VMMap内存分析工具
VMMap是一个运行在windows上的内存Profier工具。按F5刷新数据。
虚拟内存
Private Bytes：进程Private Committed（Dirty部分 -- Heap、Stack、Private Data、模块的数据段等）的虚拟内存字节数 对应VMMap的Private、windows任务管理器中的【提交大小】，资源管理器中的【提交】
Committed（VMMap）：进程Private Committed的虚拟内存字节数 + 进程Shared Committed（Clean部分 -- 以只读方式进行的文件映射、模块的只读数据段、代码段等）的虚拟内存字节数
Virtual Size：进程Reserved的虚拟地址空间字节数 对应VMMap的Size
物理内存
Working Set = WS Private + WS Shareable // 进程占用物理内存总字节数 对应windows任务管理器中的【工作设置(内存)】，资源管理器中的【工作集】
WS Private // 进程独享的物理内存字节数（如：堆内存+栈内存+cow机制创建的内存） 对应windows任务管理器中的【内存(专用工作集)】，资源管理器中的【专用】
WS Shareable // 进程可与其他进程共享的物理内存字节数（如：exe及dll代码段、数据段等） 对应windows资源管理器中的【可共享】
WS Shared // 进程已与其他进程共享的物理内存字节数，WS Shared<=WS Shareable
// 若只启动一个exe实例，那么exe的代码段、数据段等不会被共享，因而就不统计在WS Shared中
Peak Working Set // 物理内存的最高峰字节数 对应windows任务管理器中的【峰值工作设置(内存)】
配置符号表
注1：配置符号表路径srv*G:\Symbols\sys*http://msdl.microsoft.com/download/symbols;G:\Symbols\MyGame
注2：在G:\Symbols\MyGame目录中除了放置pdb外，还需要放对应的exe文件，否则pdb将不能被加载
注3：最后如果配置了Source code paths，在双击对应栈帧时，会打开对应的源文件代码
Select or Launch Process
注1：G2Game可通过命令device.dumpvm打开当前进程的VMMap界面
注2：在Launch and trace a new process时，Timeline、Heap Allocations、Call Tree、Trace按钮才可以点击
注3：Timeline会实时显示各个分类的内存占用
注4：Heap Allocations必须选择Heap下面橙色列表框中的根条目才可用（会显示该根条目下所有的Heap分配）
注5：Call Tree会以Tree的方式展示所有的内存分配和释放（条目太多时会卡死）
注6：Trace以扁平的方式显示每条内存分配，勾上Show all memory operations（条目太多时会卡死）会显示释放的记录
追踪内存分配
原理：Hook RtlAllocateHeap、RtlReAllocateHeap、VirtualAlloc等内存分配释放函数
Heap Allocations
Call Tree
Trace
会将相同调用堆栈聚类到一个树节点下
注：勾上Show all memory operations，会显示RtlCreateHeap(Other)、RtlFreeHeap(Free)释放的内存
RtlAllocateHeap(Commit)
RtlReAllocateHeap(Commit)
RtlReAllocateHeap(Free)
VirtualAlloc
输出UnrealDeviceTool.exe的内存地址空间
注：点击菜单“Edit” -- “Copy All”（Ctrl + A）来复制
"Process:" "UnrealDeviceTool.exe" "PID:" "30028" "Type" "Size" "Committed" "Private" "Total WS" "Private WS" "Shareable WS" "Shared WS" "Locked WS" "Blocks" "Largest" "Total" "4,595,776" "295,180" "35,116" "63,780" "28,868" "34,912" "24,328" "" "938" "" "Free" "137,434,357,632" "" "" "" "" "" "" "" "77" "134,573,246,464" "Heap" "36,160" "29,252" "29,188" "23,856" "23,852" "4" "4" "" "39" "8,192" "Image" "126,036" "126,036" "3,204" "34,056" "2,508" "31,548" "21,052" "" "604" "14,316" "Managed Heap" "" "" "" "" "" "" "" "" "" "" "Mapped File" "81,092" "81,092" "" "1,188" "" "1,188" "1,180" "" "32" "19,240" "Page Table" "" "" "" "" "" "" "" "" "" "" "Private Data" "4,240,760" "2,396" "2,396" "2,336" "2,328" "8" "8" "" "126" "4,194,432" "Shareable" "85,188" "56,076" "" "2,164" "" "2,164" "2,084" "" "104" "21,316" "Stack" "11,264" "328" "328" "180" "180" "" "" "" "33" "1,024" "Unusable" "15,276" "" "" "" "" "" "" "" "" "60" "Address" "Type" "Size" "Committed" "Private" "Total WS" "Private WS" "Shareable WS" "Shared WS" "Locked WS" "Blocks" "Protection" "Details" "0000000010000000" "Image" "5,736" "5,736" "" "140" "" "140" "136" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\Resource.dll" " 0000000010000000" "Image" "5,736" "5,736" "" "140" "" "140" "136" "" "" "Read" "Header" "000000007FFE0000" "Private Data" "4" "4" "4" "4" "" "4" "4" "" "1" "Read" "" " 000000007FFE0000" "Private Data" "4" "4" "4" "4" "" "4" "4" "" "" "Read" "Thread Environment Block" "000000007FFEF000" "Private Data" "4" "4" "4" "4" "" "4" "4" "" "1" "Read" "" " 000000007FFEF000" "Private Data" "4" "4" "4" "4" "" "4" "4" "" "" "Read" "Thread Environment Block" "000000D870600000" "Private Data" "2,048" "92" "92" "92" "92" "" "" "" "5" "Read/Write" "Thread Environment Block" " 000000D870600000" "Private Data" "1,104" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" " 000000D870714000" "Private Data" "68" "68" "68" "68" "68" "" "" "" "" "Read/Write" "Thread Environment Block ID: 25328" " 000000D870725000" "Private Data" "8" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" " 000000D870727000" "Private Data" "24" "24" "24" "24" "24" "" "" "" "" "Read/Write" "Thread Environment Block ID: 9828" " 000000D87072D000" "Private Data" "844" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" "000000D870800000" "Thread Stack" "1,024" "108" "108" "96" "96" "" "" "" "3" "Read/Write/Guard" "Thread ID: 25328" " 000000D870800000" "Thread Stack" "916" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D8708E5000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D8708E8000" "Thread Stack" "96" "96" "96" "96" "96" "" "" "" "" "Read/Write" "" "000000D870900000" "Thread Stack" "1,024" "24" "24" "12" "12" "" "" "" "3" "Read/Write/Guard" "Thread ID: 34044" " 000000D870900000" "Thread Stack" "1,000" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D8709FA000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D8709FD000" "Thread Stack" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "" "000000D870A00000" "Thread Stack" "1,024" "24" "24" "12" "12" "" "" "" "3" "Read/Write/Guard" "Thread ID: 43772" " 000000D870A00000" "Thread Stack" "1,000" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870AFA000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870AFD000" "Thread Stack" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "" "000000D870B00000" "Thread Stack" "1,024" "24" "24" "12" "12" "" "" "" "3" "Read/Write/Guard" "Thread ID: 36264" " 000000D870B00000" "Thread Stack" "1,000" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870BFA000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870BFD000" "Thread Stack" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "" "000000D870C00000" "Thread Stack" "1,024" "20" "20" "8" "8" "" "" "" "3" "Read/Write/Guard" "Thread ID: 40116" " 000000D870C00000" "Thread Stack" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870CFB000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870CFE000" "Thread Stack" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "" "000000D870D00000" "Thread Stack" "1,024" "20" "20" "8" "8" "" "" "" "3" "Read/Write/Guard" "Thread ID: 28748" " 000000D870D00000" "Thread Stack" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870DFB000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870DFE000" "Thread Stack" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "" "000000D870E00000" "Thread Stack" "1,024" "16" "16" "4" "4" "" "" "" "3" "Read/Write/Guard" "Thread ID: 30040" " 000000D870E00000" "Thread Stack" "1,008" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870EFC000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870EFF000" "Thread Stack" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "" "000000D870F00000" "Thread Stack" "1,024" "32" "32" "4" "4" "" "" "" "3" "Read/Write/Guard" "Thread ID: 34676" " 000000D870F00000" "Thread Stack" "992" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D870FF8000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D870FFB000" "Thread Stack" "20" "20" "20" "4" "4" "" "" "" "" "Read/Write" "" "000000D871000000" "Thread Stack" "1,024" "20" "20" "8" "8" "" "" "" "3" "Read/Write/Guard" "Thread ID: 9828" " 000000D871000000" "Thread Stack" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D8710FB000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D8710FE000" "Thread Stack" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "" "000000D871100000" "Thread Stack" "1,024" "20" "20" "8" "8" "" "" "" "3" "Read/Write/Guard" "Thread ID: 41592" " 000000D871100000" "Thread Stack" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D8711FB000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D8711FE000" "Thread Stack" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "" "000000D871200000" "Thread Stack" "1,024" "20" "20" "8" "8" "" "" "" "3" "Read/Write/Guard" "Thread ID: 33428" " 000000D871200000" "Thread Stack" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" " 000000D8712FB000" "Thread Stack" "12" "12" "12" "" "" "" "" "" "" "Read/Write/Guard" "" " 000000D8712FE000" "Thread Stack" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "" "0000029F921B0000" "Heap (Shareable)" "64" "64" "" "4" "" "4" "4" "" "1" "Read/Write" "Heap ID: 2 [COMPATABILITY]" " 0000029F921B0000" "Heap (Shareable)" "64" "64" "" "4" "" "4" "4" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F921C0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F921C0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F921D0000" "Shareable" "116" "116" "" "116" "" "116" "116" "" "1" "Read" "" " 0000029F921D0000" "Shareable" "116" "116" "" "116" "" "116" "116" "" "" "Read" "" "0000029F921F0000" "Shareable" "16" "16" "" "12" "" "12" "12" "" "1" "Read" "" " 0000029F921F0000" "Shareable" "16" "16" "" "12" "" "12" "12" "" "" "Read" "" "0000029F92200000" "Shareable" "8" "8" "" "8" "" "8" "" "" "1" "Read" "" " 0000029F92200000" "Shareable" "8" "8" "" "8" "" "8" "" "" "" "Read" "" "0000029F92210000" "Private Data" "8" "8" "8" "8" "8" "" "" "" "1" "Read/Write" "" " 0000029F92210000" "Private Data" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F92220000" "Mapped File" "804" "804" "" "80" "" "80" "80" "" "1" "Read" "C:\Windows\System32\locale.nls" " 0000029F92220000" "Mapped File" "804" "804" "" "80" "" "80" "80" "" "" "Read" "" "0000029F922F0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F922F0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F92300000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F92300000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F92310000" "Heap (Private Data)" "392" "24" "24" "24" "24" "" "" "" "2" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F92310000" "Heap (Private Data)" "24" "24" "24" "24" "24" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F92316000" "Heap (Private Data)" "368" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F92380000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F92380000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F92390000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F92390000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F923A0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F923A0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F923B0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F923B0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F923C0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F923C0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F923D0000" "Shareable" "32" "16" "" "12" "" "12" "12" "" "2" "Read" "" " 0000029F923D0000" "Shareable" "16" "16" "" "12" "" "12" "12" "" "" "Read" "" " 0000029F923D4000" "Shareable" "16" "" "" "" "" "" "" "" "" "Reserved" "" "0000029F923E0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F923E0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F923F0000" "Private Data" "64" "64" "64" "8" "8" "" "" "" "1" "Execute/Read/Write" "" " 0000029F923F0000" "Private Data" "64" "64" "64" "8" "8" "" "" "" "" "Execute/Read/Write" "Thread Environment Block" "0000029F92400000" "Heap (Private Data)" "1,024" "1,020" "1,020" "1,020" "1,020" "" "" "" "2" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F92400000" "Heap (Private Data)" "1,020" "1,020" "1,020" "1,020" "1,020" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F924FF000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F92500000" "Heap (Private Data)" "392" "8" "8" "8" "8" "" "" "" "2" "Read/Write" "Heap ID: 3 [LOW FRAGMENTATION]" " 0000029F92500000" "Heap (Private Data)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F92502000" "Heap (Private Data)" "384" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F92570000" "Mapped File" "672" "672" "" "12" "" "12" "12" "" "1" "Read" "C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.70.233.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\KernelBase.dll.mui" " 0000029F92570000" "Mapped File" "672" "672" "" "12" "" "12" "12" "" "" "Read" "" "0000029F92620000" "Heap (Private Data)" "64" "60" "60" "48" "48" "" "" "" "2" "Read/Write" "Heap ID: 4 [LOW FRAGMENTATION]" " 0000029F92620000" "Heap (Private Data)" "60" "60" "60" "48" "48" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F9262F000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F92630000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F92630000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F92640000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F92640000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F92650000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F92650000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "" "Read" "" "0000029F92660000" "Shareable" "16" "16" "" "8" "" "8" "8" "" "1" "Read" "" " 0000029F92660000" "Shareable" "16" "16" "" "8" "" "8" "8" "" "" "Read" "" "0000029F92670000" "Shareable" "4" "4" "" "" "" "" "" "" "1" "Read" "" " 0000029F92670000" "Shareable" "4" "4" "" "" "" "" "" "" "" "Read" "" "0000029F92680000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F92680000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F92690000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F92690000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F926A0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F926A0000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F926B0000" "Heap (Private Data)" "64" "60" "60" "60" "60" "" "" "" "2" "Read/Write" "Heap ID: 3 [LOW FRAGMENTATION]" " 0000029F926B0000" "Heap (Private Data)" "60" "60" "60" "60" "60" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F926BF000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F926C0000" "Shareable" "2,048" "304" "" "100" "" "100" "100" "" "2" "Read" "" " 0000029F926C0000" "Shareable" "304" "304" "" "100" "" "100" "100" "" "" "Read" "" " 0000029F9270C000" "Shareable" "1,744" "" "" "" "" "" "" "" "" "Reserved" "" "0000029F928C0000" "Shareable" "1,540" "1,540" "" "632" "" "632" "632" "" "1" "Read" "" " 0000029F928C0000" "Shareable" "1,540" "1,540" "" "632" "" "632" "632" "" "" "Read" "" "0000029F92A50000" "Shareable" "20,484" "3,472" "" "108" "" "108" "108" "" "2" "Read" "" " 0000029F92A50000" "Shareable" "3,472" "3,472" "" "108" "" "108" "108" "" "" "Read" "" " 0000029F92DB4000" "Shareable" "17,012" "" "" "" "" "" "" "" "" "Reserved" "" "0000029F93E60000" "Mapped File" "3,296" "3,296" "" "40" "" "40" "40" "" "1" "Read" "C:\Windows\Globalization\Sorting\SortDefault.nls" " 0000029F93E60000" "Mapped File" "3,296" "3,296" "" "40" "" "40" "40" "" "" "Read" "" "0000029F941A0000" "Shareable" "10,240" "904" "" "236" "" "236" "236" "" "2" "Read" "" " 0000029F941A0000" "Shareable" "904" "904" "" "236" "" "236" "236" "" "" "Read" "" " 0000029F94282000" "Shareable" "9,336" "" "" "" "" "" "" "" "" "Reserved" "" "0000029F94BA0000" "Heap (Private Data)" "392" "8" "8" "8" "8" "" "" "" "2" "Read/Write" "Heap ID: 4 [LOW FRAGMENTATION]" " 0000029F94BA0000" "Heap (Private Data)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F94BA2000" "Heap (Private Data)" "384" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F94C10000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C10000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C20000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C20000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C30000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C30000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C40000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C40000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C50000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C50000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C60000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C60000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C70000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C70000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C80000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C80000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94C90000" "Shareable" "4" "4" "" "4" "" "4" "" "" "1" "Read" "" " 0000029F94C90000" "Shareable" "4" "4" "" "4" "" "4" "" "" "" "Read" "" "0000029F94CA0000" "Heap (Private Data)" "1,024" "1,020" "1,020" "908" "908" "" "" "" "2" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F94CA0000" "Heap (Private Data)" "1,020" "1,020" "1,020" "908" "908" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F94D9F000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F94DA0000" "Shareable" "24" "24" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F94DA0000" "Shareable" "24" "24" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F94DB0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F94DB0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F94DC0000" "Mapped File" "68" "68" "" "4" "" "4" "4" "" "1" "Read" "C:\Windows\System32\C_1252.NLS" " 0000029F94DC0000" "Mapped File" "68" "68" "" "4" "" "4" "4" "" "" "Read" "" "0000029F94DE0000" "Heap (Private Data)" "2,048" "2,044" "2,044" "1,780" "1,780" "" "" "" "2" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F94DE0000" "Heap (Private Data)" "2,044" "2,044" "2,044" "1,780" "1,780" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F94FDF000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F94FE0000" "Mapped File" "36" "36" "" "12" "" "12" "12" "" "1" "Read" "C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.70.233.