-
Notifications
You must be signed in to change notification settings - Fork 36
/
coffbase.txt
1516 lines (1464 loc) · 49.9 KB
/
coffbase.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
;
; This file defines the base virtual address for Dynamic Link Libraries (DLL)
; that are part of the Windows NT System. The first token on a line is the name
; of the DLL and the second token is the base virtual address, in hexidecimal.
; The third token is the maximum size of the DLL image file, including symbols.
;
; NOTE: Unused areas are marked as _FREE_.
usermode 0x01000000 0x60000000
usermode64 0x100000000 0x60000000
sapi 0x40000000 0x10180000
spttseng 0x40180000 0x10100000
spsreng 0x40280000 0x10100000
spsrx 0x40380000 0x10180000
itngram 0x40500000 0x10080000
spcommon 0x40580000 0x10080000
spttschs 0x40600000 0x10280000
tglcase 0x44000000 0x10080000
pmatch 0x44080000 0x10080000
justify 0x44100000 0x10080000
ulcase 0x44180000 0x10080000
filter 0x44200000 0x10080000
mhelp 0x44280000 0x10080000
mepparty 0x44300000 0x10080000
srmep 0x44380000 0x10080000
mshelp 0x44400000 0x10080000
mbrowse 0x44480000 0x10080000
zextens 0x44500000 0x10080000
netmsg 0x44580000 0x10080000
neth 0x44600000 0x10080000
netevent 0x44680000 0x10080000
iologmsg 0x44700000 0x10080000
ulib 0x44780000 0x10080000
autoulib 0x44800000 0x10080000
uhpfs 0x44880000 0x10080000
ufat 0x44900000 0x10080000
untfs 0x44980000 0x10080000
ifsutil 0x44a00000 0x10080000
cnvfat 0x44a80000 0x10080000
cnvntfs 0x44b00000 0x10080000
fmifs 0x44b80000 0x10080000
uspifs 0x44c00000 0x10080000
ureg 0x44c80000 0x10080000
dsfolder 0x44d00000 0x10080000
queryui 0x44d80000 0x10080000
nlgwbrkr 0x44e00000 0x10100000
ulibif 0x44f00000 0x10080000
cudbfs 0x44f80000 0x10080000
proxy 0x45000000 0x10080000
alertsys 0x45080000 0x10080000
commnot 0x45100000 0x10080000
cryptdll 0x45180000 0x10080000
demoif 0x45200000 0x10080000
menuedt 0x45280000 0x10080000
hwdll 0x45300000 0x10080000
clock 0x45380000 0x10080000
slm 0x45400000 0x10080000
cal 0x45480000 0x10080000
report 0x45500000 0x10080000
desk 0x45580000 0x10080000
cxxflt 0x45600000 0x10080000
clocksch 0x45680000 0x10080000
dfsui 0x45700000 0x10080000
iclass 0x45780000 0x10080000
kdcsvc 0x45800000 0x10080000
slmck 0x45880000 0x10080000
cmsstg 0x45900000 0x10080000
iprod 0x45980000 0x10080000
kerberos 0x45a00000 0x10080000
ciext 0x45a80000 0x10080000
applet1 0x45b00000 0x10080000
cairocpl 0x45b80000 0x10080000
cpo 0x45c00000 0x10080000
deskapp 0x45c80000 0x10080000
sadmin 0x45d00000 0x10080000
ntlm 0x45d80000 0x10080000
objsrv 0x45e00000 0x10080000
msgfno 0x45e80000 0x10080000
lnktrack 0x45f00000 0x10080000
pocket 0x45f80000 0x10080000
dsfsmsgs 0x46000000 0x10080000
riched20 0x46080000 0x10080000
ciadmin 0x46100000 0x10080000
scperf 0x46180000 0x10080000
msvcbook 0x46200000 0x10080000
dsyscpl 0x46280000 0x10080000
bmpctl 0x46300000 0x10080000
spintime 0x46380000 0x10080000
grpbox 0x46400000 0x10080000
security 0x46480000 0x10080000
secur128 0x46480000 0x10080000
mdbmsg 0x46500000 0x10080000
bimport 0x46580000 0x10080000
oldctrls 0x46600000 0x10080000
smctrls 0x46680000 0x10080000
offfilt 0x46700000 0x10080000
stdobj 0x46780000 0x10080000
csumcat 0x46800000 0x10080000
sysmgmt 0x46880000 0x10080000
dsexts 0x46900000 0x10080000
dfssetup 0x46980000 0x10080000
testdll 0x46a00000 0x10080000
cap 0x46a80000 0x10080000
