|
|
|
7FF56CBBA000
|
unkown image
|
page readonly
|
|
|
|
6BB000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
23FF88A1000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
1BE2C23C000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C8910000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
C86000
|
stack
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
73D907A000
|
unkown
|
page read and write
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
7DF581D60000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
F9CCAF7000
|
stack
|
page read and write
|
|
|
|
146C8BA5000
|
unkown
|
page read and write
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
6400000
|
unkown
|
page read and write
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
146C82F7000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
F2B000
|
unkown
|
page execute and read and write
|
|
|
|
F50000
|
unkown
|
page execute and read and write
|
|
|
|
55F0000
|
unkown
|
page execute and read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
2380000
|
unkown image
|
page readonly
|
|
|
|
E70000
|
stack
|
page read and write
|
|
|
|
5F20000
|
unkown
|
page read and write
|
|
|
|
1BE2C253000
|
unkown
|
page read and write
|
|
|
|
5DED000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF5976F0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E66E2000
|
unkown image
|
page readonly
|
|
|
|
2113000
|
unkown image
|
page readonly
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
23FF8900000
|
unkown
|
page read and write
|
|
|
|
F9CC77D000
|
stack
|
page read and write
|
|
|
|
650000
|
unkown image
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
1BE2C070000
|
unkown image
|
page readonly
|
|
|
|
5A0E000
|
stack
|
page read and write
|
|
|
|
7FF5D155E000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5FA0000
|
stack
|
page execute and read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF56CA91000
|
unkown image
|
page readonly
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7F810000
|
unkown image
|
page readonly
|
|
|
|
146C8253000
|
unkown
|
page read and write
|
|
|
|
146C8B7F000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
7FF5D154C000
|
unkown image
|
page readonly
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
1BE2C28E000
|
unkown
|
page read and write
|
|
|
|
12F0000
|
unkown image
|
page readonly
|
|
|
|
5EC0000
|
unkown
|
page read and write
|
|
|
|
D2E000
|
stack
|
page read and write
|
|
|
|
7FF5972B0000
|
unkown image
|
page readonly
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
11CE000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7DF5E66E0000
|
unkown image
|
page readonly
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
7DF581D60000
|
unkown image
|
page readonly
|
|
|
|
E90000
|
stack
|
page read and write
|
|
|
|
23FF85C0000
|
unkown image
|
page read and write
|
|
|
|
5E1D000
|
stack
|
page read and write
|
|
|
|
7FF5D1651000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
F1A000
|
unkown
|
page execute and read and write
|
|
|
|
20F4000
|
unkown image
|
page readonly
|
|
|
|
7FF56D867000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
146C8B98000
|
unkown
|
page read and write
|
|
|
|
3929000
|
unkown
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
heap private
|
page execute and read and write
|
|
|
|
7FF590613000
|
unkown image
|
page readonly
|
|
|
|
2B40000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
294AC660000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C8B96000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FBD0000
|
unkown image
|
page readonly
|
|
|
|
7FF56D72B000
|
unkown image
|
page readonly
|
|
|
|
294ABF80000
|
unkown image
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
3E83000
|
unkown
|
page read and write
|
|
|
|
F9CCBFF000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
7FF5D154A000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56D39E000
|
unkown image
|
page readonly
|
|
|
|
7FF56D664000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
1BE2C040000
|
heap private
|
page read and write
|
|
|
|
590F000
|
stack
|
page read and write
|
|
|
|
50B0000
|
unkown
|
page read and write
|
|
|
|
146C8090000
|
heap private
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
E9A000
|
unkown
|
page read and write
|
|
|
|
7DF581D52000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E36000
|
stack
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
27BD07A000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
5B00000
|
unkown
|
page read and write
|
|
|
|
9BA34FE000
|
stack
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
52A0000
|
heap private
|
page read and write
|
|
|
|
7DF4AA730000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
27BCF7B000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
7FF56CCB4000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5430000
|
unkown
|
page read and write
|
|
|
|
7DF5A5E40000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC860000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
EE1000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D1421000
|
unkown image
|
page readonly
|
|
|
|
65BE000
|
stack
|
page read and write
|
|
|
|
146C8B61000
|
unkown
|
page read and write
|
|
|
|
27BD679000
|
stack
|
page read and write
|
|
|
|
B79CC7E000
|
stack
|
page read and write
|
|
|
|
1BE2C1A0000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
543F000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
146C8316000
|
unkown
|
page read and write
|
|
|
|
5F80000
|
unkown
|
page read and write
|
|
|
|
120C000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
2F6E000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56C947000
|
unkown image
|
page readonly
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
52F0000
|
unkown
|
page read and write
|
|
|
|
7DF5AC880000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
