; ; This file defines the base virtual address for Dynamic Link Libraries (DLL) ; that are part of the Windows NT System. The first token on a line is the name ; of the DLL and the second token is the base virtual address, in hexidecimal. ; The third token is the maximum size of the DLL image file, including symbols. ; ; NOTE: Unused areas are marked as _FREE_. usermode 0x01000000 0x60000000 tglcase 0x44000000 0x00080000 pmatch 0x44080000 0x00080000 justify 0x44100000 0x00080000 ulcase 0x44180000 0x00080000 filter 0x44200000 0x00080000 mhelp 0x44280000 0x00080000 mepparty 0x44300000 0x00080000 srmep 0x44380000 0x00080000 mshelp 0x44400000 0x00080000 mbrowse 0x44480000 0x00080000 zextens 0x44500000 0x00080000 netmsg 0x44580000 0x00080000 neth 0x44600000 0x00080000 netevent 0x44680000 0x00080000 iologmsg 0x44700000 0x00080000 ulib 0x44780000 0x00080000 autoulib 0x44800000 0x00080000 uhpfs 0x44880000 0x00080000 ufat 0x44900000 0x00080000 untfs 0x44980000 0x00080000 ifsutil 0x44a00000 0x00080000 cnvfat 0x44a80000 0x00080000 cnvntfs 0x44b00000 0x00080000 fmifs 0x44b80000 0x00080000 uspifs 0x44c00000 0x00080000 ureg 0x44c80000 0x00080000 dsfolder 0x44d00000 0x00080000 queryui 0x44d80000 0x00080000 nlgwbrkr 0x44e00000 0x00100000 ulibif 0x44f00000 0x00080000 cudbfs 0x44f80000 0x00080000 proxy 0x45000000 0x00080000 alertsys 0x45080000 0x00080000 commnot 0x45100000 0x00080000 cryptdll 0x45180000 0x00080000 demoif 0x45200000 0x00080000 menuedt 0x45280000 0x00080000 hwdll 0x45300000 0x00080000 clock 0x45380000 0x00080000 slm 0x45400000 0x00080000 cal 0x45480000 0x00080000 report 0x45500000 0x00080000 desk 0x45580000 0x00080000 cxxflt 0x45600000 0x00080000 clocksch 0x45680000 0x00080000 dfsui 0x45700000 0x00080000 iclass 0x45780000 0x00080000 kdcsvc 0x45800000 0x00080000 slmck 0x45880000 0x00080000 cmsstg 0x45900000 0x00080000 iprod 0x45980000 0x00080000 kerberos 0x45a00000 0x00080000 ciext 0x45a80000 0x00080000 applet1 0x45b00000 0x00080000 cairocpl 0x45b80000 0x00080000 cpo 0x45c00000 0x00080000 deskapp 0x45c80000 0x00080000 sadmin 0x45d00000 0x00080000 ntlm 0x45d80000 0x00080000 objsrv 0x45e00000 0x00080000 msgfno 0x45e80000 0x00080000 lnktrack 0x45f00000 0x00080000 pocket 0x45f80000 0x00080000 dsfsmsgs 0x46000000 0x00080000 riched20 0x46080000 0x00080000 _CFREE 0x46100000 0x00080000 scperf 0x46180000 0x00080000 msvcbook 0x46200000 0x00080000 dsyscpl 0x46280000 0x00080000 bmpctl 0x46300000 0x00080000 spintime 0x46380000 0x00080000 grpbox 0x46400000 0x00080000 security 0x46480000 0x00080000 secur128 0x46480000 0x00080000 mdbmsg 0x46500000 0x00080000 bimport 0x46580000 0x00080000 oldctrls 0x46600000 0x00080000 smctrls 0x46680000 0x00080000 offfilt 0x46700000 0x00080000 stdobj 0x46780000 0x00080000 csumcat 0x46800000 0x00080000 sysmgmt 0x46880000 0x00080000 dsexts 0x46900000 0x00080000 dfssetup 0x46980000 0x00080000 testdll 0x46a00000 0x00080000 cap 0x46a80000 0x00080000 sysinf 0x46b00000 0x00080000 shdebug 0x46b80000 0x00080000 ntdsmsg 0x46c00000 0x00080000 popups 0x46c80000 0x00080000 replsup 0x46d00000 0x00080000 schema 0x46d80000 0x00080000 useragnt 0x46e00000 0x00080000 vpcont 0x46e80000 0x00080000 uares 0x46f00000 0x00080000 rndrevrp 0x46f80000 0x00080000 pdfpage 0x47000000 0x00080000 pkgpage 0x47080000 0x00080000 package 0x47100000 0x00080000 pdf 0x47180000 0x00080000 jetback 0x47200000 0x00080000 dfsprov 0x47280000 0x00080000 dfsinstr 0x47300000 0x00080000 lprofile 0x47380000 0x00080000 jetbcli 0x47400000 0x00080000 