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui" " 0000029F94FE0000" "Mapped File" "36" "36" "" "12" "" "12" "12" "" "" "Read" "" "0000029F94FF0000" "Heap (Private Data)" "4,096" "4,092" "4,092" "3,016" "3,016" "" "" "" "6" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F94FF0000" "Heap (Private Data)" "2,072" "2,072" "2,072" "1,576" "1,576" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F951F6000" "Heap (Private Data)" "4" "4" "4" "" "" "" "" "" "" "No access" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F951F7000" "Heap (Private Data)" "1,844" "1,844" "1,844" "1,288" "1,288" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F953C4000" "Heap (Private Data)" "4" "4" "4" "" "" "" "" "" "" "No access" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F953C5000" "Heap (Private Data)" "168" "168" "168" "152" "152" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F953EF000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F953F0000" "Mapped File" "24" "24" "" "8" "" "8" "8" "" "1" "Read" "C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.70.233.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\user32.dll.mui" " 0000029F953F0000" "Mapped File" "24" "24" "" "8" "" "8" "8" "" "" "Read" "" "0000029F95400000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F95400000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F95410000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F95410000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F95420000" "Private Data" "1,024" "4" "4" "4" "4" "" "" "" "2" "Read/Write" "" " 0000029F95420000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" " 0000029F95421000" "Private Data" "1,020" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" "0000029F95520000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F95520000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F95530000" "Mapped File" "380" "380" "" "8" "" "8" "8" "" "1" "Read" "C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.70.233.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\kernel32.dll.mui" " 0000029F95530000" "Mapped File" "380" "380" "" "8" "" "8" "8" "" "" "Read" "" "0000029F95590000" "Heap (Private Data)" "1,024" "112" "112" "96" "96" "" "" "" "2" "Read/Write" "Heap ID: 3 [LOW FRAGMENTATION]" " 0000029F95590000" "Heap (Private Data)" "112" "112" "112" "96" "96" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F955AC000" "Heap (Private Data)" "912" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F95690000" "Shareable" "64" "64" "" "" "" "" "" "" "1" "Read" "" " 0000029F95690000" "Shareable" "64" "64" "" "" "" "" "" "" "" "Read" "" "0000029F956A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F956A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F956B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F956B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F956C0000" "Mapped File" "16,384" "16,384" "" "52" "" "52" "44" "" "1" "Read" "C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat" " 0000029F956C0000" "Mapped File" "16,384" "16,384" "" "52" "" "52" "44" "" "" "Read" "" "0000029F966C0000" "Private Data" "8,192" "4" "4" "4" "4" "" "" "" "2" "Read/Write" "" " 0000029F966C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" " 0000029F966C1000" "Private Data" "8,188" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" "0000029F96EC0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96EC0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96ED0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F96ED0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F96EE0000" "Mapped File" "8" "8" "" "4" "" "4" "4" "" "1" "Read" "C:\Windows\System32\oleaccrc.dll" " 0000029F96EE0000" "Mapped File" "8" "8" "" "4" "" "4" "4" "" "" "Read" "" "0000029F96EF0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96EF0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96F00000" "Shareable" "516" "516" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96F00000" "Shareable" "516" "516" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96F90000" "Shareable" "40" "40" "" "20" "" "20" "20" "" "1" "Read/Write" "" " 0000029F96F90000" "Shareable" "40" "40" "" "20" "" "20" "20" "" "" "Read/Write" "" "0000029F96FA0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96FA0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96FB0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96FB0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96FC0000" "Shareable" "128" "128" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F96FC0000" "Shareable" "128" "128" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F96FE0000" "Shareable" "128" "128" "" "20" "" "20" "20" "" "1" "Read/Write" "" " 0000029F96FE0000" "Shareable" "128" "128" "" "20" "" "20" "20" "" "" "Read/Write" "" "0000029F97000000" "Mapped File" "124" "124" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_sw_sys.bin" " 0000029F97000000" "Mapped File" "124" "124" "" "4" "" "4" "4" "" "" "Read" "" "0000029F97020000" "Mapped File" "124" "124" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_sw_ts.bin" " 0000029F97020000" "Mapped File" "124" "124" "" "4" "" "4" "4" "" "" "Read" "" "0000029F97040000" "Shareable" "8" "8" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F97040000" "Shareable" "8" "8" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F97050000" "Mapped File" "16" "16" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_py.bin" " 0000029F97050000" "Mapped File" "16" "16" "" "4" "" "4" "4" "" "" "Read" "" "0000029F97060000" "Shareable" "140" "140" "" "136" "" "136" "136" "" "1" "Read/Write" "" " 0000029F97060000" "Shareable" "140" "140" "" "136" "" "136" "136" "" "" "Read/Write" "" "0000029F97090000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F97090000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F970A0000" "Heap (Private Data)" "3,760" "3,748" "3,748" "2,040" "2,040" "" "" "" "3" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F970A0000" "Heap (Private Data)" "8" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F970A2000" "Heap (Private Data)" "3,748" "3,748" "3,748" "2,040" "2,040" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F9744B000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F97450000" "Heap (Private Data)" "8,192" "3,476" "3,476" "3,004" "3,004" "" "" "" "2" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F97450000" "Heap (Private Data)" "3,476" "3,476" "3,476" "3,004" "3,004" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F977B5000" "Heap (Private Data)" "4,716" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F97C50000" "Shareable" "784" "784" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F97C50000" "Shareable" "784" "784" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F97D20000" "Shareable" "776" "776" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F97D20000" "Shareable" "776" "776" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F97DF0000" "Shareable" "80" "80" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F97DF0000" "Shareable" "80" "80" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F97E10000" "Shareable" "172" "172" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F97E10000" "Shareable" "172" "172" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F97E40000" "Heap (Private Data)" "3,792" "3,748" "3,748" "2,072" "2,072" "" "" "" "3" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F97E40000" "Heap (Private Data)" "40" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F97E4A000" "Heap (Private Data)" "3,748" "3,748" "3,748" "2,072" "2,072" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F981F3000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F98200000" "Heap (Private Data)" "4,372" "4,336" "4,336" "4,336" "4,336" "" "" "" "3" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F98200000" "Heap (Private Data)" "32" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F98208000" "Heap (Private Data)" "4,336" "4,336" "4,336" "4,336" "4,336" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F98644000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F98650000" "Heap (Private Data)" "5,460" "5,432" "5,432" "5,432" "5,432" "" "" "" "3" "Read/Write" "Heap ID: 1 [LOW FRAGMENTATION]" " 0000029F98650000" "Heap (Private Data)" "24" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F98656000" "Heap (Private Data)" "5,432" "5,432" "5,432" "5,432" "5,432" "" "" "" "" "Read/Write" "Heap ID: 0 (Default) [COMPATABILITY]" " 0000029F98BA4000" "Heap (Private Data)" "4" "" "" "" "" "" "" "" "" "Reserved" "Heap ID: 0 (Default) [COMPATABILITY]" "0000029F98BB0000" "Mapped File" "4,336" "4,336" "" "" "" "" "" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_sys.bin" " 0000029F98BB0000" "Mapped File" "4,336" "4,336" "" "" "" "" "" "" "" "Read" "" "0000029F98FF0000" "Mapped File" "10,528" "10,528" "" "8" "" "8" "8" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_bigram.bin" " 0000029F98FF0000" "Mapped File" "10,528" "10,528" "" "8" "" "8" "8" "" "" "Read" "" "0000029F99A40000" "Shareable" "636" "636" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F99A40000" "Shareable" "636" "636" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F99AE0000" "Shareable" "1,956" "1,956" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99AE0000" "Shareable" "1,956" "1,956" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99CD0000" "Shareable" "364" "364" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99CD0000" "Shareable" "364" "364" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99D30000" "Shareable" "524" "524" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99D30000" "Shareable" "524" "524" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99DC0000" "Shareable" "192" "192" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99DC0000" "Shareable" "192" "192" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99DF0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99DF0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E00000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E00000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E10000" "Shareable" "228" "228" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E10000" "Shareable" "228" "228" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E50000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E50000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E60000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F99E60000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F99E70000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E70000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E80000" "Shareable" "28" "28" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E80000" "Shareable" "28" "28" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99E90000" "Shareable" "796" "796" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99E90000" "Shareable" "796" "796" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F99F60000" "Shareable" "21,316" "21,316" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F99F60000" "Shareable" "21,316" "21,316" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9B440000" "Shareable" "80" "80" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F9B440000" "Shareable" "80" "80" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F9B460000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9B460000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9B470000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9B470000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9B480000" "Shareable" "9,364" "9,364" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9B480000" "Shareable" "9,364" "9,364" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9BDB0000" "Shareable" "92" "92" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9BDB0000" "Shareable" "92" "92" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9BDD0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 0000029F9BDD0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9BDE0000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "1" "Read/Write" "" " 0000029F9BDE0000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9BDF0000" "Mapped File" "19,240" "19,240" "" "152" "" "152" "152" "" "1" "Read" "C:\Windows\Fonts\msyh.ttc" " 0000029F9BDF0000" "Mapped File" "19,240" "19,240" "" "152" "" "152" "152" "" "" "Read" "" "0000029F9D0C0000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9D0C0000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9D0D0000" "Shareable" "268" "268" "" "252" "" "252" "252" "" "1" "Read/Write" "" " 0000029F9D0D0000" "Shareable" "268" "268" "" "252" "" "252" "252" "" "" "Read/Write" "" "0000029F9D120000" "Mapped File" "16" "16" "" "4" "" "4" "4" "" "1" "Read" "C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.70.233.