7F7B0000
|
unkown
|
page execute and read and write
|
|
|
|
5268000
|
heap private
|
page read and write
|
|
|
|
1BE2C278000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
27BD57C000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
7DF5E66D0000
|
unkown image
|
page readonly
|
|
|
|
BDB000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
EA0000
|
stack
|
page read and write
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
146C825C000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
619E000
|
stack
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
7FF56D72E000
|
unkown image
|
page readonly
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
7DF5A5E30000
|
unkown image
|
page readonly
|
|
|
|
294ABFA0000
|
unkown image
|
page readonly
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
5F40000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
heap private
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
146C8BBA000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
E1F000
|
unkown
|
page read and write
|
|
|
|
1BE2CA02000
|
unkown
|
page read and write
|
|
|
|
5C71000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CAB1000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
146C82DE000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
7FF5D15BF000
|
unkown image
|
page readonly
|
|
|
|
2088E670000
|
unkown image
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
6A93000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
146C8BCF000
|
unkown
|
page read and write
|
|
|
|
7FF56D630000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
E87000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
20E6000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1126000
|
unkown image
|
page readonly
|
|
|
|
7FF590CCB000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7DF5A5E42000
|
unkown image
|
page readonly
|
|
|
|
B79C9EE000
|
stack
|
page read and write
|
|
|
|
1BE2C300000
|
unkown
|
page read and write
|
|
|
|
7FF590D1E000
|
unkown image
|
page readonly
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
294AC2D0000
|
unkown image
|
page readonly
|
|
|
|
2088E8C5000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CBBC000
|
unkown image
|
page readonly
|
|
|
|
23FF8866000
|
unkown
|
page read and write
|
|
|
|
27BCB0B000
|
unkown
|
page read and write
|
|
|
|
7FF5975D1000
|
unkown image
|
page readonly
|
|
|
|
2B81000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
5F5C000
|
stack
|
page read and write
|
|
|
|
4F7E000
|
stack
|
page read and write
|
|
|
|
CA0000
|
stack
|
page read and write
|
|
|
|
8DB000
|
unkown
|
page read and write
|
|
|
|
7FF56D89E000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
F15000
|
unkown
|
page execute and read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
C06000
|
heap default
|
page read and write
|
|
|
|
7FF56CC4D000
|
unkown image
|
page readonly
|
|
|
|
146C80F0000
|
heap default
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
146C8250000
|
unkown
|
page read and write
|
|
|
|
146C8B58000
|
unkown
|
page read and write
|
|
|
|
146C827E000
|
unkown
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
6A93000
|
unkown
|
page read and write
|
|
|
|
5E69000
|
unkown
|
page read and write
|
|
|
|
7FF56D85F000
|
unkown image
|
page readonly
|
|
|
|
5E50000
|
unkown
|
page read and write
|
|
|
|
5580000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
E46000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CC38000
|
unkown image
|
page readonly
|
|
|
|
7FF56D783000
|
unkown image
|
page readonly
|
|
|
|
27BCB8E000
|
stack
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
7FF5974A4000
|
unkown image
|
page readonly
|
|
|
|
7FF5D1135000
|
unkown image
|
page readonly
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
294ABFC0000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
146C80C0000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
2113000
|
unkown image
|
page readonly
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
5C6D000
|
stack
|
page read and write
|
|
|
|
4D6C000
|
stack
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
4DC8000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FF5975EE000
|
unkown image
|
page readonly
|
|
|
|
B00000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
1BE2C313000
|
unkown
|
page read and write
|
|
|
|
7FF590CF8000
|
unkown image
|
page readonly
|
|
|
|
E8C000
|
unkown
|
page read and write
|
|
|
|
7FF56D77D000
|
unkown image
|
page readonly
|
|
|
|
67BF000
|
stack
|
page read and write
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
23FF8C00000
|
unkown image
|
page readonly
|
|
|
|
EB0000
|
stack
|
page read and write
|
|
|
|
7FF56D7D0000
|
unkown image
|
page readonly
|
|
|
|
2C3D000
|
unkown
|
page read and write
|
|
|
|
7FF590DA4000
|
unkown image
|
page readonly
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
4DA0000
|
unkown
|
page read and write
|
|
|
|
E40000
|
stack
|
page read and write
|
|
|
|
CE0000
|
heap private
|
page read and write
|
|
|
|
7FF56D3F0000
|
unkown image
|
page readonly
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
146C8910000
|
unkown
|
page read and write
|
|
|
|
C93000
|
stack
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
EC0000
|
stack
|
page read and write
|
|
|
|
C8D000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
1BE2C050000
|
unkown image
|
page readonly
|
|
|
|
BCC000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
7FF5D145B000
|
unkown image
|
page readonly
|
|
|
|
B3A000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
274E000
|
stack
|
page read and write
|
|
|
|
146C8B75000
|
unkown
|
page read and write
|
|
|
|
7FF590D04000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
3E52000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C8B8E000
|
unkown
|
page read and write
|
|
|
|
B79D17E000