oledlg 0x47480000 0x00080000 edbmsg 0x47500000 0x00080000 oleprx32 0x47580000 0x00080000 wintrust 0x47600000 0x00080000 testext 0x47680000 0x00080000 loghrs 0x47700000 0x00080000 scstg 0x47780000 0x00080000 smoke 0x47800000 0x00080000 dsys 0x47880000 0x00080000 chglogdb 0x47900000 0x00080000 emsabp 0x47980000 0x00080000 flatrst 0x47a00000 0x00080000 softpub 0x47a80000 0x00080000 oabgen 0x47b00000 0x00080000 replui 0x47b80000 0x00080000 roschlog 0x47c00000 0x00080000 rsmgr 0x47c80000 0x00080000 dsobjs 0x47d00000 0x00080000 account 0x47d80000 0x00080000 ntdsperf 0x47e00000 0x00080000 ntdskcc 0x47e80000 0x00080000 dsmail 0x47f00000 0x00080000 atsvc 0x47f80000 0x00080000 ntdsx400 0x48000000 0x00080000 ntdsxds 0x48080000 0x00080000 dssrv 0x48100000 0x00080000 digsig 0x48180000 0x00080000 xfilexr 0x48200000 0x00080000 webcore 0x48280000 0x00080000 rtoolbar 0x48300000 0x00080000 rtfdoc 0x48380000 0x00080000 spincube 0x48400000 0x00080000 msgina 0x48480000 0x00080000 rsabase 0x48500000 0x00080000 smss 0x48580000 0x00080000 brhj770 0x48600000 0x00080000 brother9 0x48680000 0x00080000 brothr24 0x48700000 0x00080000 canon330 0x48780000 0x00080000 canon800 0x48800000 0x00080000 canonlbp 0x48880000 0x00080000 cit24us 0x48900000 0x00080000 cit9us 0x48980000 0x00080000 citoh 0x48a00000 0x00080000 dec24pin 0x48a80000 0x00080000 dec9pin 0x48b00000 0x00080000 diconix 0x48b80000 0x00080000 epson24 0x48c00000 0x00080000 epson9 0x48c80000 0x00080000 escp2e 0x48d00000 0x00080000 escp2ms 0x48d80000 0x00080000 fuji24 0x48e00000 0x00080000 fuji9 0x48e80000 0x00080000 hpdskjet 0x48f00000 0x00080000 hppcl 0x48f80000 0x00080000 optra 0x49080000 0x00080000 pcl5ems 0x49100000 0x00080000 pcl5ms 0x49180000 0x00080000 ibm238x 0x49200000 0x00080000 ibm239x 0x49280000 0x00080000 ibm5204 0x49300000 0x00080000 ibm5204 0x49380000 0x00080000 ibmppdsl 0x49400000 0x00080000 ibmport 0x49480000 0x00080000 jp350 0x49500000 0x00080000 kyocera 0x49580000 0x00080000 kyocerax 0x49580000 0x00080000 mantal 0x49600000 0x00080000 mantal24 0x49680000 0x00080000 mantal90 0x49700000 0x00080000 mt735 0x49780000 0x00080000 nec24pin 0x49800000 0x00080000 oki24 0x49880000 0x00080000 oki9ibm 0x49900000 0x00080000 olidm24 0x49980000 0x00080000 olidm9 0x49a00000 0x00080000 paintjet 0x49a80000 0x00080000 panson24 0x49b00000 0x00080000 panson9 0x49b80000 0x00080000 proprint 0x49c00000 0x00080000 proprn24 0x49c80000 0x00080000 ps1 0x49d00000 0x00080000 quietjet 0x49d80000 0x00080000 qwiii 0x49e00000 0x00080000 seiko 0x49e80000 0x00080000 seiko24e 0x49f00000 0x00080000 seikosh9 0x49f80000 0x00080000 star24e 0x4a000000 0x00080000 star9e 0x4a080000 0x00080000 starjet 0x4a100000 0x00080000 thinkjet 0x4a180000 0x00080000 ti850 0x4a200000 0x00080000 toshiba 0x4a280000 0x00080000 txtonly 0x4a300000 0x00080000 xeroxpcl 0x49000000 0x00080000 loader 0x4a380000 0x00080000 imagehlp 0x4a400000 0x00080000 oki9 0x4a480000 0x00080000 dec3200 0x4a500000 0x00080000 vmmreg32 0x4a580000 0x00080000 dbgss 0x4a600000 0x00080000 csrss 0x4a680000 0x00080000 os2ss 0x4a700000 0x00080000 psxss 0x4a780000 0x00080000 Wx86Group 0x4a800000 0x00080000 eecxxx86 0x4a880000 0x00080000 eecxxmip 0x4a900000 0x00080000 eecxxalp 0x4a980000 0x00080000 eecxxppc 0x4aa00000 0x00080000 eecxx 0x4aa80000 0x00080000 emx86 0x4ab00000 0x00080000 emmip 0x4ab80000 0x00080000 emalp 0x4ac00000 0x00080000 emppc 0x4ac80000 0x00080000 cmd 0x4ad00000 0x00080000 wspmib 0x4ad80000 0x00080000 shcv 0x4ae00000 0x00080000 tlloc 