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\msctf.dll.mui" " 0000029F9D120000" "Mapped File" "16" "16" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D140000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9D140000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9D150000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "1" "Read/Write" "" " 0000029F9D150000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D160000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D160000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D170000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "1" "Read/Write" "" " 0000029F9D170000" "Private Data" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D180000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D180000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D190000" "Private Data" "8" "8" "8" "8" "8" "" "" "" "1" "Read/Write" "" " 0000029F9D190000" "Private Data" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D1A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D1A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D1B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D1B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D1C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D1C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D1D0000" "Shareable" "32" "32" "" "32" "" "32" "32" "" "1" "Read/Write" "" " 0000029F9D1D0000" "Shareable" "32" "32" "" "32" "" "32" "32" "" "" "Read/Write" "" "0000029F9D1E0000" "Mapped File" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_splt.bin" " 0000029F9D1E0000" "Mapped File" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D1F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D1F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D200000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D200000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D210000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D210000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D220000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D220000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D230000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D230000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D240000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D240000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D250000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D250000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D260000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D260000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D270000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D270000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D280000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D280000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D290000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D290000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D2F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D2F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D300000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D300000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D310000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D310000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D320000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D320000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D330000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D330000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D340000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D340000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D350000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D350000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D360000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D360000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D370000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D370000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D380000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D380000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D390000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D390000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D3F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D3F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D400000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D400000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D410000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D410000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D420000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D420000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D430000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D430000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D440000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D440000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D450000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D450000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D460000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D460000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D470000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D470000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D480000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D480000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D490000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D490000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D4F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D4F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D500000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D500000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D510000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D510000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D520000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D520000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D530000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D530000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D540000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D540000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D550000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D550000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D560000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D560000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D570000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D570000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D580000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D580000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D590000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D590000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D5F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D5F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D600000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D600000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D610000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D610000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D620000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D620000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D630000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D630000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D640000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D640000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D650000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D650000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D660000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D660000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D670000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D670000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D680000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D680000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D690000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D690000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6E0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D6F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D6F0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D700000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D700000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D710000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D710000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D720000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D720000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D730000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D730000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D740000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D740000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D750000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D750000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D760000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D760000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D770000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D770000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D780000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D780000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D790000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D790000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D7A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D7A0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D7B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D7B0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D7C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D7C0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D7D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "1" "Read/Write" "" " 0000029F9D7D0000" "Private Data" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D7E0000" "Private Data" "72" "72" "72" "72" "72" "" "" "" "1" "Read/Write" "" " 0000029F9D7E0000" "Private Data" "72" "72" "72" "72" "72" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9D800000" "Mapped File" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_bh_ext.bin" " 0000029F9D800000" "Mapped File" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D810000" "Mapped File" "76" "76" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_abg.bin" " 0000029F9D810000" "Mapped File" "76" "76" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D830000" "Mapped File" "256" "256" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_nmode.bin" " 0000029F9D830000" "Mapped File" "256" "256" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D870000" "Mapped File" "44" "44" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_um.bin" " 0000029F9D870000" "Mapped File" "44" "44" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D880000" "Shareable" "188" "188" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9D880000" "Shareable" "188" "188" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9D8B0000" "Shareable" "68" "68" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9D8B0000" "Shareable" "68" "68" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9D8D0000" "Mapped File" "20" "20" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_timeaware.bin" " 0000029F9D8D0000" "Mapped File" "20" "20" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D910000" "Mapped File" "36" "36" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_zly.bin" " 0000029F9D910000" "Mapped File" "36" "36" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9D920000" "Mapped File" "18,816" "18,816" "" "168" "" "168" "168" "" "1" "Read" "C:\Windows\Fonts\StaticCache.dat" " 0000029F9D920000" "Mapped File" "18,816" "18,816" "" "168" "" "168" "168" "" "" "Read" "" "0000029F9EB80000" "Private Data" "1,680" "1,680" "1,680" "1,680" "1,680" "" "" "" "1" "Read/Write" "" " 0000029F9EB80000" "Private Data" "1,680" "1,680" "1,680" "1,680" "1,680" "" "" "" "" "Read/Write" "Thread Environment Block" "0000029F9ED30000" "Shareable" "3,020" "3,020" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9ED30000" "Shareable" "3,020" "3,020" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F030000" "Mapped File" "1,356" "1,356" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_cagram.bin" " 0000029F9F030000" "Mapped File" "1,356" "1,356" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9F190000" "Mapped File" "100" "100" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_gd_bsa.bin" " 0000029F9F190000" "Mapped File" "100" "100" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9F1B0000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F1B0000" "Shareable" "8" "8" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F1C0000" "Shareable" "308" "308" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F1C0000" "Shareable" "308" "308" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F210000" "Shareable" "28" "28" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F210000" "Shareable" "28" "28" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F220000" "Mapped File" "8" "8" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_phrases.bin" " 0000029F9F220000" "Mapped File" "8" "8" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9F230000" "Shareable" "268" "268" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F230000" "Shareable" "268" "268" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F280000" "Shareable" "76" "76" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F280000" "Shareable" "76" "76" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F2A0000" "Shareable" "16" "16" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F2A0000" "Shareable" "16" "16" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F2B0000" "Shareable" "24" "24" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F2B0000" "Shareable" "24" "24" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F2C0000" "Shareable" "48" "48" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F2C0000" "Shareable" "48" "48" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9F2D0000" "Mapped File" "272" "272" "" "272" "" "272" "272" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_en_sys.bin" " 0000029F9F2D0000" "Mapped File" "272" "272" "" "272" "" "272" "272" "" "" "Read" "" "0000029F9F320000" "Shareable" "180" "180" "" "12" "" "12" "12" "" "1" "Read/Write" "" " 0000029F9F320000" "Shareable" "180" "180" "" "12" "" "12" "12" "" "" "Read/Write" "" "0000029F9F350000" "Shareable" "432" "432" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F9F350000" "Shareable" "432" "432" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F9F3C0000" "Shareable" "1,720" "1,720" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F9F3C0000" "Shareable" "1,720" "1,720" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F9F570000" "Mapped File" "3,380" "3,380" "" "284" "" "284" "284" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_annex.bin" " 0000029F9F570000" "Mapped File" "3,380" "3,380" "" "284" "" "284" "284" "" "" "Read" "" "0000029F9F8C0000" "Shareable" "216" "216" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F9F8C0000" "Shareable" "216" "216" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F9F900000" "Shareable" "3,536" "3,536" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9F900000" "Shareable" "3,536" "3,536" "" "4" "" "4" "4" "" "" "Read/Write" "" "0000029F9FC80000" "Mapped File" "76" "76" "" "4" "" "4" "4" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_url.bin" " 0000029F9FC80000" "Mapped File" "76" "76" "" "4" "" "4" "4" "" "" "Read" "" "0000029F9FCA0000" "Mapped File" "420" "420" "" "12" "" "12" "12" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_quick.bin" " 0000029F9FCA0000" "Mapped File" "420" "420" "" "12" "" "12" "12" "" "" "Read" "" "0000029F9FD10000" "Shareable" "396" "396" "" "8" "" "8" "8" "" "1" "Read/Write" "" " 0000029F9FD10000" "Shareable" "396" "396" "" "8" "" "8" "8" "" "" "Read/Write" "" "0000029F9FD80000" "Mapped File" "168" "168" "" "12" "" "12" "12" "" "1" "Read" "E:\Program Files (x86)\SogouInput\13.11.0.8627\sgim_urlGuide.bin" " 0000029F9FD80000" "Mapped File" "168" "168" "" "12" "" "12" "12" "" "" "Read" "" "0000029F9FDB0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read/Write" "" " 0000029F9FDB0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read/Write" "" "00007FF462FC0000" "Shareable" "1,024" "20" "" "8" "" "8" "8" "" "2" "Read" "" " 00007FF462FC0000" "Shareable" "20" "20" "" "8" "" "8" "8" "" "" "Read" "" " 00007FF462FC5000" "Shareable" "1,004" "" "" "" "" "" "" "" "" "Reserved" "" "00007FF4630C0000" "Private Data" "4,194,432" "" "" "" "" "" "" "" "1" "Reserved" "" " 00007FF4630C0000" "Private Data" "4,194,432" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" "00007FF5630E0000" "Private Data" "32,772" "4" "4" "" "" "" "" "" "2" "Read/Write" "" " 00007FF5630E0000" "Private Data" "32,768" "" "" "" "" "" "" "" "" "Reserved" "Thread Environment Block" " 00007FF5650E0000" "Private Data" "4" "4" "4" "" "" "" "" "" "" "Read/Write" "Thread Environment Block" "00007FF5650F0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "1" "Read" "" " 00007FF5650F0000" "Shareable" "4" "4" "" "4" "" "4" "4" "" "" "Read" "" "00007FF565100000" "Shareable" "204" "204" "" "100" "" "100" "100" "" "1" "Read" "" " 00007FF565100000" "Shareable" "204" "204" "" "100" "" "100" "100" "" "" "Read" "" "00007FF6ED400000" "Image (ASLR)" "688" "688" "8" "272" "16" "256" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\UnrealDeviceTool.exe" " 00007FF6ED400000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FF6ED401000" "Image (ASLR)" "100" "100" "" "88" "" "88" "" "" "" "Execute/Read" ".text" " 00007FF6ED41A000" "Image (ASLR)" "192" "192" "8" "164" "8" "156" "" "" "" "Read" ".rdata" " 00007FF6ED44A000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FF6ED44C000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".pdata" " 00007FF6ED44D000" "Image (ASLR)" "376" "376" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FF6ED4AB000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFDC3110000" "Image (ASLR)" "7,608" "7,608" "140" "3,104" "108" "2,996" "" "" "13" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Gui.dll" " 00007FFDC3110000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFDC3111000" "Image (ASLR)" "5,400" "5,400" "" "2,040" "" "2,040" "" "" "" "Execute/Read" ".text" " 00007FFDC3657000" "Image (ASLR)" "1,724" "1,724" "12" "884" "12" "872" "" "" "" "Read" ".rdata" " 00007FFDC3806000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFDC380A000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDC380C000" "Image (ASLR)" "24" "24" "24" "24" "24" "" "" "" "" "Read/Write" ".data" " 00007FFDC3812000" "Image (ASLR)" "28" "28" "28" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDC3819000" "Image (ASLR)" "32" "32" "32" "32" "32" "" "" "" "" "Read/Write" ".data" " 00007FFDC3821000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDC3822000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFDC3826000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDC3827000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFDC3829000" "Image (ASLR)" "308" "308" "" "76" "" "76" "" "" "" "Read" ".pdata" " 00007FFDC3876000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" "_RDATA" " 00007FFDC3877000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFDC3878000" "Image (ASLR)" "24" "24" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFDE0660000" "Image (ASLR)" "5,580" "5,580" "52" "2,872" "40" "2,832" "" "" "11" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Core.dll" " 00007FFDE0660000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFDE0661000" "Image (ASLR)" "3,224" "3,224" "" "1,972" "" "1,972" "" "" "" "Execute/Read" ".text" " 00007FFDE0987000" "Image (ASLR)" "1,812" "1,812" "4" "768" "4" "764" "" "" "" "Read" ".rdata" " 00007FFDE0B4C000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFDE0B4D000" "Image (ASLR)" "4" "4" "4" "4" "" "4" "" "" "" "Copy on write" ".data" " 00007FFDE0B4E000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFDE0B52000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDE0B54000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFDE0B56000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDE0B57000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFDE0B59000" "Image (ASLR)" "136" "136" "" "84" "" "84" "" "" "" "Read" ".pdata" " 00007FFDE0B7B000" "Image (ASLR)" "332" "332" "" "" "" "" "" "" "" "Read" ".qtmimed (Shared)" " 00007FFDE0BCE000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFDE0BCF000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFDE14F0000" "Image (ASLR)" "4,700" "4,700" "72" "112" "28" "84" "" "" "10" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Pdf.dll" " 00007FFDE14F0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFDE14F1000" "Image (ASLR)" "2,348" "2,348" "" "24" "" "24" "" "" "" "Execute/Read" ".text" " 00007FFDE173C000" "Image (ASLR)" "2,164" "2,164" "8" "60" "8" "52" "" "" "" "Read" ".rdata" " 00007FFDE1959000" "Image (ASLR)" "16" "16" "16" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDE195D000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFDE195F000" "Image (ASLR)" "32" "32" "32" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDE1967000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFDE1968000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFDE1969000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFDE196B000" "Image (ASLR)" "92" "92" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFDE1982000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFDE1983000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE01120000" "Image (ASLR)" "2,680" "2,680" "152" "980" "88" "892" "892" "" "13" "Execute/Read" "E:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.2129\PicFace64.dll" " 00007FFE01120000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE01121000" "Image (ASLR)" "1,832" "1,832" "" "696" "" "696" "696" "" "" "Execute/Read" ".text" " 00007FFE012EB000" "Image (ASLR)" "452" "452" "4" "184" "4" "180" "180" "" "" "Read" ".rdata" " 00007FFE0135C000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE0135D000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE0135E000" "Image (ASLR)" "44" "44" "44" "44" "44" "" "" "" "" "Read/Write" ".data" " 00007FFE01369000" "Image (ASLR)" "12" "12" "12" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE0136C000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE01371000" "Image (ASLR)" "20" "20" "20" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE01376000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE01379000" "Image (ASLR)" "32" "32" "32" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE01381000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE01382000" "Image (ASLR)" "84" "84" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE01397000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "_RDATA" " 00007FFE01398000" "Image (ASLR)" "132" "132" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE013B9000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE01BF0000" "Image (ASLR)" "14,316" "14,316" "564" "5,052" "336" "4,716" "4,716" "" "27" "Execute/Read" "C:\Windows\System32\SogouPY.ime" " 00007FFE01BF0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE01BF1000" "Image (ASLR)" "10,232" "10,232" "" "3,768" "" "3,768" "3,768" "" "" "Execute/Read" ".text" " 00007FFE025EF000" "Image (ASLR)" "2,364" "2,364" "4" "688" "4" "684" "684" "" "" "Read" ".rdata" " 00007FFE0283E000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE02842000" "Image (ASLR)" "12" "12" "12" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE02845000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE02849000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE0284B000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE0284D000" "Image (ASLR)" "4" "4" "4" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE0284E000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE02850000" "Image (ASLR)" "4" "4" "4" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE02851000" "Image (ASLR)" "68" "68" "68" "68" "68" "" "" "" "" "Read/Write" ".data" " 00007FFE02862000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE02863000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE02866000" "Image (ASLR)" "152" "152" "152" "8" "" "8" "8" "" "" "Copy on write" ".data" " 00007FFE0288C000" "Image (ASLR)" "120" "120" "120" "120" "120" "" "" "" "" "Read/Write" ".data" " 00007FFE028AA000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE028AC000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE028B1000" "Image (ASLR)" "20" "20" "20" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE028B6000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE028B9000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE028BA000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE028BE000" "Image (ASLR)" "12" "12" "12" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE028C1000" "Image (ASLR)" "24" "24" "24" "24" "24" "" "" "" "" "Read/Write" ".data" " 00007FFE028C7000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE028C8000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE028CB000" "Image (ASLR)" "420" "420" "" "112" "" "112" "112" "" "" "Read" ".pdata" " 00007FFE02934000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "_RDATA" " 00007FFE02935000" "Image (ASLR)" "636" "636" "" "124" "" "124" "124" "" "" "Read" ".rsrc" " 00007FFE029D4000" "Image (ASLR)" "92" "92" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE0E240000" "Image (ASLR)" "108" "108" "4" "52" "8" "44" "28" "" "5" "Execute/Read" "C:\Windows\System32\vcruntime140.dll" " 00007FFE0E240000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE0E241000" "Image (ASLR)" "64" "64" "" "20" "" "20" "16" "" "" "Execute/Read" ".text" " 00007FFE0E251000" "Image (ASLR)" "20" "20" "4" "16" "4" "12" "4" "" "" "Read" ".rdata" " 00007FFE0E256000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE0E257000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE0E258000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "_RDATA" " 00007FFE0E259000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE0E25A000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE0E260000" "Image (ASLR)" "568" "568" "16" "216" "20" "196" "128" "" "5" "Execute/Read" "C:\Windows\System32\msvcp140.dll" " 00007FFE0E260000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE0E261000" "Image (ASLR)" "340" "340" "" "80" "" "80" "72" "" "" "Execute/Read" ".text" " 00007FFE0E2B6000" "Image (ASLR)" "184" "184" "4" "112" "4" "108" "48" "" "" "Read" ".rdata" " 00007FFE0E2E4000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE0E2E8000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE0E2EC000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE0E2ED000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE0F020000" "Image (ASLR)" "5,920" "5,920" "80" "2,640" "40" "2,600" "" "" "9" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Widgets.dll" " 00007FFE0F020000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE0F021000" "Image (ASLR)" "3,700" "3,700" "" "1,588" "" "1,588" "" "" "" "Execute/Read" ".text" " 00007FFE0F3BE000" "Image (ASLR)" "1,860" "1,860" "24" "956" "24" "932" "" "" "" "Read" ".rdata" " 00007FFE0F58F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE0F590000" "Image (ASLR)" "36" "36" "36" "8" "" "8" "" "" "" "Copy on write" ".data" " 00007FFE0F599000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE0F59A000" "Image (ASLR)" "28" "28" "28" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE0F5A1000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE0F5A3000" "Image (ASLR)" "224" "224" "" "64" "" "64" "" "" "" "Read" ".pdata" " 00007FFE0F5DB000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE0F5DC000" "Image (ASLR)" "48" "48" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE12540000" "Image (ASLR)" "532" "532" "12" "52" "12" "40" "" "" "7" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qwebp.dll" " 00007FFE12540000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE12541000" "Image (ASLR)" "412" "412" "" "16" "" "16" "" "" "" "Execute/Read" ".text" " 00007FFE125A8000" "Image (ASLR)" "72" "72" "4" "20" "4" "16" "" "" "" "Read" ".rdata" " 00007FFE125BA000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE125BB000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE125BC000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE125BD000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE125C2000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE125C3000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE125C4000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE12D30000" "Image (ASLR)" "832" "832" "28" "552" "36" "516" "" "" "7" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\platforms\qwindows.dll" " 00007FFE12D30000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE12D31000" "Image (ASLR)" "516" "516" "" "304" "" "304" "" "" "" "Execute/Read" ".text" " 00007FFE12DB2000" "Image (ASLR)" "236" "236" "16" "188" "16" "172" "" "" "" "Read" ".rdata" " 00007FFE12DED000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE12DEE000" "Image (ASLR)" "8" "8" "8" "4" "" "4" "" "" "" "Copy on write" ".data" " 00007FFE12DF0000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE12DF4000" "Image (ASLR)" "32" "32" "" "28" "" "28" "" "" "" "Read" ".pdata" " 00007FFE12DFC000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE12DFD000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE12DFE000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE277D0000" "Image (ASLR)" "1,384" "1,384" "28" "184" "20" "164" "" "" "8" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Network.dll" " 00007FFE277D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE277D1000" "Image (ASLR)" "860" "860" "" "24" "" "24" "" "" "" "Execute/Read" ".text" " 00007FFE278A8000" "Image (ASLR)" "420" "420" "8" "140" "8" "132" "" "" "" "Read" ".rdata" " 00007FFE27911000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE27913000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE27914000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE27916000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE27918000" "Image (ASLR)" "60" "60" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE27927000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE27928000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE27C90000" "Image (ASLR)" "1,844" "1,844" "32" "344" "28" "316" "316" "" "6" "Execute/Read" "C:\Windows\System32\d3d9.dll" " 00007FFE27C90000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE27C91000" "Image (ASLR)" "1,340" "1,340" "" "208" "" "208" "208" "" "" "Execute/Read" ".text" " 00007FFE27DE0000" "Image (ASLR)" "396" "396" "8" "84" "8" "76" "76" "" "" "Read" ".rdata" " 00007FFE27E43000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE27E47000" "Image (ASLR)" "16" "16" "16" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE27E4B000" "Image (ASLR)" "52" "52" "" "24" "" "24" "24" "" "" "Read" ".pdata" " 00007FFE27E58000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE27E59000" "Image (ASLR)" "8" "8" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE27E5B000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2A240000" "Image (ASLR)" "248" "248" "4" "116" "12" "104" "88" "" "5" "Execute/Read" "C:\Windows\System32\DataExchange.dll" " 00007FFE2A240000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2A241000" "Image (ASLR)" "164" "164" "" "40" "" "40" "36" "" "" "Execute/Read" ".text" " 00007FFE2A26A000" "Image (ASLR)" "52" "52" "4" "48" "4" "44" "40" "" "" "Read" ".rdata" " 00007FFE2A277000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2A278000" "Image (ASLR)" "12" "12" "" "12" "" "12" "12" "" "" "Read" ".pdata" " 00007FFE2A27B000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE2A27C000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE2A27D000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2BC30000" "Image (ASLR)" "688" "688" "4" "144" "8" "136" "136" "" "5" "Execute/Read" "C:\Windows\System32\TextShaping.dll" " 00007FFE2BC30000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE2BC31000" "Image (ASLR)" "300" "300" "" "100" "" "100" "100" "" "" "Execute/Read" ".text" " 00007FFE2BC7C000" "Image (ASLR)" "364" "364" "4" "36" "4" "32" "32" "" "" "Read" ".rdata" " 00007FFE2BCD7000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2BCD8000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2BCDB000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2C330000" "Image (ASLR)" "28" "28" "4" "20" "8" "12" "12" "" "5" "Execute/Read" "C:\Windows\System32\msimg32.dll" " 00007FFE2C330000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE2C331000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" ".text" " 00007FFE2C332000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".rdata" " 00007FFE2C333000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2C334000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2C335000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE2C336000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2C590000" "Image (ASLR)" "156" "156" "8" "72" "16" "56" "48" "" "5" "Execute/Read" "C:\Windows\System32\winmm.dll" " 00007FFE2C590000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE2C591000" "Image (ASLR)" "80" "80" "" "24" "" "24" "20" "" "" "Execute/Read" ".text" " 