|
stack
|
page read and write
|
|
|
|
7FF56D5EB000
|
unkown image
|
page readonly
|
|
|
|
5F20000
|
unkown
|
page read and write
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
BB9000
|
unkown
|
page read and write
|
|
|
|
50E0000
|
unkown
|
page read and write
|
|
|
|
7FBC2000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
5FC0000
|
stack
|
page read and write
|
|
|
|
7FF59776D000
|
unkown image
|
page readonly
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
7FF5D15A4000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
F22000
|
unkown
|
page read and write
|
|
|
|
23FF889E000
|
unkown
|
page read and write
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
9BA37FB000
|
stack
|
page read and write
|
|
|
|
4E3C000
|
unkown
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
1BE2C780000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
1BE2C26F000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
5E00000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
2BA0000
|
unkown
|
page read and write
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page execute and read and write
|
|
|
|
D60000
|
heap default
|
page read and write
|
|
|
|
294AC05D000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8B8C000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
E18000
|
unkown
|
page read and write
|
|
|
|
294AC108000
|
unkown
|
page read and write
|
|
|
|
7FF5D14B3000
|
unkown image
|
page readonly
|
|
|
|
4E00000
|
heap private
|
page read and write
|
|
|
|
5E50000
|
unkown
|
page read and write
|
|
|
|
23FF8600000
|
unkown image
|
page readonly
|
|
|
|
7FF590DAA000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC862000
|
unkown image
|
page readonly
|
|
|
|
7FF56D7D2000
|
unkown image
|
page readonly
|
|
|
|
7DF5829A2000
|
unkown image
|
page readonly
|
|
|
|
146C8B15000
|
unkown
|
page read and write
|
|
|
|
7FF59773A000
|
unkown image
|
page readonly
|
|
|
|
5E40000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
27BD47E000
|
stack
|
page read and write
|
|
|
|
7FF56D6F1000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
5270000
|
unkown
|
page read and write
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
7FF56CC3E000
|
unkown image
|
page readonly
|
|
|
|
23FF8908000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E90000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C8B0E000
|
unkown
|
page read and write
|
|
|
|
F02000
|
unkown
|
page read and write
|
|
|
|
5E50000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
EE1000
|
stack
|
page read and write
|
|
|
|
146C8B98000
|
unkown
|
page read and write
|
|
|
|
146C88A0000
|
unkown image
|
page write copy
|
|
|
|
146C8B68000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
1BE2C27D000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
E17000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CCBA000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
9E0000
|
unkown image
|
page readonly
|
|
|
|
7FF597541000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
DE2000
|
heap default
|
page read and write
|
|
|
|
5262000
|
heap private
|
page read and write
|
|
|
|
7FF5D1560000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7DF5829B2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D12D7000
|
unkown image
|
page readonly
|
|
|
|
7DF581D42000
|
unkown image
|
page readonly
|
|
|
|
7FF56D8A6000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF590D2E000
|
unkown image
|
page readonly
|
|
|
|
1210000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
294ABFD0000
|
unkown image
|
page readonly
|
|
|
|
E1E000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
846000
|
unkown image
|
page readonly
|
|
|
|
2088E7F0000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
E87000
|
unkown
|
page read and write
|
|
|
|
294ABFF0000
|
heap default
|
page read and write
|
|
|
|
7DF5A5E40000
|
unkown image
|
page readonly
|
|
|
|
6000000
|
stack
|
page read and write
|
|
|
|
7DF5A5E50000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4E30000
|
unkown
|
page read and write
|
|
|
|
146C827C000
|
unkown
|
page read and write
|
|
|
|
146C8255000
|
unkown
|
page read and write
|
|
|
|
23F0000
|
unkown image
|
page readonly
|
|
|
|
2088EBA0000
|
unkown image
|
page readonly
|
|
|
|
4E2A000
|
unkown
|
page read and write
|
|
|
|
23FF85D0000
|
heap private
|
page read and write
|
|
|
|
2524000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
2088E8B6000
|
heap default
|
page read and write
|
|
|
|
5D70000
|
unkown image
|
page read and write
|
|
|
|
2B35000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
52F0000
|
unkown
|
page read and write
|
|
|
|
7FF56D898000
|
unkown image
|
page readonly
|
|
|
|
E61000
|
unkown
|
page read and write
|
|
|
|
ED4000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
7F460000
|
unkown image
|
page readonly
|
|
|
|
50E0000
|
unkown
|
page read and write
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page read and write
|
|
|
|
E61000
|
unkown
|
page read and write
|
|
|
|
B43000
|
stack
|
page read and write
|
|
|
|
7F440000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
stack
|
page read and write
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
9BA347C000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5600000
|
unkown
|
page read and write
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
C84000
|
stack
|
page read and write
|
|
|
|
E27000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
7FF5976EA000
|
unkown image
|
page readonly
|
|
|
|
F50000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
2868000
|
heap default
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
4DC8000
|
unkown
|
page read and write
|
|
|
|
F40000
|
heap private
|
page read and write
|
|
|
|
294AC113000
|
unkown
|
page read and write
|
|
|
|
E80000
|
stack
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