0x4ae80000 0x00080000 tlser 0x4af00000 0x00080000 tlser32s 0x4af80000 0x00080000 tlser32 0x4b000000 0x00080000 tlpipe 0x4b080000 0x00080000 dm 0x4b100000 0x00080000 dm32s 0x4b180000 0x00080000 dmkdx86 0x4b200000 0x00080000 dmkdmip 0x4b280000 0x00080000 dmkdalp 0x4b300000 0x00080000 dmkdppc 0x4b380000 0x00080000 kdextx86 0x4b400000 0x00080000 kdextmip 0x4b480000 0x00080000 kdextalp 0x4b500000 0x00080000 kdextppc 0x4b580000 0x00080000 acledit 0x4b600000 0x00080000 mpr 0x4b680000 0x00080000 ntlanman 0x4b700000 0x00080000 srvmgr 0x4b780000 0x00080000 ncpa 0x4b800000 0x00080000 mprui 0x4b880000 0x00080000 netui0 0x4b900000 0x00080000 netui1 0x4b980000 0x00080000 ifiltcnv 0x4ba00000 0x00080000 ftpsmx 0x4ba80000 0x00080000 ftpmgr 0x4bb00000 0x00080000 nwcfg 0x4bb80000 0x00080000 ntlanui 0x4bc00000 0x00080000 tcpcfg 0x4bc80000 0x00080000 ipxcfg 0x4bd00000 0x00080000 ntlsapi 0x4bd80000 0x00080000 lsapi32 0x4be00000 0x00080000 mslsp32 0x4be80000 0x00080000 ccfapi32 0x4bf00000 0x00080000 srvkd 0x4bf80000 0x00080000 llsrpc 0x4c000000 0x00080000 racfg 0x4c080000 0x00080000 isnext 0x4c100000 0x00080000 profext 0x4c180000 0x00080000 activeds 0x4c200000 0x00080000 dsrights 0x4c200000 0x00080000 dbgdll 0x4c280000 0x00080000 advapi32 0x4c300000 0x00080000 csrrtl 0x4c380000 0x00080000 csrsrv 0x4c400000 0x00080000 adsnw 0x4c480000 0x00080000 basertl 0x4c500000 0x00080000 basesrv 0x4c580000 0x00080000 adsnds 0x4c600000 0x00080000 winsrv 0x4c680000 0x00080000 winsrv2 0x4c700000 0x00080000 rasdd 0x4c780000 0x00080000 sysmono 0x4c800000 0x00080000 courier 0x4c880000 0x00080000 helv 0x4c900000 0x00080000 times 0x4c980000 0x00080000 netapi32 0x4ca00000 0x00080000 wowfaxui 0x4ca80000 0x00080000 winmgr 0x4cb00000 0x00080000 display 0x4cb80000 0x00080000 vga 0x4cc00000 0x00080000 winspool 0x4cc80000 0x00080000 splsrv 0x4cd00000 0x00080000 ntprint 0x4cd80000 0x00080000 pscript 0x4ce00000 0x00080000 halftone 0x4ce80000 0x00080000 lmspool 0x4cf00000 0x00080000 os2dll 0x4cf80000 0x00080000 psxdll 0x4d000000 0x00080000 winnet 0x4d080000 0x00080000 msv1_0 0x4d100000 0x00080000 samlib 0x4d180000 0x00080000 lsaap 0x4d200000 0x00080000 netrap 0x4d280000 0x00080000 adsnt 0x4d300000 0x00080000 dvideo 0x4d380000 0x00080000 dplay 0x4d400000 0x00080000 console 0x4d480000 0x00080000 gdi32 0x4d500000 0x00080000 apidll 0x4d580000 0x00080000 imgadmin 0x4d600000 0x00080000 imgedit 0x4d680000 0x00080000 imgscan 0x4d700000 0x00080000 imgthumb 0x4d780000 0x00080000 jpeg1x32 0x4d800000 0x00080000 jpeg2x32 0x4d880000 0x00080000 oiadm400 0x4d900000 0x00080000 oicom400 0x4d980000 0x00080000 oidis400 0x4da00000 0x00080000 oifil400 0x4da80000 0x00080000 oigfs400 0x4db00000 0x00080000 oiprt400 0x4db80000 0x00080000 oislb400 0x4dc00000 0x00080000 oissq400 0x4dc80000 0x00080000 oitwa400 0x4dd00000 0x00080000 oiui400 0x4dd80000 0x00080000 wangcmn 0x4de00000 0x00080000 wangshl 0x4de80000 0x00080000 media 0x4df00000 0x00080000 mediasrv 0x4df80000 0x00080000 lprmon 0x4e000000 0x00080000 lprhelp 0x4e080000 0x00080000 lpdsvc 0x4e100000 0x00080000 printui 0x4e180000 0x00080000 winsrvk 0x4e200000 0x00080000 msafd 0x4e280000 0x00080000 mswsock 0x4e300000 0x00080000 ws2help 0x4e380000 0x00080000 rnr20 0x4e400000 0x00080000 DEBMP 0x4e480000 0x00080000 DEHEX 0x4e500000 0x00080000 DEMET 0x4e580000 0x00080000 DESS 0x4e600000 0x00080000 glexts 0x4e680000 0x00080000 DEWP 0x4e700000 0x00080000 SCCVIEW 0x4e780000 0x00080000 MSVIEWUT 0x4e800000 0x00080000 wdt32 0x4e880000 0x00080000 nddeexts 