00007FFE2C5A5000" "Image (ASLR)" "28" "28" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE2C5AC000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE2C5AE000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".pdata" " 00007FFE2C5AF000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE2C5B0000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".guids" " 00007FFE2C5B1000" "Image (ASLR)" "20" "20" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE2C5B6000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2CBD0000" "Image (ASLR)" "420" "420" "4" "48" "8" "40" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qtiff.dll" " 00007FFE2CBD0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2CBD1000" "Image (ASLR)" "220" "220" "" "16" "" "16" "" "" "" "Execute/Read" ".text" " 00007FFE2CC08000" "Image (ASLR)" "168" "168" "4" "20" "4" "16" "" "" "" "Read" ".rdata" " 00007FFE2CC32000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2CC33000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2CC36000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE2CC37000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE2CC38000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2CD60000" "Image (ASLR)" "360" "360" "8" "104" "16" "88" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Svg.dll" " 00007FFE2CD60000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2CD61000" "Image (ASLR)" "216" "216" "" "16" "" "16" "" "" "" "Execute/Read" ".text" " 00007FFE2CD97000" "Image (ASLR)" "108" "108" "8" "72" "8" "64" "" "" "" "Read" ".rdata" " 00007FFE2CDB2000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE2CDB4000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2CDB8000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE2CDB9000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2CE30000" "Image (ASLR)" "820" "820" "8" "140" "12" "128" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\Qt6Core5Compat.dll" " 00007FFE2CE30000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2CE31000" "Image (ASLR)" "248" "248" "" "68" "" "68" "" "" "" "Execute/Read" ".text" " 00007FFE2CE6F000" "Image (ASLR)" "536" "536" "4" "56" "4" "52" "" "" "" "Read" ".rdata" " 00007FFE2CEF5000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE2CEF7000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2CEFB000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE2CEFC000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2D300000" "Image (ASLR)" "456" "456" "4" "64" "8" "56" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qjpeg.dll" " 00007FFE2D300000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2D301000" "Image (ASLR)" "260" "260" "" "24" "" "24" "" "" "" "Execute/Read" ".text" " 00007FFE2D342000" "Image (ASLR)" "168" "168" "4" "28" "4" "24" "" "" "" "Read" ".rdata" " 00007FFE2D36C000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2D36D000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2D36F000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE2D370000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE2D371000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2E3E0000" "Image (ASLR)" "2,664" "2,664" "16" "152" "32" "120" "120" "" "5" "Execute/Read" "C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.3636_none_60b6a03d71f818d5\comctl32.dll" " 00007FFE2E3E0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE2E3E1000" "Image (ASLR)" "1,932" "1,932" "" "48" "" "48" "48" "" "" "Execute/Read" ".text" " 00007FFE2E5C4000" "Image (ASLR)" "292" "292" "12" "76" "12" "64" "64" "" "" "Read" ".rdata" " 00007FFE2E60D000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE2E611000" "Image (ASLR)" "100" "100" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2E62A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE2E62B000" "Image (ASLR)" "292" "292" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE2E674000" "Image (ASLR)" "24" "24" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE2FD00000" "Image (ASLR)" "48" "48" "4" "32" "8" "24" "16" "" "5" "Execute/Read" "C:\Windows\System32\vcruntime140_1.dll" " 00007FFE2FD00000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE2FD01000" "Image (ASLR)" "16" "16" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE2FD05000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "4" "" "" "Read" ".rdata" " 00007FFE2FD08000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE2FD09000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE2FD0A000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE2FD0B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE30190000" "Image (ASLR)" "2,556" "2,556" "36" "440" "44" "396" "348" "" "5" "Execute/Read" "C:\Windows\System32\DWrite.dll" " 00007FFE30190000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE30191000" "Image (ASLR)" "1,564" "1,564" "" "260" "" "260" "260" "" "" "Execute/Read" ".text" " 00007FFE30318000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" "RT_CODE" " 00007FFE30319000" "Image (ASLR)" "576" "576" "4" "88" "4" "84" "72" "" "" "Read" ".rdata" " 00007FFE303A9000" "Image (ASLR)" "36" "36" "36" "36" "36" "" "" "" "" "Read/Write" ".data" " 00007FFE303B2000" "Image (ASLR)" "88" "88" "" "36" "" "36" "" "" "" "Read" ".pdata" " 00007FFE303C8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE303C9000" "Image (ASLR)" "272" "272" "" "8" "" "8" "8" "" "" "Read" ".rsrc" " 00007FFE3040D000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE34700000" "Image (ASLR)" "116" "116" "4" "44" "12" "32" "32" "" "5" "Execute/Read" "C:\Windows\System32\mpr.dll" " 00007FFE34700000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE34701000" "Image (ASLR)" "72" "72" "" "12" "" "12" "12" "" "" "Execute/Read" ".text" " 00007FFE34713000" "Image (ASLR)" "20" "20" "4" "16" "4" "12" "12" "" "" "Read" ".rdata" " 00007FFE34718000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE34719000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE3471A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE3471B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE3471C000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE34880000" "Image (ASLR)" "1,000" "1,000" "12" "524" "20" "504" "504" "" "5" "Execute/Read" "C:\Windows\System32\TextInputFramework.dll" " 00007FFE34880000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE34881000" "Image (ASLR)" "712" "712" "" "416" "" "416" "416" "" "" "Execute/Read" ".text" " 00007FFE34933000" "Image (ASLR)" "208" "208" "4" "84" "4" "80" "80" "" "" "Read" ".rdata" " 00007FFE34967000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE3496A000" "Image (ASLR)" "44" "44" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE34975000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE34976000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE34977000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE3BF40000" "Image (ASLR)" "408" "408" "4" "76" "16" "60" "60" "" "5" "Execute/Read" "C:\Windows\System32\oleacc.dll" " 00007FFE3BF40000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE3BF41000" "Image (ASLR)" "256" "256" "" "28" "" "28" "28" "" "" "Execute/Read" ".text" " 00007FFE3BF81000" "Image (ASLR)" "92" "92" "8" "32" "8" "24" "24" "" "" "Read" ".rdata" " 00007FFE3BF98000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE3BF99000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE3BF9D000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE3BF9E000" "Image (ASLR)" "24" "24" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE3BFA4000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE3C9C0000" "Image (ASLR)" "156" "156" "4" "140" "8" "132" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\styles\qwindowsvistastyle.dll" " 00007FFE3C9C0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE3C9C1000" "Image (ASLR)" "88" "88" "" "84" "" "84" "" "" "" "Execute/Read" ".text" " 00007FFE3C9D7000" "Image (ASLR)" "44" "44" "4" "44" "4" "40" "" "" "" "Read" ".rdata" " 00007FFE3C9E2000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE3C9E3000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE3C9E4000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE3C9E5000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE3C9E6000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE3D010000" "Image (ASLR)" "100" "100" "4" "52" "12" "40" "24" "" "5" "Execute/Read" "C:\Windows\System32\netapi32.dll" " 00007FFE3D010000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE3D011000" "Image (ASLR)" "48" "48" "" "8" "" "8" "4" "" "" "Execute/Read" ".text" " 00007FFE3D01D000" "Image (ASLR)" "28" "28" "4" "28" "4" "24" "12" "" "" "Read" ".rdata" " 00007FFE3D024000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE3D025000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE3D026000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE3D027000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE3D028000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE3EF60000" "Image (ASLR)" "2,076" "2,076" "16" "268" "28" "240" "240" "" "5" "Execute/Read" "C:\Windows\System32\twinapi.appcore.dll" " 00007FFE3EF60000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE3EF61000" "Image (ASLR)" "1,436" "1,436" "" "132" "" "132" "132" "" "" "Execute/Read" ".text" " 00007FFE3F0C8000" "Image (ASLR)" "468" "468" "8" "108" "8" "100" "100" "" "" "Read" ".rdata" " 00007FFE3F13D000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE3F141000" "Image (ASLR)" "96" "96" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE3F159000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE3F15A000" "Image (ASLR)" "12" "12" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE3F15D000" "Image (ASLR)" "40" "40" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE40450000" "Image (ASLR)" "2,620" "2,620" "176" "1,044" "120" "924" "924" "" "11" "Execute/Read" "C:\Windows\System32\SogouTSF.ime" " 00007FFE40450000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE40451000" "Image (ASLR)" "1,640" "1,640" "" "676" "" "676" "676" "" "" "Execute/Read" ".text" " 00007FFE405EB000" "Image (ASLR)" "560" "560" "4" "200" "4" "196" "196" "" "" "Read" ".rdata" " 00007FFE40677000" "Image (ASLR)" "56" "56" "56" "56" "56" "" "" "" "" "Read/Write" ".data" " 00007FFE40685000" "Image (ASLR)" "16" "16" "16" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE40689000" "Image (ASLR)" "32" "32" "32" "32" "32" "" "" "" "" "Read/Write" ".data" " 00007FFE40691000" "Image (ASLR)" "16" "16" "16" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE40695000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE4069A000" "Image (ASLR)" "28" "28" "28" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE406A1000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE406A3000" "Image (ASLR)" "92" "92" "" "36" "" "36" "36" "" "" "Read" ".pdata" " 00007FFE406BA000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "_RDATA" " 00007FFE406BB000" "Image (ASLR)" "124" "124" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE406DA000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE41240000" "Image (ASLR)" "48" "48" "4" "36" "12" "24" "24" "" "5" "Execute/Read" "C:\Windows\System32\secur32.dll" " 00007FFE41240000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE41241000" "Image (ASLR)" "12" "12" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE41244000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "8" "" "" "Read" ".rdata" " 00007FFE41247000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE41248000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE41249000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4124A000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4124B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE43D90000" "Image (ASLR)" "196" "196" "4" "56" "12" "44" "44" "" "5" "Execute/Read" "C:\Windows\System32\cryptnet.dll" " 00007FFE43D90000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE43D91000" "Image (ASLR)" "132" "132" "" "12" "" "12" "12" "" "" "Execute/Read" ".text" " 00007FFE43DB2000" "Image (ASLR)" "36" "36" "4" "28" "4" "24" "24" "" "" "Read" ".rdata" " 00007FFE43DBB000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE43DBC000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE43DBE000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE43DBF000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE43DC0000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE443C0000" "Image (ASLR)" "48" "48" "4" "36" "8" "28" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qwbmp.dll" " 00007FFE443C0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE443C1000" "Image (ASLR)" "12" "12" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE443C4000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "" "" "" "Read" ".rdata" " 00007FFE443C7000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE443C8000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE443C9000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE443CA000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE443CB000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE44450000" "Image (ASLR)" "48" "48" "4" "36" "8" "28" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qtga.dll" " 00007FFE44450000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE44451000" "Image (ASLR)" "12" "12" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE44454000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "" "" "" "Read" ".rdata" " 00007FFE44457000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE44458000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE44459000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE4445A000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE4445B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE44460000" "Image (ASLR)" "52" "52" "4" "40" "8" "32" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qsvg.dll" " 00007FFE44460000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE44461000" "Image (ASLR)" "12" "12" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE44464000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "" "" "" "Read" ".rdata" " 00007FFE44468000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE44469000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4446A000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE4446B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE4446C000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE44470000" "Image (ASLR)" "188" "188" "4" "100" "8" "92" "" "" "5" "Execute/Read" "C:\Windows\System32\msvcp140_2.dll" " 00007FFE44470000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE44471000" "Image (ASLR)" "124" "124" "" "60" "" "60" "" "" "" "Execute/Read" ".text" " 00007FFE44490000" "Image (ASLR)" "40" "40" "4" "28" "4" "24" "" "" "" "Read" ".rdata" " 00007FFE4449A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4449B000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4449D000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE4449E000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE445E0000" "Image (ASLR)" "1,064" "1,064" "8" "92" "16" "76" "76" "" "5" "Execute/Read" "C:\Windows\System32\winhttp.dll" " 00007FFE445E0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE445E1000" "Image (ASLR)" "784" "784" "" "32" "" "32" "32" "" "" "Execute/Read" ".text" " 00007FFE446A5000" "Image (ASLR)" "44" "44" "" "" "" "" "" "" "" "Execute/Read" ".wpp_sf" " 00007FFE446B0000" "Image (ASLR)" "140" "140" "4" "40" "4" "36" "36" "" "" "Read" ".rdata" " 00007FFE446D3000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE446D5000" "Image (ASLR)" "44" "44" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE446E0000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE446E1000" "Image (ASLR)" "32" "32" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE446E9000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE450B0000" "Image (ASLR)" "3,436" "3,436" "16" "564" "20" "544" "544" "" "7" "Execute/Read" "C:\Windows\System32\CoreUIComponents.dll" " 00007FFE450B0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE450B1000" "Image (ASLR)" "1,756" "1,756" "" "336" "" "336" "336" "" "" "Execute/Read" ".text" " 00007FFE45268000" "Image (ASLR)" "1,180" "1,180" "4" "204" "4" "200" "200" "" "" "Read" ".rdata" " 00007FFE4538F000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE45391000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE45392000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE45393000" "Image (ASLR)" "164" "164" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE453BC000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE453BD000" "Image (ASLR)" "256" "256" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE453FD000" "Image (ASLR)" "56" "56" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE45410000" "Image (ASLR)" "80" "80" "4" "40" "12" "28" "28" "" "5" "Execute/Read" "C:\Windows\System32\wtsapi32.dll" " 00007FFE45410000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE45411000" "Image (ASLR)" "40" "40" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE4541B000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "12" "" "" "Read" ".rdata" " 00007FFE4541F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE45420000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE45421000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE45422000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE45423000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE454D0000" "Image (ASLR)" "1,364" "1,364" "8" "100" "20" "80" "80" "" "5" "Execute/Read" "C:\Windows\System32\WinTypes.dll" " 00007FFE454D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE454D1000" "Image (ASLR)" "476" "476" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE45548000" "Image (ASLR)" "736" "736" "8" "40" "8" "32" "32" "" "" "Read" ".rdata" " 00007FFE45600000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE45602000" "Image (ASLR)" "44" "44" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4560D000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4560E000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4560F000" "Image (ASLR)" "88" "88" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE45FD0000" "Image (ASLR)" "2,444" "2,444" "20" "128" "28" "100" "92" "" "7" "Execute/Read" "C:\Windows\System32\d3d11.dll" " 00007FFE45FD0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE45FD1000" "Image (ASLR)" "1,156" "1,156" "" "60" "" "60" "52" "" "" "Execute/Read" ".text" " 00007FFE460F2000" "Image (ASLR)" "660" "660" "" "" "" "" "" "" "" "Execute/Read" ".text_hf" " 00007FFE46197000" "Image (ASLR)" "424" "424" "8" "40" "8" "32" "32" "" "" "Read" ".rdata" " 00007FFE46201000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE46203000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE46204000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE46206000" "Image (ASLR)" "88" "88" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4621C000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4621D000" "Image (ASLR)" "64" "64" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4622D000" "Image (ASLR)" "24" "24" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE46840000" "Image (ASLR)" "968" "968" "12" "468" "20" "448" "448" "" "5" "Execute/Read" "C:\Windows\System32\CoreMessaging.dll" " 00007FFE46840000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE46841000" "Image (ASLR)" "596" "596" "" "336" "" "336" "336" "" "" "Execute/Read" ".text" " 00007FFE468D6000" "Image (ASLR)" "228" "228" "4" "108" "4" "104" "104" "" "" "Read" ".rdata" " 00007FFE4690F000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE46912000" "Image (ASLR)" "56" "56" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE46920000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE46921000" "Image (ASLR)" "56" "56" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4692F000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE46B00000" "Image (ASLR)" "1,932" "1,932" "40" "152" "32" "120" "116" "" "8" "Execute/Read" "C:\Windows\System32\dcomp.dll" " 00007FFE46B00000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE46B01000" "Image (ASLR)" "1,376" "1,376" "" "68" "" "68" "68" "" "" "Execute/Read" ".text" " 00007FFE46C59000" "Image (ASLR)" "344" "344" "8" "52" "8" "44" "40" "" "" "Read" ".rdata" " 00007FFE46CAF000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE46CB1000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE46CB5000" "Image (ASLR)" "12" "12" "12" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE46CB8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE46CB9000" "Image (ASLR)" "96" "96" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE46CD1000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE46CD2000" "Image (ASLR)" "32" "32" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE46CDA000" "Image (ASLR)" "36" "36" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE47BC0000" "Image (ASLR)" "632" "632" "12" "252" "20" "232" "232" "" "5" "Execute/Read" "C:\Windows\System32\uxtheme.dll" " 00007FFE47BC0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE47BC1000" "Image (ASLR)" "376" "376" "" "168" "" "168" "168" "" "" "Execute/Read" ".text" " 00007FFE47C1F000" "Image (ASLR)" "200" "200" "4" "60" "4" "56" "56" "" "" "Read" ".rdata" " 00007FFE47C51000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE47C54000" "Image (ASLR)" "24" "24" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE47C5A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE47C5B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE47C5C000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE47EB0000" "Image (ASLR)" "188" "188" "16" "84" "16" "68" "68" "" "6" "Execute/Read" "C:\Windows\System32\dwmapi.dll" " 00007FFE47EB0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE47EB1000" "Image (ASLR)" "100" "100" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE47ECA000" "Image (ASLR)" "32" "32" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE47ED2000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE47ED4000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE47ED6000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE47ED8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE47ED9000" "Image (ASLR)" "20" "20" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE47EDE000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE485D0000" "Image (ASLR)" "52" "52" "4" "40" "8" "32" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qpdf.dll" " 00007FFE485D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE485D1000" "Image (ASLR)" "12" "12" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE485D4000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "" "" "" "Read" ".rdata" " 00007FFE485D8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE485D9000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE485DA000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE485DB000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE485DC000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE485E0000" "Image (ASLR)" "56" "56" "4" "40" "8" "32" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qico.dll" " 00007FFE485E0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE485E1000" "Image (ASLR)" "16" "16" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE485E5000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "" "" "" "Read" ".rdata" " 00007FFE485E9000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE485EA000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE485EB000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE485EC000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE485ED000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE48610000" "Image (ASLR)" "64" "64" "4" "44" "8" "36" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qicns.dll" " 00007FFE48610000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE48611000" "Image (ASLR)" "24" "24" "" "16" "" "16" "" "" "" "Execute/Read" ".text" " 00007FFE48617000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "" "" "" "Read" ".rdata" " 00007FFE4861B000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4861C000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4861D000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE4861E000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE4861F000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE48770000" "Image (ASLR)" "7,788" "7,788" "36" "520" "52" "468" "468" "" "6" "Execute/Read" "C:\Windows\System32\windows.storage.dll" " 00007FFE48770000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE48771000" "Image (ASLR)" "5,708" "5,708" "" "216" "" "216" "216" "" "" "Execute/Read" ".text" " 00007FFE48D04000" "Image (ASLR)" "1,560" "1,560" "8" "192" "8" "184" "184" "" "" "Read" ".rdata" " 00007FFE48E8A000" "Image (ASLR)" "32" "32" "32" "32" "32" "" "" "" "" "Read/Write" ".data" " 00007FFE48E92000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE48E93000" "Image (ASLR)" "328" "328" "" "60" "" "60" "60" "" "" "Read" ".pdata" " 00007FFE48EE5000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read" ".didat" " 00007FFE48EE8000" "Image (ASLR)" "16" "16" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE48EEC000" "Image (ASLR)" "124" "124" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE48FF0000" "Image (ASLR)" "40" "40" "4" "24" "8" "16" "16" "" "5" "Execute/Read" "C:\Windows\System32\version.dll" " 00007FFE48FF0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE48FF1000" "Image (ASLR)" "12" "12" "" "4" "" "4" "4" "" "" "Execute/Read" ".text" " 00007FFE48FF4000" "Image (ASLR)" "8" "8" "4" "8" "4" "4" "4" "" "" "Read" ".rdata" " 00007FFE48FF6000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE48FF7000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE48FF8000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE48FF9000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49010000" "Image (ASLR)" "56" "56" "4" "36" "8" "28" "" "" "5" "Execute/Read" "G:\svn\UnrealDeviceTool\packaged\Windows\release\imageformats\qgif.dll" " 00007FFE49010000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE49011000" "Image (ASLR)" "20" "20" "" "12" "" "12" "" "" "" "Execute/Read" ".text" " 00007FFE49016000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "" "" "" "Read" ".rdata" " 00007FFE49019000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4901A000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4901B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".qtmetad (Shared)" " 00007FFE4901C000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE4901D000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49020000" "Image (ASLR)" "36" "36" "4" "24" "8" "16" "" "" "5" "Execute/Read" "C:\Windows\System32\msvcp140_1.dll" " 00007FFE49020000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" "Header" " 00007FFE49021000" "Image (ASLR)" "8" "8" "" "4" "" "4" "" "" "" "Execute/Read" ".text" " 00007FFE49023000" "Image (ASLR)" "8" "8" "4" "8" "4" "4" "" "" "" "Read" ".rdata" " 00007FFE49025000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE49026000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE49027000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE49028000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49130000" "Image (ASLR)" "972" "972" "20" "120" "28" "92" "92" "" "7" "Execute/Read" "C:\Windows\System32\dxgi.dll" " 00007FFE49130000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49131000" "Image (ASLR)" "604" "604" "" "44" "" "44" "44" "" "" "Execute/Read" ".text" " 00007FFE491C8000" "Image (ASLR)" "204" "204" "8" "48" "8" "40" "40" "" "" "Read" ".rdata" " 00007FFE491FB000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE491FC000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE491FD000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE49200000" "Image (ASLR)" "32" "32" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE49208000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49209000" "Image (ASLR)" "96" "96" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49221000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49450000" "Image (ASLR)" "72" "72" "4" "56" "12" "44" "44" "" "5" "Execute/Read" "C:\Windows\System32\kernel.appcore.dll" " 00007FFE49450000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49451000" "Image (ASLR)" "16" "16" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE49455000" "Image (ASLR)" "32" "32" "4" "32" "4" "28" "28" "" "" "Read" ".rdata" " 00007FFE4945D000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4945E000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4945F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49460000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49461000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE496B0000" "Image (ASLR)" "160" "160" "36" "68" "28" "40" "40" "" "6" "Execute/Read" "C:\Windows\System32\srvcli.dll" " 00007FFE496B0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE496B1000" "Image (ASLR)" "56" "56" "" "12" "" "12" "12" "" "" "Execute/Read" ".text" " 00007FFE496BF000" "Image (ASLR)" "48" "48" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE496CB000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE496D0000" "Image (ASLR)" "16" "16" "16" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE496D4000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE496D5000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE496D6000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE496D7000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49780000" "Image (ASLR)" "316" "316" "4" "64" "16" "48" "28" "" "5" "Execute/Read" "C:\Windows\System32\authz.dll" " 00007FFE49780000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49781000" "Image (ASLR)" "180" "180" "" "16" "" "16" "12" "" "" "Execute/Read" ".text" " 00007FFE497AE000" "Image (ASLR)" "104" "104" "8" "32" "8" "24" "12" "" "" "Read" ".rdata" " 00007FFE497C8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE497C9000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE497CB000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE497CC000" "Image (ASLR)" "4" "4" "" "4" "" "4" "" "" "" "Read" ".rsrc" " 00007FFE497CD000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49A50000" "Image (ASLR)" "208" "208" "4" "56" "12" "44" "44" "" "5" "Execute/Read" "C:\Windows\System32\rsaenh.dll" " 00007FFE49A50000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49A51000" "Image (ASLR)" "140" "140" "" "16" "" "16" "16" "" "" "Execute/Read" ".text" " 00007FFE49A74000" "Image (ASLR)" "32" "32" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE49A7C000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE49A7D000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE49A7E000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49A7F000" "Image (ASLR)" "16" "16" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49A83000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49B70000" "Image (ASLR)" "204" "204" "8" "84" "16" "68" "68" "" "5" "Execute/Read" "C:\Windows\System32\ntmarta.dll" " 00007FFE49B70000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49B71000" "Image (ASLR)" "136" "136" "" "36" "" "36" "36" "" "" "Execute/Read" ".text" " 00007FFE49B93000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" "ERRATA" " 00007FFE49B94000" "Image (ASLR)" "32" "32" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE49B9C000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE49B9E000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE49BA0000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49BA1000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49BA2000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49E70000" "Image (ASLR)" "236" "236" "4" "84" "12" "72" "72" "" "5" "Execute/Read" "C:\Windows\System32\IPHLPAPI.DLL" " 00007FFE49E70000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49E71000" "Image (ASLR)" "164" "164" "" "20" "" "20" "20" "" "" "Execute/Read" ".text" " 00007FFE49E9A000" "Image (ASLR)" "44" "44" "4" "40" "4" "36" "36" "" "" "Read" ".rdata" " 00007FFE49EA5000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE49EA6000" "Image (ASLR)" "8" "8" "" "8" "" "8" "8" "" "" "Read" ".pdata" " 00007FFE49EA8000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49EA9000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49EAA000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49EB0000" "Image (ASLR)" "808" "808" "8" "148" "20" "128" "128" "" "5" "Execute/Read" "C:\Windows\System32\dnsapi.dll" " 00007FFE49EB0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49EB1000" "Image (ASLR)" "528" "528" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE49F35000" "Image (ASLR)" "56" "56" "" "" "" "" "" "" "" "Execute/Read" ".wpp_sf" " 00007FFE49F43000" "Image (ASLR)" "136" "136" "8" "68" "8" "60" "60" "" "" "Read" ".rdata" " 00007FFE49F65000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE49F67000" "Image (ASLR)" "32" "32" "" "20" "" "20" "20" "" "" "Read" ".pdata" " 00007FFE49F6F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE49F70000" "Image (ASLR)" "36" "36" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49F79000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE49F80000" "Image (ASLR)" "48" "48" "4" "28" "8" "20" "20" "" "5" "Execute/Read" "C:\Windows\System32\netutils.dll" " 00007FFE49F80000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE49F81000" "Image (ASLR)" "20" "20" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE49F86000" "Image (ASLR)" "8" "8" "4" "8" "4" "4" "4" "" "" "Read" ".rdata" " 00007FFE49F88000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE49F89000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE49F8A000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE49F8B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A250000" "Image (ASLR)" "72" "72" "4" "32" "12" "20" "20" "" "5" "Execute/Read" "C:\Windows\System32\umpdc.dll" " 00007FFE4A250000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A251000" "Image (ASLR)" "36" "36" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE4A25A000" "Image (ASLR)" "16" "16" "4" "12" "4" "8" "8" "" "" "Read" ".rdata" " 00007FFE4A25E000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A25F000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A260000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A261000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A270000" "Image (ASLR)" "300" "300" "4" "68" "12" "56" "56" "" "5" "Execute/Read" "C:\Windows\System32\powrprof.dll" " 00007FFE4A270000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A271000" "Image (ASLR)" "72" "72" "" "16" "" "16" "16" "" "" "Execute/Read" ".text" " 00007FFE4A283000" "Image (ASLR)" "40" "40" "4" "28" "4" "24" "24" "" "" "Read" ".rdata" " 00007FFE4A28D000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A28E000" "Image (ASLR)" "8" "8" "" "8" "" "8" "8" "" "" "Read" ".pdata" " 00007FFE4A290000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A291000" "Image (ASLR)" "164" "164" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A2BA000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A3E0000" "Image (ASLR)" "96" "96" "4" "52" "12" "40" "40" "" "5" "Execute/Read" "C:\Windows\System32\cryptsp.dll" " 00007FFE4A3E0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A3E1000" "Image (ASLR)" "48" "48" "" "12" "" "12" "12" "" "" "Execute/Read" ".text" " 00007FFE4A3ED000" "Image (ASLR)" "24" "24" "4" "20" "4" "16" "16" "" "" "Read" ".rdata" " 00007FFE4A3F3000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A3F4000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".pdata" " 00007FFE4A3F5000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A3F6000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A3F7000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A400000" "Image (ASLR)" "48" "48" "4" "36" "12" "24" "24" "" "5" "Execute/Read" "C:\Windows\System32\cryptbase.dll" " 00007FFE4A400000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A401000" "Image (ASLR)" "12" "12" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE4A404000" "Image (ASLR)" "12" "12" "4" "12" "4" "8" "8" "" "" "Read" ".rdata" " 00007FFE4A407000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A408000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A409000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A40A000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A40B000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A490000" "Image (ASLR)" "180" "180" "4" "64" "12" "52" "52" "" "5" "Execute/Read" "C:\Windows\System32\wldp.dll" " 00007FFE4A490000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A491000" "Image (ASLR)" "92" "92" "" "20" "" "20" "20" "" "" "Execute/Read" ".text" " 00007FFE4A4A8000" "Image (ASLR)" "56" "56" "4" "28" "4" "24" "24" "" "" "Read" ".rdata" " 00007FFE4A4B6000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A4B7000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A4B9000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A4BA000" "Image (ASLR)" "8" "8" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A4BC000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A620000" "Image (ASLR)" "72" "72" "4" "48" "8" "40" "40" "" "5" "Execute/Read" "C:\Windows\System32\msasn1.dll" " 00007FFE4A620000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A621000" "Image (ASLR)" "36" "36" "" "20" "" "20" "20" "" "" "Execute/Read" ".text" " 00007FFE4A62A000" "Image (ASLR)" "16" "16" "4" "16" "4" "12" "12" "" "" "Read" ".rdata" " 00007FFE4A62E000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A62F000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A630000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A631000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A900000" "Image (ASLR)" "200" "200" "8" "72" "20" "52" "52" "" "5" "Execute/Read" "C:\Windows\System32\sspicli.dll" " 00007FFE4A900000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A901000" "Image (ASLR)" "124" "124" "" "20" "" "20" "20" "" "" "Execute/Read" ".text" " 00007FFE4A920000" "Image (ASLR)" "44" "44" "8" "32" "8" "24" "24" "" "" "Read" ".rdata" " 00007FFE4A92B000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4A92D000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A92F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A930000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A931000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A940000" "Image (ASLR)" "184" "184" "4" "76" "16" "60" "52" "" "5" "Execute/Read" "C:\Windows\System32\userenv.dll" " 00007FFE4A940000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A941000" "Image (ASLR)" "108" "108" "" "28" "" "28" "24" "" "" "Execute/Read" ".text" " 00007FFE4A95C000" "Image (ASLR)" "40" "40" "8" "32" "8" "24" "20" "" "" "Read" ".rdata" " 00007FFE4A966000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A967000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A969000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A96A000" "Image (ASLR)" "12" "12" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A96D000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4A980000" "Image (ASLR)" "148" "148" "4" "76" "12" "64" "64" "" "5" "Execute/Read" "C:\Windows\System32\profapi.dll" " 00007FFE4A980000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4A981000" "Image (ASLR)" "88" "88" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE4A997000" "Image (ASLR)" "32" "32" "4" "20" "4" "16" "16" "" "" "Read" ".rdata" " 00007FFE4A99F000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4A9A0000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4A9A2000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4A9A3000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4A9A4000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4AA50000" "Image (ASLR)" "412" "412" "8" "164" "16" "148" "148" "" "5" "Execute/Read" "C:\Windows\System32\wintrust.dll" " 00007FFE4AA50000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4AA51000" "Image (ASLR)" "288" "288" "" "68" "" "68" "68" "" "" "Execute/Read" ".text" " 00007FFE4AA99000" "Image (ASLR)" "80" "80" "4" "60" "4" "56" "56" "" "" "Read" ".rdata" " 00007FFE4AAAD000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4AAAF000" "Image (ASLR)" "16" "16" "" "16" "" "16" "16" "" "" "Read" ".pdata" " 00007FFE4AAB3000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4AAB4000" "Image (ASLR)" "8" "8" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4AAB6000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4AAC0000" "Image (ASLR)" "1,024" "1,024" "12" "368" "16" "352" "352" "" "5" "Execute/Read" "C:\Windows\System32\ucrtbase.dll" " 00007FFE4AAC0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4AAC1000" "Image (ASLR)" "720" "720" "" "208" "" "208" "208" "" "" "Execute/Read" ".text" " 00007FFE4AB75000" "Image (ASLR)" "232" "232" "4" "140" "4" "136" "136" "" "" "Read" ".rdata" " 00007FFE4ABAF000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE4ABB2000" "Image (ASLR)" "48" "48" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4ABBE000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4ABBF000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4ABC0000" "Image (ASLR)" "520" "520" "4" "136" "8" "128" "128" "" "5" "Execute/Read" "C:\Windows\System32\bcryptprimitives.dll" " 00007FFE4ABC0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4ABC1000" "Image (ASLR)" "400" "400" "" "80" "" "80" "80" "" "" "Execute/Read" ".text" " 00007FFE4AC25000" "Image (ASLR)" "88" "88" "4" "44" "4" "40" "40" "" "" "Read" ".rdata" " 00007FFE4AC3B000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4AC3C000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4AC40000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4AC41000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4AD00000" "Image (ASLR)" "3,032" "3,032" "20" "840" "32" "808" "808" "" "5" "Execute/Read" "C:\Windows\System32\KernelBase.dll" " 00007FFE4AD00000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4AD01000" "Image (ASLR)" "1,228" "1,228" "" "560" "" "560" "560" "" "" "Execute/Read" ".text" " 00007FFE4AE34000" "Image (ASLR)" "1,544" "1,544" "8" "216" "8" "208" "208" "" "" "Read" ".rdata" " 00007FFE4AFB6000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE4AFBB000" "Image (ASLR)" "64" "64" "" "32" "" "32" "32" "" "" "Read" ".pdata" " 00007FFE4AFCB000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4AFCC000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4AFCD000" "Image (ASLR)" "164" "164" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B000000" "Image (ASLR)" "628" "628" "16" "180" "24" "156" "156" "" "6" "Execute/Read" "C:\Windows\System32\msvcp_win.dll" " 00007FFE4B000000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B001000" "Image (ASLR)" "336" "336" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE4B055000" "Image (ASLR)" "240" "240" "8" "116" "8" "108" "108" "" "" "Read" ".rdata" " 00007FFE4B091000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4B092000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE4B095000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4B09A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4B09B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B09C000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B0A0000" "Image (ASLR)" "136" "136" "4" "124" "4" "120" "120" "" "5" "Execute/Read" "C:\Windows\System32\win32u.dll" " 00007FFE4B0A0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B0A1000" "Image (ASLR)" "44" "44" "" "40" "" "40" "40" "" "" "Execute/Read" ".text" " 00007FFE4B0AC000" "Image (ASLR)" "60" "60" "" "60" "" "60" "60" "" "" "Read" ".rdata" " 00007FFE4B0BB000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4B0BC000" "Image (ASLR)" "16" "16" "" "12" "" "12" "12" "" "" "Read" ".pdata" " 00007FFE4B0C0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B0C1000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B0D0000" "Image (ASLR)" "156" "156" "4" "68" "12" "56" "56" "" "5" "Execute/Read" "C:\Windows\System32\bcrypt.dll" " 00007FFE4B0D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B0D1000" "Image (ASLR)" "104" "104" "" "36" "" "36" "36" "" "" "Execute/Read" ".text" " 00007FFE4B0EB000" "Image (ASLR)" "24" "24" "4" "16" "4" "12" "12" "" "" "Read" ".rdata" " 00007FFE4B0F1000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4B0F2000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4B0F4000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4B0F5000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B0F6000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B150000" "Image (ASLR)" "1,128" "1,128" "20" "492" "36" "456" "452" "" "5" "Execute/Read" "C:\Windows\System32\gdi32full.dll" " 00007FFE4B150000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B151000" "Image (ASLR)" "672" "672" "" "280" "" "280" "276" "" "" "Execute/Read" ".text" " 00007FFE4B1F9000" "Image (ASLR)" "316" "316" "12" "160" "12" "148" "148" "" "" "Read" ".rdata" " 00007FFE4B248000" "Image (ASLR)" "20" "20" "20" "20" "20" "" "" "" "" "Read/Write" ".data" " 00007FFE4B24D000" "Image (ASLR)" "32" "32" "" "20" "" "20" "20" "" "" "Read" ".pdata" " 00007FFE4B255000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4B256000" "Image (ASLR)" "72" "72" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B268000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B270000" "Image (ASLR)" "1,396" "1,396" "28" "500" "36" "464" "464" "" "5" "Execute/Read" "C:\Windows\System32\crypt32.dll" " 00007FFE4B270000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B271000" "Image (ASLR)" "1,072" "1,072" "" "280" "" "280" "280" "" "" "Execute/Read" ".text" " 00007FFE4B37D000" "Image (ASLR)" "224" "224" "4" "144" "4" "140" "140" "" "" "Read" ".rdata" " 00007FFE4B3B5000" "Image (ASLR)" "28" "28" "28" "28" "28" "" "" "" "" "Read/Write" ".data" " 00007FFE4B3BC000" "Image (ASLR)" "52" "52" "" "36" "" "36" "36" "" "" "Read" ".pdata" " 00007FFE4B3C9000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4B3CA000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B3CB000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B3D0000" "Image (ASLR)" "1,176" "1,176" "8" "584" "20" "564" "564" "" "5" "Execute/Read" "C:\Windows\System32\rpcrt4.dll" " 00007FFE4B3D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B3D1000" "Image (ASLR)" "876" "876" "" "400" "" "400" "400" "" "" "Execute/Read" ".text" " 00007FFE4B4AC000" "Image (ASLR)" "28" "28" "" "20" "" "20" "20" "" "" "Execute/Read" ".ndr64" " 00007FFE4B4B3000" "Image (ASLR)" "176" "176" "8" "124" "8" "116" "116" "" "" "Read" ".rdata" " 00007FFE4B4DF000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4B4E1000" "Image (ASLR)" "52" "52" "" "20" "" "20" "20" "" "" "Read" ".pdata" " 00007FFE4B4EE000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4B4EF000" "Image (ASLR)" "20" "20" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4B4F4000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4B500000" "Image (ASLR)" "7,440" "7,440" "40" "372" "60" "312" "312" "" "6" "Execute/Read" "C:\Windows\System32\shell32.dll" " 00007FFE4B500000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4B501000" "Image (ASLR)" "5,668" "5,668" "" "116" "" "116" "116" "" "" "Execute/Read" ".text" " 00007FFE4BA8A000" "Image (ASLR)" "1,316" "1,316" "16" "160" "16" "144" "144" "" "" "Read" ".rdata" " 00007FFE4BBD3000" "Image (ASLR)" "32" "32" "32" "32" "32" "" "" "" "" "Read/Write" ".data" " 00007FFE4BBDB000" "Image (ASLR)" "8" "8" "8" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4BBDD000" "Image (ASLR)" "284" "284" "" "44" "" "44" "44" "" "" "Read" ".pdata" " 