7FF5D15D6000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
6A8D000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
C85000
|
stack
|
page read and write
|
|
|
|
524C000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
7DF5A5E30000
|
unkown image
|
page readonly
|
|
|
|
7DF5AC870000
|
unkown image
|
page readonly
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
stack
|
page read and write
|
|
|
|
4D90000
|
unkown
|
page read and write
|
|
|
|
89F000
|
unkown
|
page read and write
|
|
|
|
549D000
|
unkown
|
page read and write
|
|
|
|
395C000
|
unkown
|
page read and write
|
|
|
|
C82000
|
stack
|
page read and write
|
|
|
|
5FF0000
|
stack
|
page read and write
|
|
|
|
CDD000
|
unkown
|
page execute and read and write
|
|
|
|
5300000
|
unkown
|
page execute and read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
23FF8853000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown image
|
page readonly
|
|
|
|
73D9279000
|
stack
|
page read and write
|
|
|
|
CB0000
|
stack
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
F70000
|
unkown
|
page read and write
|
|
|
|
6A6C000
|
stack
|
page read and write
|
|
|
|
146C906A000
|
unkown
|
page read and write
|
|
|
|
7FAB0000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
23FF8863000
|
unkown
|
page read and write
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
146C82D5000
|
unkown
|
page read and write
|
|
|
|
60BD000
|
stack
|
page read and write
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
7FF597769000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
6A93000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
7FF5D15CE000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D158C000
|
unkown image
|
page readonly
|
|
|
|
7FF56D187000
|
unkown image
|
page readonly
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
7FF56D445000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
6A8C000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
EE1000
|
stack
|
page read and write
|
|
|
|
7FBD0000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
146C824D000
|
unkown
|
page read and write
|
|
|
|
7FF5D15AA000
|
unkown image
|
page readonly
|
|
|
|
294AC03C000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
4E41000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
stack
|
page read and write
|
|
|
|
1250000
|
unkown
|
page read and write
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
7FF56D30E000
|
unkown image
|
page readonly
|
|
|
|
146C8227000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7FF597758000
|
unkown image
|
page readonly
|
|
|
|
29A6000
|
unkown
|
page read and write
|
|
|
|
7DF5A5E42000
|
unkown image
|
page readonly
|
|
|
|
B60000
|
unkown image
|
page read and write
|
|
|
|
7FF56D804000
|
unkown image
|
page readonly
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
F67000
|
heap private
|
page read and write
|
|
|
|
294AC750000
|
unkown
|
page read and write
|
|
|
|
C18000
|
heap default
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
1241000
|
unkown
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
146C8920000
|
unkown image
|
page read and write
|
|
|
|
73D91FF000
|
stack
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
4DC7000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
5260000
|
heap private
|
page read and write
|
|
|
|
146C8B87000
|
unkown
|
page read and write
|
|
|
|
7FF56D83B000
|
unkown image
|
page readonly
|
|
|
|
696D000
|
stack
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
E87000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7FF5D0C7E000
|
unkown image
|
page readonly
|
|
|
|
5C76000
|
unkown
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E61000
|
unkown
|
page read and write
|
|
|
|
7FF56CC1A000
|
unkown image
|
page readonly
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
6030000
|
unkown
|
page read and write
|
|
|
|
7FF5D164A000
|
unkown image
|
page readonly
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7FF56D794000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B8A000
|
heap default
|
page read and write
|
|
|
|
146C8B96000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
23FF8800000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
6A94000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
2113000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
60FF000
|
stack
|
page read and write
|
|
|
|
4F26000
|
unkown
|
page read and write
|
|
|
|
7FF56D681000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
4DE0000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7DF581D40000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
BC9000
|
unkown
|
page read and write
|
|
|
|
D00000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
E22000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
23FF8860000
|
unkown
|
page read and write
|
|
|
|
BA6000
|
heap default
|
page read and write
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
657E000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
7FF590DB1000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
146C8B7F000
|
unkown
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
55E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D155A000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4FBE000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
294AC070000
|
unkown
|
page read and write
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
146C824F000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
23FF85E0000
|
unkown image
|
page readonly
|
|
|
|
146C8256000
|
unkown
|
page read and write
|
|
|
|
29AC000
|
unkown
|
page read and write
|
|
|
|
5F50000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
146C8B86000
|
unkown
|
page read and write
|
|
|
|
4D80000
|
unkown
|
page execute and read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
E80000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