0x4e900000 0x00080000 sde 0x4e980000 0x00080000 ndrd 0x4ea00000 0x00080000 hdxdll 0x4ea80000 0x00080000 splexts 0x4eb00000 0x00080000 conexts 0x4eb80000 0x00080000 gdiexts 0x4ec00000 0x00080000 gdikdx 0x4ec80000 0x00080000 ttkdx 0x4ed00000 0x00080000 userexts 0x4ed80000 0x00080000 userkdx 0x4ee00000 0x00080000 ntsdexts 0x4ee80000 0x00080000 plotter 0x4ef00000 0x00080000 rpcrt4 0x4ef80000 0x00080000 imm32 0x4f000000 0x00080000 winmm 0x4f080000 0x00080000 rpcssp 0x4f100000 0x00080000 mciwave 0x4f180000 0x00080000 rpclts1 0x4f200000 0x00080000 rpcltc1 0x4f280000 0x00080000 ldrdll 0x4f300000 0x00080000 mcicda 0x4f380000 0x00080000 plotui 0x4f400000 0x00080000 rasddui 0x4f480000 0x00080000 pscrptui 0x4f500000 0x00080000 mmio 0x4f580000 0x00080000 rpcnts1 0x4f600000 0x00080000 rpcntc1 0x4f680000 0x00080000 nlsapi 0x4f700000 0x00080000 ws2_32 0x4f780000 0x00080000 afdkd 0x4f800000 0x00080000 olesvr32 0x4f880000 0x00080000 olecli32 0x4f900000 0x00080000 msgsvc 0x4f980000 0x00080000 decpsmon 0x4fa00000 0x00080000 sys003 0x4fa80000 0x00080000 beta2 0x4fb00000 0x00080000 psapi 0x4fb80000 0x00080000 rpcdce4 0x4fc00000 0x00080000 eventlog 0x4fc80000 0x00080000 xactsrv 0x4fd00000 0x00080000 winreg 0x4fd80000 0x00080000 ntdsslot 0x4fe00000 0x00080000 samlsa 0x4fe80000 0x00080000 mmdrv 0x4ff00000 0x00080000 dlcapi 0x4ff80000 0x00080000 win32spl 0x50000000 0x00080000 localspl 0x50080000 0x00080000 rpcltc5 0x50100000 0x00080000 netlogon 0x50180000 0x00080000 tmsre32 0x50200000 0x00080000 lsaudll 0x50280000 0x00080000 mciseq 0x50300000 0x00080000 winprint 0x50380000 0x00080000 localmon 0x50400000 0x00080000 msaudite 0x50480000 0x00080000 msobjs 0x50500000 0x00080000 hpmon 0x50580000 0x00080000 alrsvc 0x50600000 0x00080000 srvsvc 0x50680000 0x00080000 wkssvc 0x50700000 0x00080000 msafdext 0x50780000 0x00080000 compstui 0x50800000 0x00080000 htui 0x50880000 0x00080000 lsasrv 0x50900000 0x00080000 mmsndsrv 0x50980000 0x00080000 midi 0x50a00000 0x00080000 browser 0x50a80000 0x00080000 drivers 0x50b00000 0x00080000 lmmon 0x50b80000 0x00080000 spoolss 0x50c00000 0x00080000 sndblst 0x50c80000 0x00080000 dsrights 0x50d00000 0x00080000 ntlmssps 0x50d80000 0x00080000 ntlms128 0x50d80000 0x00080000 glu32 0x50e00000 0x00080000 memtrace 0x50e80000 0x00080000 ogldrv 0x50f00000 0x00080000 dciman32 0x50f80000 0x00080000 ddraw 0x51000000 0x00080000 dsound 0x51080000 0x00080000 pjlmon 0x51100000 0x00080000 dpwsock 0x51180000 0x00080000 dpserial 0x51200000 0x00080000 dpsocket 0x51280000 0x00080000 formidbl 0x51300000 0x00080000 fole2ui 0x51380000 0x00080000 ntshrui 0x51400000 0x00080000 ntlanui2 0x51480000 0x00080000 shareui 0x51500000 0x00080000 wsasetup 0x51580000 0x00080000 control 0x51600000 0x00080000 access 0x51680000 0x00080000 sound 0x51700000 0x00080000 appwiz 0x51780000 0x00080000 intl 0x51800000 0x00080000 timedate 0x51880000 0x00080000 utc 0x51900000 0x00080000 mouse 0x51980000 0x00080000 sysdm 0x51a00000 0x00080000 desk 0x51a80000 0x00080000 modem 0x51b00000 0x00080000 security 0x51b80000 0x00080000 ; this is the same as security - both will never be loaded secur32 0x51b80000 0x00080000 main 0x51c00000 0x00080000 ups 0x51c80000 0x00080000 cursors 0x51d00000 0x00080000 pcmcia 0x51d80000 0x00080000 t1instal 0x51e00000 0x00080000 devapps 0x51e80000 0x00080000 console 0x51f00000 0x00080000 mmsys 0x51f80000 0x00080000 indicdll 0x52000000 0x00080000 comdlg32 0x52080000 0x00080000 wldap32 0x52100000 0x00080000 version 0x52180000 0x00080000 