00007FFE4BC24000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read" ".didat" " 00007FFE4BC27000" "Image (ASLR)" "36" "36" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4BC30000" "Image (ASLR)" "80" "80" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4BCC0000" "Image (ASLR)" "872" "872" "20" "120" "32" "88" "84" "" "7" "Execute/Read" "C:\Windows\System32\comdlg32.dll" " 00007FFE4BCC0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4BCC1000" "Image (ASLR)" "668" "668" "" "28" "" "28" "28" "" "" "Execute/Read" ".text" " 00007FFE4BD68000" "Image (ASLR)" "128" "128" "12" "64" "12" "52" "48" "" "" "Read" ".rdata" " 00007FFE4BD88000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4BD8A000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4BD8B000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4BD8D000" "Image (ASLR)" "36" "36" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4BD96000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4BD97000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4BD98000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C290000" "Image (ASLR)" "1,104" "1,104" "12" "620" "24" "596" "596" "" "5" "Execute/Read" "C:\Windows\System32\msctf.dll" " 00007FFE4C290000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C291000" "Image (ASLR)" "844" "844" "" "436" "" "436" "436" "" "" "Execute/Read" ".text" " 00007FFE4C364000" "Image (ASLR)" "176" "176" "8" "120" "8" "112" "112" "" "" "Read" ".rdata" " 00007FFE4C390000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE4C393000" "Image (ASLR)" "52" "52" "" "40" "" "40" "40" "" "" "Read" ".pdata" " 00007FFE4C3A0000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4C3A1000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4C3A2000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C5C0000" "Image (ASLR)" "820" "820" "12" "140" "24" "116" "116" "" "5" "Execute/Read" "C:\Windows\System32\oleaut32.dll" " 00007FFE4C5C0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C5C1000" "Image (ASLR)" "596" "596" "" "60" "" "60" "60" "" "" "Execute/Read" ".text" " 00007FFE4C656000" "Image (ASLR)" "152" "152" "8" "56" "8" "48" "48" "" "" "Read" ".rdata" " 00007FFE4C67C000" "Image (ASLR)" "12" "12" "12" "12" "12" "" "" "" "" "Read/Write" ".data" " 00007FFE4C67F000" "Image (ASLR)" "36" "36" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4C688000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4C689000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4C68A000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C690000" "Image (ASLR)" "700" "700" "20" "240" "32" "208" "208" "" "6" "Execute/Read" "C:\Windows\System32\advapi32.dll" " 00007FFE4C690000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C691000" "Image (ASLR)" "420" "420" "" "68" "" "68" "68" "" "" "Execute/Read" ".text" " 00007FFE4C6FA000" "Image (ASLR)" "220" "220" "12" "144" "12" "132" "132" "" "" "Read" ".rdata" " 00007FFE4C731000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE4C735000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4C736000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4C73B000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4C73C000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4C73D000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C740000" "Image (ASLR)" "428" "428" "4" "68" "16" "52" "52" "" "5" "Execute/Read" "C:\Windows\System32\ws2_32.dll" " 00007FFE4C740000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C741000" "Image (ASLR)" "260" "260" "" "24" "" "24" "24" "" "" "Execute/Read" ".text" " 00007FFE4C782000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Execute/Read" ".wpp_sf" " 00007FFE4C785000" "Image (ASLR)" "52" "52" "8" "28" "8" "20" "20" "" "" "Read" ".rdata" " 00007FFE4C792000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4C793000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4C797000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4C798000" "Image (ASLR)" "72" "72" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4C7AA000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C7B0000" "Image (ASLR)" "176" "176" "4" "148" "16" "132" "132" "" "5" "Execute/Read" "C:\Windows\System32\gdi32.dll" " 00007FFE4C7B0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C7B1000" "Image (ASLR)" "64" "64" "" "48" "" "48" "48" "" "" "Execute/Read" ".text" " 00007FFE4C7C1000" "Image (ASLR)" "80" "80" "4" "80" "4" "76" "76" "" "" "Read" ".rdata" " 00007FFE4C7D5000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4C7D6000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4C7D8000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read" ".didat" " 00007FFE4C7DA000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4C7DB000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4C7E0000" "Image (ASLR)" "3,408" "3,408" "24" "1,200" "36" "1,164" "1,164" "" "5" "Execute/Read" "C:\Windows\System32\combase.dll" " 00007FFE4C7E0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4C7E1000" "Image (ASLR)" "2,256" "2,256" "" "764" "" "764" "764" "" "" "Execute/Read" ".text" " 00007FFE4CA15000" "Image (ASLR)" "20" "20" "" "4" "" "4" "4" "" "" "Execute/Read" ".proxy" " 00007FFE4CA1A000" "Image (ASLR)" "792" "792" "8" "332" "8" "324" "324" "" "" "Read" ".rdata" " 00007FFE4CAE0000" "Image (ASLR)" "24" "24" "24" "24" "24" "" "" "" "" "Read/Write" ".data" " 00007FFE4CAE6000" "Image (ASLR)" "172" "172" "" "64" "" "64" "64" "" "" "Read" ".pdata" " 00007FFE4CB11000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4CB12000" "Image (ASLR)" "80" "80" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CB26000" "Image (ASLR)" "56" "56" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CB40000" "Image (ASLR)" "632" "632" "32" "276" "24" "252" "248" "" "8" "Execute/Read" "C:\Windows\System32\msvcrt.dll" " 00007FFE4CB40000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CB41000" "Image (ASLR)" "468" "468" "" "176" "" "176" "176" "" "" "Execute/Read" ".text" " 00007FFE4CBB6000" "Image (ASLR)" "100" "100" "8" "76" "8" "68" "64" "" "" "Read" ".rdata" " 00007FFE4CBCF000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4CBD1000" "Image (ASLR)" "12" "12" "12" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4CBD4000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4CBD6000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4CBD7000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4CBDC000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CBDD000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CC40000" "Image (ASLR)" "1,196" "1,196" "12" "232" "20" "212" "212" "" "6" "Execute/Read" "C:\Windows\System32\ole32.dll" " 00007FFE4CC40000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CC41000" "Image (ASLR)" "816" "816" "" "80" "" "80" "80" "" "" "Execute/Read" ".text" " 00007FFE4CD0D000" "Image (ASLR)" "200" "200" "8" "112" "8" "104" "104" "" "" "Read" ".rdata" " 00007FFE4CD3F000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4CD41000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4CD42000" "Image (ASLR)" "60" "60" "" "20" "" "20" "20" "" "" "Read" ".pdata" " 00007FFE4CD51000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4CD52000" "Image (ASLR)" "88" "88" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CD68000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CD70000" "Image (ASLR)" "624" "624" "16" "160" "28" "132" "132" "" "5" "Execute/Read" "C:\Windows\System32\sechost.dll" " 00007FFE4CD70000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CD71000" "Image (ASLR)" "404" "404" "" "64" "" "64" "64" "" "" "Execute/Read" ".text" " 00007FFE4CDD6000" "Image (ASLR)" "160" "160" "8" "68" "8" "60" "60" "" "" "Read" ".rdata" " 00007FFE4CDFE000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE4CE02000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4CE07000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4CE08000" "Image (ASLR)" "8" "8" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CE0A000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CE10000" "Image (ASLR)" "192" "192" "4" "100" "12" "88" "88" "" "5" "Execute/Read" "C:\Windows\System32\imm32.dll" " 00007FFE4CE10000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CE11000" "Image (ASLR)" "120" "120" "" "48" "" "48" "48" "" "" "Execute/Read" ".text" " 00007FFE4CE2F000" "Image (ASLR)" "28" "28" "4" "28" "4" "24" "24" "" "" "Read" ".rdata" " 00007FFE4CE36000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4CE37000" "Image (ASLR)" "8" "8" "" "8" "" "8" "8" "" "" "Read" ".pdata" " 00007FFE4CE39000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4CE3A000" "Image (ASLR)" "20" "20" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CE3F000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CE40000" "Image (ASLR)" "32" "32" "4" "24" "8" "16" "16" "" "5" "Execute/Read" "C:\Windows\System32\psapi.dll" " 00007FFE4CE40000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CE41000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" ".text" " 00007FFE4CE42000" "Image (ASLR)" "8" "8" "4" "8" "4" "4" "4" "" "" "Read" ".rdata" " 00007FFE4CE44000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4CE45000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4CE46000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4CE47000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CE50000" "Image (ASLR)" "1,656" "1,656" "8" "400" "24" "376" "376" "" "5" "Execute/Read" "C:\Windows\System32\user32.dll" " 00007FFE4CE50000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CE51000" "Image (ASLR)" "572" "572" "" "224" "" "224" "224" "" "" "Execute/Read" ".text" " 00007FFE4CEE0000" "Image (ASLR)" "132" "132" "12" "124" "12" "112" "112" "" "" "Read" ".rdata" " 00007FFE4CF01000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4CF03000" "Image (ASLR)" "28" "28" "" "20" "" "20" "20" "" "" "Read" ".pdata" " 00007FFE4CF0A000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4CF0B000" "Image (ASLR)" "904" "904" "" "16" "" "16" "16" "" "" "Read" ".rsrc" " 00007FFE4CFED000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4CFF0000" "Image (ASLR)" "116" "116" "8" "76" "16" "60" "60" "" "5" "Execute/Read" "C:\Windows\System32\imagehlp.dll" " 00007FFE4CFF0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4CFF1000" "Image (ASLR)" "44" "44" "" "32" "" "32" "32" "" "" "Execute/Read" ".text" " 00007FFE4CFFC000" "Image (ASLR)" "32" "32" "4" "24" "4" "20" "20" "" "" "Read" ".rdata" " 00007FFE4D004000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4D006000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4D007000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4D008000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".mrdata" " 00007FFE4D00B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D00C000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D010000" "Image (ASLR)" "756" "756" "8" "316" "24" "292" "292" "" "6" "Execute/Read" "C:\Windows\System32\kernel32.dll" " 00007FFE4D010000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D011000" "Image (ASLR)" "504" "504" "" "132" "" "132" "132" "" "" "Execute/Read" ".text" " 00007FFE4D08F000" "Image (ASLR)" "204" "204" "16" "152" "16" "136" "136" "" "" "Read" ".rdata" " 00007FFE4D0C2000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4D0C3000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4D0C4000" "Image (ASLR)" "24" "24" "" "16" "" "16" "16" "" "" "Read" ".pdata" " 00007FFE4D0CA000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4D0CB000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D0CC000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D0D0000" "Image (ASLR)" "340" "340" "4" "112" "16" "96" "96" "" "5" "Execute/Read" "C:\Windows\System32\shlwapi.dll" " 00007FFE4D0D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D0D1000" "Image (ASLR)" "180" "180" "" "32" "" "32" "32" "" "" "Execute/Read" ".text" " 00007FFE4D0FE000" "Image (ASLR)" "128" "128" "8" "64" "8" "56" "56" "" "" "Read" ".rdata" " 00007FFE4D11E000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4D11F000" "Image (ASLR)" "12" "12" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4D122000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4D123000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D124000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D130000" "Image (ASLR)" "32" "32" "4" "24" "8" "16" "16" "" "5" "Execute/Read" "C:\Windows\System32\nsi.dll" " 00007FFE4D130000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D131000" "Image (ASLR)" "8" "8" "" "8" "" "8" "8" "" "" "Execute/Read" ".text" " 00007FFE4D133000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".rdata" " 00007FFE4D134000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4D135000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4D136000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D137000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D1D0000" "Image (ASLR)" "676" "676" "24" "128" "32" "96" "92" "" "7" "Execute/Read" "C:\Windows\System32\clbcatq.dll" " 00007FFE4D1D0000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D1D1000" "Image (ASLR)" "428" "428" "" "48" "" "48" "48" "" "" "Execute/Read" ".text" " 00007FFE4D23C000" "Image (ASLR)" "180" "180" "8" "48" "8" "40" "36" "" "" "Read" ".rdata" " 00007FFE4D269000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read/Write" ".data" " 00007FFE4D26D000" "Image (ASLR)" "4" "4" "4" "" "" "" "" "" "" "Copy on write" ".data" " 00007FFE4D26E000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4D26F000" "Image (ASLR)" "20" "20" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4D274000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4D275000" "Image (ASLR)" "8" "8" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D277000" "Image (ASLR)" "8" "8" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D280000" "Image (ASLR)" "692" "692" "8" "160" "20" "140" "140" "" "5" "Execute/Read" "C:\Windows\System32\SHCore.dll" " 00007FFE4D280000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D281000" "Image (ASLR)" "468" "468" "" "80" "" "80" "80" "" "" "Execute/Read" ".text" " 00007FFE4D2F6000" "Image (ASLR)" "152" "152" "8" "60" "8" "52" "52" "" "" "Read" ".rdata" " 00007FFE4D31C000" "Image (ASLR)" "8" "8" "8" "8" "8" "" "" "" "" "Read/Write" ".data" " 00007FFE4D31E000" "Image (ASLR)" "36" "36" "" "" "" "" "" "" "" "Read" ".pdata" " 00007FFE4D327000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read" ".didat" " 00007FFE4D328000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".rsrc" " 00007FFE4D329000" "Image (ASLR)" "16" "16" "" "" "" "" "" "" "" "Read" ".reloc" "00007FFE4D370000" "Image (ASLR)" "2,016" "2,016" "48" "1,488" "56" "1,432" "1,432" "" "7" "Execute/Read" "C:\Windows\System32\ntdll.dll" " 00007FFE4D370000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" "Header" " 00007FFE4D371000" "Image (ASLR)" "1,128" "1,128" "" "1,128" "" "1,128" "1,128" "" "" "Execute/Read" ".text" " 00007FFE4D48B000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" "PAGE" " 00007FFE4D48C000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Execute/Read" "RT" " 00007FFE4D48D000" "Image (ASLR)" "292" "292" "" "220" "" "220" "220" "" "" "Read" ".rdata" " 00007FFE4D4D6000" "Image (ASLR)" "4" "4" "4" "4" "4" "" "" "" "" "Read/Write" ".data" " 00007FFE4D4D7000" "Image (ASLR)" "8" "8" "8" "4" "" "4" "4" "" "" "Copy on write" ".data" " 00007FFE4D4D9000" "Image (ASLR)" "36" "36" "36" "36" "36" "" "" "" "" "Read/Write" ".data" " 00007FFE4D4E2000" "Image (ASLR)" "60" "60" "" "56" "" "56" "56" "" "" "Read" ".pdata" " 00007FFE4D4F1000" "Image (ASLR)" "16" "16" "16" "16" "16" "" "" "" "" "Read" ".mrdata" " 00007FFE4D4F5000" "Image (ASLR)" "4" "4" "" "4" "" "4" "4" "" "" "Read" ".00cfg" " 00007FFE4D4F6000" "Image (ASLR)" "452" "452" "" "8" "" "8" "8" "" "" "Read" ".rsrc" " 00007FFE4D567000" "Image (ASLR)" "4" "4" "" "" "" "" "" "" "" "Read" ".reloc"