7FF56CC46000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
146C82A9000
|
unkown
|
page read and write
|
|
|
|
7FF56CBFC000
|
unkown image
|
page readonly
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7DF5E66D2000
|
unkown image
|
page readonly
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
7FF597643000
|
unkown image
|
page readonly
|
|
|
|
73D917F000
|
stack
|
page read and write
|
|
|
|
146C8B10000
|
unkown
|
page read and write
|
|
|
|
7FF590D14000
|
unkown image
|
page readonly
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
5FA0000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
BEA000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
1270000
|
unkown image
|
page readonly
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
7F340000
|
unkown image
|
page readonly
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
146C8B88000
|
unkown
|
page read and write
|
|
|
|
294AC000000
|
unkown
|
page read and write
|
|
|
|
5B00000
|
unkown
|
page read and write
|
|
|
|
7FF56D922000
|
unkown image
|
page readonly
|
|
|
|
146C8B97000
|
unkown
|
page read and write
|
|
|
|
146C8400000
|
unkown image
|
page readonly
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
D10000
|
stack
|
page read and write
|
|
|
|
6000000
|
stack
|
page read and write
|
|
|
|
146C8252000
|
unkown
|
page read and write
|
|
|
|
4DC7000
|
unkown
|
page read and write
|
|
|
|
7FF5D15C8000
|
unkown image
|
page readonly
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
1BE2C050000
|
unkown image
|
page readonly
|
|
|
|
7FF56CBD0000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7FF56CC2F000
|
unkown image
|
page readonly
|
|
|
|
146C8B49000
|
unkown
|
page read and write
|
|
|
|
1BE2C24D000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
7FF597744000
|
unkown image
|
page readonly
|
|
|
|
2780000
|
heap default
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
EE1000
|
stack
|
page read and write
|
|
|
|
7F442000
|
unkown image
|
page readonly
|
|
|
|
5B58000
|
unkown
|
page read and write
|
|
|
|
23FF8630000
|
heap default
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
9BA367B000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5FB0000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
62DE000
|
stack
|
page read and write
|
|
|
|
146C8229000
|
unkown
|
page read and write
|
|
|
|
1227000
|
unkown
|
page read and write
|
|
|
|
5E40000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
4A3E000
|
stack
|
page read and write
|
|
|
|
50D0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
2088E7C0000
|
unkown
|
page read and write
|
|
|
|
146C8B66000
|
unkown
|
page read and write
|
|
|
|
27F0000
|
heap private
|
page execute and read and write
|
|
|
|
4F26000
|
unkown
|
page read and write
|
|
|
|
7FF56CBCA000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
2088ED20000
|
unkown image
|
page readonly
|
|
|
|
5590000
|
unkown
|
page read and write
|
|
|
|
4E10000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
7DF581D50000
|
unkown image
|
page readonly
|
|
|
|
BDE000
|
unkown
|
page read and write
|
|
|
|
7FF56CA73000
|
unkown image
|
page readonly
|
|
|
|
55AE000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
146C8B60000
|
unkown
|
page read and write
|
|
|
|
7F440000
|
unkown image
|
page readonly
|
|
|
|
E21000
|
unkown
|
page read and write
|
|
|
|
4E35000
|
unkown
|
page read and write
|
|
|
|
1BE2C22A000
|
unkown
|
page read and write
|
|
|
|
146C8BA5000
|
unkown
|
page read and write
|
|
|
|
7FF597734000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
7FF56D874000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
146C8080000
|
unkown image
|
page read and write
|
|
|
|
7DF5AC872000
|
unkown image
|
page readonly
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7DF5E66E0000
|
unkown image
|
page readonly
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
146C8B58000
|
unkown
|
page read and write
|
|
|
|
146C8B67000
|
unkown
|
page read and write
|
|
|
|
9BA3AFE000
|
stack
|
page read and write
|
|
|
|
7FF5D1652000
|
unkown image
|
page readonly
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
9BA36FE000
|
stack
|
page read and write
|
|
|
|
7DF5AC880000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
7FF5D14AD000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5FF0000
|
stack
|
page read and write
|
|
|
|
146C82B0000
|
unkown
|
page read and write
|
|
|
|
E2B000
|
unkown
|
page read and write
|
|
|
|
7FF56D847000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
D5E000
|
stack
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
7FF56CF4E000
|
unkown image
|
page readonly
|
|
|
|
C5B000
|
unkown
|
page read and write
|
|
|
|
7FF56D392000
|
unkown image
|
page readonly
|
|
|
|
146C8B96000
|
unkown
|
page read and write
|
|
|
|
5270000
|
unkown
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
5BA0000
|
unkown
|
page read and write
|
|
|
|
E0E000
|
unkown
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
F60000
|
heap private
|
page read and write
|
|
|
|
146C8B58000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
121B000
|
unkown
|
page read and write
|
|
|
|
6020000
|
unkown
|
page read and write
|
|
|
|
1BE2C213000
|
unkown
|
page read and write
|
|
|
|
7DF5E66F0000
|
unkown image
|
page readonly
|
|
|
|
2088E8C6000
|
unkown
|
page read and write
|
|
|
|
667E000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
7FF56D6D3000
|
unkown image
|
page readonly
|
|
|
|
146C8B62000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
F06000
|
unkown
|
page execute and read and write
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
E40000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E51000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF56D8A9000
|
unkown image
|
page readonly
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