nddeapi 0x52200000 0x00080000 nddenb32 0x52280000 0x00080000 shscrap 0x52300000 0x00080000 ftsrch 0x52380000 0x00080000 docprop 0x52400000 0x00080000 diskcopy 0x52480000 0x00080000 mswsutil 0x52500000 0x00080000 ws2map 0x52580000 0x00080000 linkinfo 0x52600000 0x00080000 synceng 0x52680000 0x00080000 syncui 0x52700000 0x00080000 rshx32 0x52780000 0x00080000 prtq32 0x52800000 0x00080000 userenv 0x52880000 0x00080000 shcompui 0x52900000 0x00080000 ; Keyboard drivers are all the same kbdus 0x52980000 0x00080000 kbdal 0x52980000 0x00080000 kbdbe 0x52980000 0x00080000 kbdbene 0x52980000 0x00080000 kbdblr 0x52980000 0x00080000 kbdbu 0x52980000 0x00080000 kbdbr 0x52980000 0x00080000 kbdca 0x52980000 0x00080000 kbdcan 0x52980000 0x00080000 kbdcr 0x52980000 0x00080000 kbdcz 0x52980000 0x00080000 kbdcz1 0x52980000 0x00080000 kbdcz2 0x52980000 0x00080000 kbdda 0x52980000 0x00080000 kbddv 0x52980000 0x00080000 kbdes 0x52980000 0x00080000 kbdest 0x52980000 0x00080000 kbdfc 0x52980000 0x00080000 kbdfi 0x52980000 0x00080000 kbdfr 0x52980000 0x00080000 kbdgkl 0x52980000 0x00080000 kbdgr 0x52980000 0x00080000 kbdgr1 0x52980000 0x00080000 kbdhe 0x52980000 0x00080000 kbdhe220 0x52980000 0x00080000 kbdhe319 0x52980000 0x00080000 kbdhu 0x52980000 0x00080000 kbdhu1 0x52980000 0x00080000 kbdic 0x52980000 0x00080000 kbdir 0x52980000 0x00080000 kbdit 0x52980000 0x00080000 kbdit142 0x52980000 0x00080000 kbdla 0x52980000 0x00080000 kbdlt 0x52980000 0x00080000 kbdlt1 0x52980000 0x00080000 kbdlv 0x52980000 0x00080000 kbdlv1 0x52980000 0x00080000 kbdne 0x52980000 0x00080000 kbdno 0x52980000 0x00080000 kbdpl 0x52980000 0x00080000 kbdpl1 0x52980000 0x00080000 kbdpo 0x52980000 0x00080000 kbdro 0x52980000 0x00080000 kbdru 0x52980000 0x00080000 kbdru1 0x52980000 0x00080000 kbdsf 0x52980000 0x00080000 kbdsg 0x52980000 0x00080000 kbdsl 0x52980000 0x00080000 kbdsl1 0x52980000 0x00080000 kbdsp 0x52980000 0x00080000 kbdsv 0x52980000 0x00080000 kbdsw 0x52980000 0x00080000 kbdtuf 0x52980000 0x00080000 kbdtuq 0x52980000 0x00080000 kbduk 0x52980000 0x00080000 kbdur 0x52980000 0x00080000 kbdurs 0x52980000 0x00080000 kbdusl 0x52980000 0x00080000 kbdusr 0x52980000 0x00080000 kbdusx 0x52980000 0x00080000 kbdycc 0x52980000 0x00080000 kbdycl 0x52980000 0x00080000 kbdhela2 0x52a00000 0x00080000 kbdhela3 0x52a00000 0x00080000 ; ; FarEast keyboard layouts - begin ; kbdjpn 0x52980000 0x00080000 kbd101 0x52980000 0x00080000 kbd106 0x52980000 0x00080000 kbd106n 0x52980000 0x00080000 kbdax2 0x52980000 0x00080000 kbdibm02 0x52980000 0x00080000 f3ahvoas 0x52980000 0x00080000 kbdlk41a 0x52980000 0x00080000 kbdlk41j 0x52980000 0x00080000 kbdkor 0x52980000 0x00080000 kbd101a 0x52980000 0x00080000 kbd101b 0x52980000 0x00080000 kbd101c 0x52980000 0x00080000 kbd103 0x52980000 0x00080000 kbdnec 0x52980000 0x00080000 kbdn106 0x52980000 0x00080000 ; FarEast keyboard layouts - end mstask 0x52a80000 0x00080000 dsui 0x52b00000 0x00080000 trace 0x52b80000 0x00080000 relay 0x52c00000 0x00080000 infosoft 0x52c80000 0x00180000 iprip 0x52e00000 0x00080000 wsock32 0x52e80000 0x00080000 winstrm 0x52f00000 0x00080000 inetmib1 0x52f80000 0x00080000 lmmib2 0x53100000 0x00080000 tcpipsvc 0x53180000 0x00080000 nbtsvc 0x53200000 0x00080000 telnet 0x53280000 0x00080000 wshtcpip 0x53300000 0x00080000 mgmtapi 0x53380000 0x00080000 icmp 0x53400000 0x00080000 inettrap 0x53480000 0x00080000 testdll 0x53500000 0x00080000 lmhsvc 0x53580000 0x00080000 dhcpsapi 0x53600000 0x00080000 dhcpcsvc 0x53680000 0x00080000 dhcpssvc 0x53700000 0x00080000 inetsvcs 0x53780000 0x00080000 ftpsvc 0x53800000 0x00080000 ftpsvapi 0x53880000 0x00080000 ftpctrs 0x53900000 0x00080000 infocomm 0x53980000 0x00080000 wspapi 0x53a00000 0x00080000 cxxflt 0x53a80000 0x00080000 wspcfg 0x53b00000 0x00080000 w3proxy 0x53b80000 0x00080000 rpcltc8 0x53c00000 0x00080000 rpclts8 0x53c80000 0x00080000 w3svc 0x53d00000 0x00080000 w3svapi 0x53d80000 0x00080000 w3ctrs 0x53e00000 0x00080000 sspifilt 0x53e80000 0x00080000 gopherd 0x53f00000 0x00080000 gdapi 0x53f80000 0x00080000 gdctrs 0x54000000 0x00080000 gdspace 0x54080000 0x00080000 sage 0x54100000 0x00080000 adsldp 0x54180000 0x00080000 isatq 0x54200000 0x00080000 mspapi 0x54280000 0x00080000 infoadmn 0x54300000 0x00080000 infoctrs 0x54380000 0x00080000 mspip 0x54400000 0x00080000 httpodbc 0x54480000 0x00080000 w3pcfg 0x54500000 0x00080000 w3papi 0x54580000 0x00080000 mspmon 0x54600000 0x00080000 rpcltccm 0x54680000 0x00080000 rpcltscm 0x54700000 0x00080000 inetaux 0x54780000 0x00080000 inetsloc 0x54800000 0x00080000 urlcache 0x54880000 0x00080000 mspsec 0x54900000 0x00080000 w32sinet 0x54980000 0x00080000 httpmib 0x54a00000 0x00080000 gdmib 0x54a80000 0x00080000 ftpmib 0x54b00000 0x00080000 gdmib 0x54b80000 0x00080000 w3pmib 0x54c00000 0x00080000 ftpsvc2 0x54c80000 0x00080000 ftpsapi2 0x54d00000 0x00080000 ftpctrs2 0x54d80000 0x00080000 miniprox 0x54e00000 0x00080000 _wsock32 0x54e80000 0x00080000 wsock32f 0x54f00000 0x00080000 netdtect 0x54f80000 0x00080000 msncdet 0x55000000 0x00080000 npincdet 0x55080000 0x00080000 amdncdet 0x55100000 0x00080000 netflx 0x55180000 0x00080000 bhsupp 0x55200000 0x00080000 nal 0x55280000 0x00080000 bhmon 0x55300000 0x00080000 ndis30 0x55380000 0x00080000 bhnetb 0x55400000 0x00080000 rnal 0x55480000 0x00080000 bhkctrl 0x55500000 0x00080000 nwsap 0x55580000 0x00080000 rws32 0x55600000 0x00080000 snmpapi 0x55680000 0x00080000 convmsg 0x55700000 0x00080000 winsctrs 0x55780000 0x00080000 winsmib 0x55800000 0x00080000 dhcpmib 0x55880000 0x00080000 winsevnt 0x55900000 0x00080000 winsrpc 0x55980000 0x00080000 winsrpcb 0x55a00000 0x00080000 dscont 0x55a80000 0x00080000 NTCTL3D 0x55b00000 0x00080000 MPHEAP 0x55b80000 0x00080000 MAPI32 0x55c00000 0x00080000 EDB 0x55c80000 0x00080000 EDBPERF 0x55d00000 0x00080000 ESCPRINT 0x55d80000 0x00080000 RICHED32 0x55e00000 0x00080000 WMSUI32 0x55e80000 0x00080000 MLCFG32 0x55f00000 0x00080000 MSFS32 0x55f80000 0x00080000 GAPI32 0x56000000 0x00080000 samsrv 0x56080000 0x00100000 msvcrt40 0x56180000 0x00080000 msvcr40d 0x56200000 0x00080000 msvcrt20 0x56280000 0x00080000 msvcrt10 0x56300000 0x00080000 msvcrt 0x56380000 0x00080000 MMFMIG32 0x56400000 0x00080000 WMSFR32 0x56480000 0x00080000 WGPOCPL 0x56500000 0x00080000 WGPOADMN 0x56580000 0x00080000 MINET32 0x56600000 0x00080000 INETAB32 0x56680000 0x00080000 MSPST32 0x56700000 0x00080000 MLSHEXT 0x56780000 0x00080000 MAPIU32 0x56800000 0x00080000 MAPIX32 0x56880000 0x00080000 LPREXT 0x56900000 0x00080000 ISNEXT 0x56980000 0x00080000 htmlfilt 0x56c80000 0x00080000 SCCUT 0x56d00000 0x00080000 SCCFA 0x56d80000 0x00080000 SCCFI 0x56e00000 0x00080000 SCCIFILT 0x56e80000 0x00080000 VSACS 0x56f00000 0x00080000 VSASC8 0x56f80000 0x00080000 VSBDR 0x57000000 0x00080000 VSBMP 0x57080000 0x00080000 VSDBS 0x57100000 0x00080000 VSDRW 0x57180000 0x00080000 VSEXE 0x57200000 0x00080000 VSEXE2 0x57280000 0x00080000 VSGIF 0x57300000 0x00080000 VSMCW 0x57380000 0x00080000 VSMP 0x57400000 0x00080000 