EE1000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF56D733000
|
unkown image
|
page readonly
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E51000
|
unkown
|
page read and write
|
|
|
|
5F60000
|
unkown
|
page read and write
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
E45000
|
unkown
|
page read and write
|
|
|
|
5450000
|
heap private
|
page execute and read and write
|
|
|
|
7FF56D7FB000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5E00000
|
unkown
|
page read and write
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
23FF887E000
|
unkown
|
page read and write
|
|
|
|
146C8870000
|
unkown image
|
page readonly
|
|
|
|
5FF0000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5FC0000
|
stack
|
page read and write
|
|
|
|
6A94000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF597707000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C80A0000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
DAE000
|
stack
|
page read and write
|
|
|
|
7DF5AC860000
|
unkown image
|
page readonly
|
|
|
|
2088E8AB000
|
heap default
|
page read and write
|
|
|
|
7FF56D3A2000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7FF5D14C4000
|
unkown image
|
page readonly
|
|
|
|
146C8B98000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
7FF56D835000
|
unkown image
|
page readonly
|
|
|
|
7FBB0000
|
unkown image
|
page readonly
|
|
|
|
F1B000
|
unkown
|
page execute and read and write
|
|
|
|
2088E9A0000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
55B0000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
7DF5829C0000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56D884000
|
unkown image
|
page readonly
|
|
|
|
146C8BCF000
|
unkown
|
page read and write
|
|
|
|
294AC08A000
|
unkown
|
page read and write
|
|
|
|
4E27000
|
unkown
|
page read and write
|
|
|
|
299F000
|
stack
|
page read and write
|
|
|
|
5290000
|
unkown
|
page read and write
|
|
|
|
7FF5975B1000
|
unkown image
|
page readonly
|
|
|
|
7FF56D79C000
|
unkown image
|
page readonly
|
|
|
|
7DF5E66E2000
|
unkown image
|
page readonly
|
|
|
|
BCF000
|
unkown
|
page read and write
|
|
|
|
146C8B8E000
|
unkown
|
page read and write
|
|
|
|
146C8A02000
|
unkown
|
page read and write
|
|
|
|
23FF8813000
|
unkown
|
page read and write
|
|
|
|
C85000
|
stack
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
7FF56CC14000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
7FF56D87A000
|
unkown image
|
page readonly
|
|
|
|
2380000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5E60000
|
unkown
|
page read and write
|
|
|
|
2113000
|
unkown image
|
page readonly
|
|
|
|
E87000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7FF56D7E3000
|
unkown image
|
page readonly
|
|
|
|
D10000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
146C8BAC000
|
unkown
|
page read and write
|
|
|
|
2A03000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
146C8B7D000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF56CB34000
|
unkown image
|
page readonly
|
|
|
|
7FF5972C5000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
7FF597766000
|
unkown image
|
page readonly
|
|
|
|
6A97000
|
unkown
|
page read and write
|
|
|
|
7FF56C7A5000
|
unkown image
|
page readonly
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
7FF56CBE7000
|
unkown image
|
page readonly
|
|
|
|
146C8B8C000
|
unkown
|
page read and write
|
|
|
|
7FF56C2E8000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page read and write
|
|
|
|
7FF56C983000
|
unkown image
|
page readonly
|
|
|
|
E50000
|
stack
|
page execute and read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
CA0000
|
stack
|
page read and write
|
|
|
|
118E000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7FF5D13B1000
|
unkown image
|
page readonly
|
|
|
|
23FF8E02000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7DF4A3D00000
|
unkown image
|
page readonly
|
|
|
|
207A000
|
unkown image
|
page readonly
|
|
|
|
123C000
|
unkown
|
page read and write
|
|
|
|
7FF56D80F000
|
unkown image
|
page readonly
|
|
|
|
1BE2C600000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
E2E000
|
stack
|
page read and write
|
|
|
|
623D000
|
unkown
|
page read and write
|
|
|
|
146C8BA9000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
146C8313000
|
unkown
|
page read and write
|
|
|
|
125E000
|
unkown
|
page read and write
|
|
|
|
146C824E000
|
unkown
|
page read and write
|
|
|
|
7FF56CB1D000
|
unkown image
|
page readonly
|
|
|
|
5E90000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
7FBC2000
|
unkown image
|
page readonly
|
|
|
|
CFA000
|
stack
|
page read and write
|
|
|
|
F27000
|
unkown
|
page execute and read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
7FF5D145E000
|
unkown image
|
page readonly
|
|
|
|
146C8302000
|
unkown
|
page read and write
|
|
|
|
7FBC0000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7F922000
|
unkown image
|
page readonly
|
|
|
|
146C8BB2000
|
unkown
|
page read and write
|
|
|
|
5FF0000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
5E30000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF5D1597000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D15B4000
|
unkown image
|
page readonly
|
|
|
|
5B95000
|
unkown
|
page read and write
|
|
|
|
5FE0000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
5E10000
|
unkown
|
page read and write
|
|
|
|
27BD0FE000
|
stack
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
5EB0000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
stack
|
page read and write
|
|
|
|
1BE2C400000
|
unkown image
|
page readonly
|
|
|
|
294AC04D000
|
unkown
|
page read and write
|
|
|
|
F9CC67C000
|
unkown
|
page read and write
|
|
|
|
5B8D000
|
unkown
|
page read and write
|
|
|
|
7FF59775E000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
E42000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7DF581D52000
|
unkown image
|
page readonly
|
|
|
|
7FF56D921000
|
unkown image