VSMSW 0x57480000 0x00080000 VSMWP2 0x57500000 0x00080000 VSMWPF 0x57580000 0x00080000 VSPCL 0x57600000 0x00080000 VSPDX 0x57680000 0x00080000 VSPFS 0x57700000 0x00080000 VSPP 0x57780000 0x00080000 VSPP5 0x57800000 0x00080000 VSPP7 0x57880000 0x00080000 VSQPW 0x57900000 0x00080000 VSRTF 0x57980000 0x00080000 VSTIFF 0x57a00000 0x00080000 VSTEXT 0x57a80000 0x00080000 VSTXT 0x57b00000 0x00080000 VSVW3 0x57b80000 0x00080000 VSW6 0x57c00000 0x00080000 VSWKS 0x57c80000 0x00080000 VSWMF 0x57d00000 0x00080000 VSWORD 0x57d80000 0x00080000 VSWORK 0x57e00000 0x00080000 VSWP5 0x57e80000 0x00080000 VSWP6 0x57f00000 0x00080000 VSWPF 0x57f80000 0x00080000 VSWS2 0x58000000 0x00080000 VSXL5 0x58080000 0x00080000 VSXY 0x58100000 0x00080000 CFM30 0x58180000 0x00100000 CFM30U 0x58280000 0x00100000 CFMO30 0x58380000 0x00080000 CFMO30U 0x58400000 0x00080000 inetcpl 0x58500000 0x00080000 secsspi 0x58580000 0x00080000 msnsspc 0x58600000 0x00080000 qperf 0x58680000 0x00080000 iismap 0x58700000 0x00080000 iiscrmap 0x58780000 0x00080000 certmapr 0x5cd80000 0x00080000 iisui 0x5ce00000 0x00080000 iisadmin 0x5cf00000 0x00080000 iistmp4 0x5cf80000 0x00080000 ; ; Security Related DLLs (there is only ; ever one at a time, hence the overlap) ; schannel 0x58800000 0x00100000 schnl128 0x58800000 0x00100000 schanlsa 0x58900000 0x00080000 secure32 0x58980000 0x00080000 w3scfg 0x58A00000 0x00080000 fscfg 0x58A80000 0x00080000 gscfg 0x58B00000 0x00080000 ipudll 0x58B80000 0x00080000 mupkd 0x58C00000 0x00080000 netsetup 0x58C80000 0x00080000 netcfg 0x58D00000 0x000F0000 w3key 0x58E00000 0x00080000 hid 0x58E80000 0x00080000 powercfg 0x58F00000 0x00080000 ntmarta 0x58F80000 0x00080000 ntdsa 0x59000000 0x00200000 ntdssmtp 0x59200000 0x00080000 ntdsapi 0x59280000 0x00080000 printree 0x59300000 0x00080000 lexnetui 0x59380000 0x00080000 mvprm 0x59400000 0x00080000 mvprtobj 0x59480000 0x00080000 mvpo_wri 0x59500000 0x00080000 mvpo_sun 0x59580000 0x00080000 mvprtmgr 0x59600000 0x00080000 mvresdll 0x59680000 0x00080000 mvguidll 0x59700000 0x00080000 agguidll 0x59780000 0x00080000 sfguidll 0x59800000 0x00080000 common 0x59880000 0x00080000 lexll32 0x59900000 0x00080000 lexip32 0x59980000 0x00080000 lexipx32 0x59A00000 0x00080000 mvprtgui 0x59A80000 0x00080000 agprtgui 0x59B00000 0x00080000 sfprtgui 0x59B80000 0x00080000 mvntinst 0x59C00000 0x00080000 lexbce 0x59C80000 0x00080000 lexbcelm 0x59D00000 0x00080000 lexlmpm 0x59D80000 0x00080000 lexlang 0x59E00000 0x00080000 lexcfg 0x59E80000 0x00080000 interact 0x59F00000 0x00080000 lexmon 0x59F80000 0x00080000 drax400 0x5A000000 0x00080000 joy 0x5A080000 0x00080000 backend 0x5a500000 0x00080000 ccrdsvr 0x5a580000 0x00080000 certapi 0x5a600000 0x00080000 certhelp 0x5a680000 0x00080000 certstor 0x5a700000 0x00080000 ecmapi 0x5a780000 0x00080000 root 0x5a800000 0x00080000 credsvr 0x5a880000 0x00080000 paysvr 0x5a900000 0x00080000 mcrdsvr 0x5a980000 0x00080000 mersvr 0x5aa00000 0x00080000 cmrdll 0x5aa80000 0x00080000 httptran 0x5ab00000 0x00080000 bgimer 0x5ab80000 0x00080000 bgiccs 0x5ac00000 0x00080000 bgipay 0x5ac80000 0x00080000 msref 0x5ad00000 0x00080000 ccsref 0x5ad80000 0x00080000 psref 0x5ae00000 0x00080000 strconv 0x5ae80000 0x00080000 digsig 0x5af00000 0x00080000 wintrust 0x5af80000 0x00080000 runornot 0x5b000000 0x00080000 pcertsvr 0x5b080000 0x00080000 certsrv 0x5b100000 0x00080000 redir 0x5b180000 0x00080000 spc 0x5b200000 0x00080000 syscert 0x5b280000 0x00080000 thunkcr 0x5b300000 0x00080000 wincert 