|
page readonly
|
|
|
|
7FF5D15D9000
|
unkown image
|
page readonly
|
|
|
|
146C82EA000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7DF4E45A0000
|
unkown image
|
page readonly
|
|
|
|
146C828A000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
2BB0000
|
heap private
|
page read and write
|
|
|
|
E95000
|
stack
|
page read and write
|
|
|
|
5090000
|
unkown
|
page read and write
|
|
|
|
7F920000
|
unkown image
|
page readonly
|
|
|
|
7FF56CACE000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
B79D27F000
|
stack
|
page read and write
|
|
|
|
7FF5976FB000
|
unkown image
|
page readonly
|
|
|
|
146C8BA7000
|
unkown
|
page read and write
|
|
|
|
2380000
|
unkown image
|
page readonly
|
|
|
|
E8C000
|
unkown
|
page read and write
|
|
|
|
2A00000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
7D2000
|
unkown image
|
page readonly
|
|
|
|
7FF56C2EE000
|
unkown image
|
page readonly
|
|
|
|
EF4000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
146C8B90000
|
unkown
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
5FD0000
|
stack
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
EE0000
|
stack
|
page read and write
|
|
|
|
611E000
|
stack
|
page read and write
|
|
|
|
284E000
|
stack
|
page read and write
|
|
|
|
23FF8710000
|
unkown image
|
page readonly
|
|
|
|
CA0000
|
stack
|
page read and write
|
|
|
|
5290000
|
unkown image
|
page read and write
|
|
|
|
E60000
|
stack
|
page read and write
|
|
|
|
2043000
|
unkown image
|
page readonly
|
|
|
|
ED0000
|
stack
|
page read and write
|
|
|
|
F10000
|
unkown
|
page read and write
|
|
|
|
B15000
|
heap default
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
146C8B7F000
|
unkown
|
page read and write
|
|
|
|
27BD1F7000
|
stack
|
page read and write
|
|
|
|
1235000
|
unkown
|
page read and write
|
|
|
|
6C7E000
|
stack
|
page read and write
|
|
|
|
7FF56D7FF000
|
unkown image
|
page readonly
|
|
|
|
20E3000
|
unkown image
|
page readonly
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
50B0000
|
unkown
|
page read and write
|
|
|
|
6400000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B79C96B000
|
unkown
|
page read and write
|
|
|
|
2088E8A0000
|
heap default
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
6A8E000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
5E00000
|
unkown
|
page read and write
|
|
|
|
B79CE7B000
|
stack
|
page read and write
|
|
|
|
7FF590617000
|
unkown image
|
page readonly
|
|
|
|
CD3000
|
unkown
|
page execute and read and write
|
|
|
|
23FF882A000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
50B0000
|
unkown
|
page read and write
|
|
|
|
7FF56D5E3000
|
unkown image
|
page readonly
|
|
|
|
7FF56CF48000
|
unkown image
|
page readonly
|
|
|
|
23FF8D80000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
3BD1000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
E46000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
7DF5E66F0000
|
unkown image
|
page readonly
|
|
|
|
64FE000
|
stack
|
page read and write
|
|
|
|
E30000
|
unkown image
|
page readonly
|
|
|
|
C82000
|
stack
|
page read and write
|
|
|
|
146C8B84000
|
unkown
|
page read and write
|
|
|
|
E1A000
|
unkown
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C825B000
|
unkown
|
page read and write
|
|
|
|
CA0000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
9BA357E000
|
stack
|
page read and write
|
|
|
|
CA0000
|
unkown image
|
page readonly
|
|
|
|
146C8213000
|
unkown
|
page read and write
|
|
|
|
7FF590DB2000
|
unkown image
|
page readonly
|
|
|
|
2A4C000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
EF3000
|
unkown
|
page execute and read and write
|
|
|
|
BE9000
|
unkown
|
page read and write
|
|
|
|
294AC802000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
5F70000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7F450000
|
unkown image
|
page readonly
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
E40000
|
stack
|
page read and write
|
|
|
|
B40000
|
stack
|
page read and write
|
|
|
|
5CEE000
|
stack
|
page read and write
|
|
|
|
493E000
|
stack
|
page read and write
|
|
|
|
7FF5977E2000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
2B60000
|
unkown
|
page read and write
|
|
|
|
5F21000
|
unkown
|
page read and write
|
|
|
|
F03000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FF56C796000
|
unkown image
|
page readonly
|
|
|
|
5B10000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
203D000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
B50000
|
stack
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
4F30000
|
unkown
|
page read and write
|
|
|
|
7FF5976F5000
|
unkown image
|
page readonly
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
B80000
|
heap default
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
27BD2FF000
|
stack
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D0C78000
|
unkown image
|
page readonly
|
|
|
|
E72000
|
stack
|
page read and write
|
|
|
|
2B50000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
23FF885B000
|
unkown
|
page read and write
|
|
|
|
641E000
|
stack
|
page read and write
|
|
|
|
629E000
|
stack
|
page read and write
|
|
|
|
50E0000
|
unkown
|
page read and write
|
|
|
|
146C824B000
|
unkown
|
page read and write
|
|
|
|
CC0000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
7FBB2000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
5F1D000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
2860000
|
heap default
|
page read and write
|
|
|
|
7DF581D40000
|
unkown image
|
page readonly
|
|
|
|
23FF8899000
|
unkown
|
page read and write
|
|
|
|
E40000
|
stack
|
page read and write
|
|
|
|
7FF5D1577000
|
unkown image
|
page readonly
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
846000
|
unkown image
|
page readonly
|
|
|
|
CD4000
|
unkown
|
page read and write
|
|
|
|
294AC100000
|
unkown
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
1170000