0x5b380000 0x00080000 wintrust 0x5b400000 0x00080000 scpmer 0x5b480000 0x00080000 scppay 0x5b500000 0x00080000 scproot 0x5b580000 0x00080000 advpack 0x5b600000 0x00080000 ;Next Three Slots for hprasdd hprasdd 0x5b680000 0x00080000 hprasdui 0x5b700000 0x00080000 hp5sim 0x5b780000 0x00080000 msimg32 0x5b800000 0x00100000 ; CODEWORK doubly-used space here mscms 0x5b880000 0x00100000 newdev 0x5b900000 0x00100000 mmc 0x5b980000 0x00080000 mmcndmgr 0x5ba00000 0x00080000 mmclv 0x5ba80000 0x00080000 mmcfmgmt 0x5bb00000 0x00080000 snapsamp 0x5bb80000 0x00080000 bull24 0x5bc00000 0x00080000 bull9 0x5bc80000 0x00080000 dpcpcl 0x5bd00000 0x00080000 secsetup 0x5be00000 0x00080000 dsctl 0x5be80000 0x00080000 bullaser 0x5bf00000 0x00080000 comctl32 0x5bf80000 0x00080000 d3dhalf 0x5c000000 0x00080000 d3drampf 0x5c080000 0x00080000 d3drg16f 0x5c100000 0x00080000 d3drg32f 0x5c180000 0x00080000 d3drg8f 0x5c200000 0x00080000 d3drgbf 0x5c280000 0x00080000 d3drm16f 0x5c300000 0x00080000 d3drm32f 0x5c380000 0x00080000 d3drm 0x5c400000 0x00080000 d3drm8f 0x5c480000 0x00080000 d3dxof 0x5c500000 0x00080000 d3drg24f 0x5c580000 0x00080000 d3drm24f 0x5c600000 0x00080000 d3dim 0x5c680000 0x00080000 msw3prt 0x5c700000 0x00080000 ntdsetup 0x5c780000 0x00080000 winrnr 0x5c800000 0x00080000 comcat 0x5c880000 0x00080000 clapi 0x5c900000 0x00080000 clapistb 0x5c980000 0x00080000 iislog 0x5ca00000 0x00080000 cinetlog 0x5ca80000 0x00080000 smonctrl 0x5cb00000 0x00080000 msoss 0x5cb80000 0x00080000 hp5simui 0x5cc00000 0x00080000 dskquota 0x5cc80000 0x00080000 dskquopx 0x5cd00000 0x00080000 wshom 0x5cd80000 0x00080000 chanelui 0x5ce00000 0x00080000 dssnap 0x5ce80000 0x00080000 crypt32 0x5cf00000 0x00080000 mssip1 0x5cf80000 0x00080000 ochelpr 0x5d000000 0x00080000 ocimgr 0x5d080000 0x00080000 spriter 0x5d100000 0x00080000 stager 0x5d180000 0x00080000 textfxr 0x5d200000 0x00080000 hostlwr 0x5d280000 0x00080000 hhctrl 0x5d300000 0x00080000 themes 0x5d380000 0x00080000 plustab 0x5d400000 0x00080000 htmlhelp 0x5d480000 0x00080000 cleanoc 0x5d500000 0x00080000 bull18 0x5d580000 0x00080000 x42xxpcl 0x5d600000 0x00080000 _FREE_ 0x5d680000 0x00080000 ; ; Free space from here to 0x63000000. ; Also, lots of _FREE_ spaces open above... Reuse these first ; ; Internet Explorer 2.0 / 3.0 wininet 0x63000000 0x00100000 cachevu 0x63100000 0x00080000 shlwapi 0x63180000 0x00080000 urlmon 0x63200000 0x00080000 url 0x63280000 0x00080000 js 0x63300000 0x00080000 jscript 0x63380000 0x00080000 msrating 0x63400000 0x00080000 mslocusr 0x63440000 0x00040000 ichrcnv 0x63480000 0x00080000 shdocvw 0x63500000 0x00080000 mshtml 0x63580000 0x00080000 htmlctl 0x63600000 0x00080000 inetcpl 0x63680000 0x00080000 actxprxy 0x63700000 0x00080000 _FREE_ 0x63780000 0x00080000 winsspi 0x63800000 0x00100000 ; Internet Explorer 2.0 only ieshstub 0x63700000 0x00080000 secbasic 0x63780000 0x00080000 ; Proxy Server w3pcache 0x63800000 0x00080000 msplog 0x63880000 0x00080000 w3pinet 0x63900000 0x00080000 ; ; Big things ; glmf32 0x65000000 0x00300000 jet 0x65300000 0x00300000 jet500 0x65600000 0x00300000 kernel32 0x65900000 0x00300000 netui2 0x65c00000 0x00300000 ole32 0x65f00000 0x00300000 opengl32 0x66200000 0x00300000 query 0x66500000 0x00300000 shell32 0x66800000 0x00300000 shellalt 0x66b00000 0x00300000 user32 0x66e00000 0x00300000 ntdll 0x67200000 0x00100000 metadata 0x67300000 0x00300000 glpm 0x67700000 0x00300000 ; If we run out, there's more before this range. executive 0xD0020000 0x18000000