|
unkown image
|
page readonly
|
|
|
|
7B8000
|
unkown
|
page read and write
|
|
|
|
2092000
|
unkown image
|
page readonly
|
|
|
|
4E50000
|
unkown
|
page read and write
|
|
|
|
B31000
|
stack
|
page read and write
|
|
|
|
7FF56D711000
|
unkown image
|
page readonly
|
|
|
|
7DF581D50000
|
unkown image
|
page readonly
|
|
|
|
23F0000
|
unkown image
|
page readonly
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
7FF56D91A000
|
unkown image
|
page readonly
|
|
|
|
F60000
|
unkown
|
page read and write
|
|
|
|
1BE2C0A0000
|
heap default
|
page read and write
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
146C824A000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
5FF0000
|
stack
|
page read and write
|
|
|
|
27BCE7E000
|
stack
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
C81000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
23FF8D90000
|
unkown
|
page read and write
|
|
|
|
146C8B96000
|
unkown
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
EFD000
|
unkown
|
page execute and read and write
|
|
|
|
7FF590D0A000
|
unkown image
|
page readonly
|
|
|
|
294AC4E0000
|
unkown image
|
page readonly
|
|
|
|
7FF5976DA000
|
unkown image
|
page readonly
|
|
|
|
DEC000
|
heap default
|
page read and write
|
|
|
|
7FF5D15DD000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
5F9E000
|
stack
|
page read and write
|
|
|
|
5268000
|
heap private
|
page read and write
|
|
|
|
63DE000
|
stack
|
page read and write
|
|
|
|
7FF590D39000
|
unkown image
|
page readonly
|
|
|
|
73D90FF000
|
stack
|
page read and write
|
|
|
|
4DF0000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
7F910000
|
unkown image
|
page readonly
|
|
|
|
7DF47FC10000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
7FF56D447000
|
unkown image
|
page readonly
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
7FF56D5F6000
|
unkown image
|
page readonly
|
|
|
|
146C8BA7000
|
unkown
|
page read and write
|
|
|
|
1BE2C030000
|
unkown image
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
5E00000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page execute and read and write
|
|
|
|
56B1000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
E87000
|
unkown
|
page read and write
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
1230000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
62FE000
|
stack
|
page read and write
|
|
|
|
B21000
|
stack
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
BDE000
|
unkown
|
page read and write
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
|
|
146C8B85000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
E70000
|
stack
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
2035000
|
unkown image
|
page readonly
|
|
|
|
7FF597467000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF5972B6000
|
unkown image
|
page readonly
|
|
|
|
E30000
|
stack
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
146C9002000
|
unkown
|
page read and write
|
|
|
|
7FF56D671000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
27BD3FA000
|
stack
|
page read and write
|
|
|
|
2088E8CE000
|
unkown
|
page read and write
|
|
|
|
52E0000
|
unkown
|
page read and write
|
|
|
|
7FF56CB23000
|
unkown image
|
page readonly
|
|
|
|
7FF56CC07000
|
unkown image
|
page readonly
|
|
|
|
7FF56CBFF000
|
unkown image
|
page readonly
|
|
|
|
4F25000
|
unkown
|
page read and write
|
|
|
|
5E00000
|
stack
|
page read and write
|
|
|
|
23E0000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
294AC053000
|
unkown
|
page read and write
|
|
|
|
C5F000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown
|
page read and write
|
|
|
|
DBA000
|
heap default
|
page read and write
|
|
|
|
4E24000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56CBD5000
|
unkown image
|
page readonly
|
|
|
|
146C8BA7000
|
unkown
|
page read and write
|
|
|
|
B30000
|
stack
|
page read and write
|
|
|
|
B35000
|
stack
|
page read and write
|
|
|
|
2088E690000
|
unkown image
|
page readonly
|
|
|
|
4DC5000
|
unkown
|
page read and write
|
|
|
|
7FF590CC5000
|
unkown image
|
page readonly
|
|
|
|
7FBC2000
|
unkown image
|
page readonly
|
|
|
|
5E70000
|
unkown
|
page read and write
|
|
|
|
294ABFA0000
|
unkown image
|
page readonly
|
|
|
|
B10000
|
heap default
|
page read and write
|
|
|
|
2088E8B1000
|
unkown
|
page read and write
|
|
|
|
6080000
|
unkown
|
page read and write
|
|
|
|
55B0000
|
unkown
|
page read and write
|
|
|
|
7FF56D85C000
|
unkown image
|
page readonly
|
|
|
|
294AC05D000
|
unkown
|
page read and write
|
|
|
|
23FF8902000
|
unkown
|
page read and write
|
|
|
|
294AC02A000
|
unkown
|
page read and write
|
|
|
|
C80000
|
stack
|
page read and write
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
EAA000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7FF56D5A7000
|
unkown image
|
page readonly
|
|
|
|
4BD8000
|
unkown
|
page read and write
|
|
|
|
7F912000
|
unkown image
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
7F930000
|
unkown image
|
page readonly
|
|
|
|
146C8B80000
|
unkown
|
page read and write
|
|
|
|
23FF8610000
|
unkown image
|
page readonly
|
|
|
|
3901000
|
unkown
|
page read and write
|
|
|
|
7FF590D28000
|
unkown image
|
page readonly
|
|
|
|
2088E880000
|
heap private
|
page read and write
|
|
|
|
E19000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
F12000
|
unkown
|
page read and write
|
|
|
|
E31000
|
stack
|
page read and write
|
|
|
|
5E60000
|
unkown
|
page read and write
|
|
|
|
66BF000
|
stack
|
page read and write
|
|
|
|
623B000
|
unkown
|
page read and write
|
|
|
|
7DF5829C0000
|
unkown image
|
page readonly
|
|
|
|
146C8910000
|
unkown
|
page read and write
|
|
|
|
50BC000
|
unkown
|
page read and write
|
|
|
|
146C81F0000
|
unkown
|
page read and write
|
|
|
|
50C0000
|
unkown
|
page read and write
|
|
|
|
B20000
|
stack
|
page read and write
|
|
There are 1888 hidden memdumps, click here to show them.