sysinf 0x46b00000 0x10080000
shdebug 0x46b80000 0x10080000
ntdsmsg 0x46c00000 0x10080000
popups 0x46c80000 0x10080000
replsup 0x46d00000 0x10080000
schema 0x46d80000 0x10080000
useragnt 0x46e00000 0x10080000
vpcont 0x46e80000 0x10080000
uares 0x46f00000 0x10080000
rndrevrp 0x46f80000 0x10080000
pdfpage 0x47000000 0x10080000
pkgpage 0x47080000 0x10080000
package 0x47100000 0x10080000
pdf 0x47180000 0x10080000
ntdsbsrv 0x47200000 0x10080000
dfsprov 0x47280000 0x10080000
dfsinstr 0x47300000 0x10080000
lprofile 0x47380000 0x10080000
ntdsbcli 0x47400000 0x10080000
oledlg 0x47480000 0x10080000
ntdsbmsg 0x47500000 0x10080000
oleprx32 0x47580000 0x10080000
wintrust 0x47600000 0x10080000
testext 0x47680000 0x10080000
loghrs 0x47700000 0x10080000
scstg 0x47780000 0x10080000
smoke 0x47800000 0x10080000
dsys 0x47880000 0x10080000
chglogdb 0x47900000 0x10080000
emsabp 0x47980000 0x10080000
flatrst 0x47a00000 0x10080000
softpub 0x47a80000 0x10080000
oabgen 0x47b00000 0x10080000
replui 0x47b80000 0x10080000
roschlog 0x47c00000 0x10080000
rsmgr 0x47c80000 0x10080000
dsobjs 0x47d00000 0x10080000
account 0x47d80000 0x10080000
ntdsperf 0x47e00000 0x10080000
ntdskcc 0x47e80000 0x10080000
dsmail 0x47f00000 0x10080000
atsvc 0x47f80000 0x10080000
cscui 0x48000000 0x10080000
ntdsxds 0x48080000 0x10080000
dssrv 0x48100000 0x10080000
digsig 0x48180000 0x10080000
;xiffr3_0 will replace xfilexr soon, hence the duplication
xiffr3_0 0x48200000 0x10080000
xfilexr 0x48200000 0x10080000
webcore 0x48280000 0x10080000
rtoolbar 0x48300000 0x10080000
rtfdoc 0x48380000 0x10080000
spincube 0x48400000 0x10080000
tcpmon 0x48480000 0x10080000
rsabase 0x48500000 0x10080000
smss 0x48580000 0x10080000
brhj770 0x48600000 0x10080000
brother9 0x48680000 0x10080000
brothr24 0x48700000 0x10080000
canon330 0x48780000 0x10080000
canon800 0x48800000 0x10080000
canonlbp 0x48880000 0x10080000
cit24us 0x48900000 0x10080000
cit9us 0x48980000 0x10080000
citoh 0x48a00000 0x10080000
dec24pin 0x48a80000 0x10080000
dec9pin 0x48b00000 0x10080000
diconix 0x48b80000 0x10080000
epson24 0x48c00000 0x10080000
epson9 0x48c80000 0x10080000
escp2e 0x48d00000 0x10080000
escp2ms 0x48d80000 0x10080000
fuji24 0x48e00000 0x10080000
fuji9 0x48e80000 0x10080000
hpdskjet 0x48f00000 0x10080000
hppcl 0x48f80000 0x10080000
optra 0x49080000 0x10080000
pcl5ems 0x49100000 0x10080000
pcl5ms 0x49180000 0x10080000
ibm238x 0x49200000 0x10080000
ibm239x 0x49280000 0x10080000
ibm5204 0x49300000 0x10080000
ibm5204 0x49380000 0x10080000
ibmppdsl 0x49400000 0x10080000
ibmport 0x49480000 0x10080000
jp350 0x49500000 0x10080000
kyocera 0x49580000 0x10080000
kyocerax 0x49580000 0x10080000
mantal 0x49600000 0x10080000
mantal24 0x49680000 0x10080000
mantal90 0x49700000 0x10080000
mt735 0x49780000 0x10080000
nec24pin 0x49800000 0x10080000
oki24 0x49880000 0x10080000
oki9ibm 0x49900000 0x10080000
olidm24 0x49980000 0x10080000
olidm9 0x49a00000 0x10080000
paintjet 0x49a80000 0x10080000
panson24 0x49b00000 0x10080000
panson9 0x49b80000 0x10080000
proprint 0x49c00000 0x10080000
proprn24 0x49c80000 0x10080000
ps1 0x49d00000 0x10080000
quietjet 0x49d80000 0x10080000
qwiii 0x49e00000 0x10080000
seiko 0x49e80000 0x10080000
seiko24e 0x49f00000 0x10080000
seikosh9 0x49f80000 0x10080000
star24e 0x4a000000 0x10080000
star9e 0x4a080000 0x10080000
starjet 0x4a100000 0x10080000
thinkjet 0x4a180000 0x10080000
ti850 0x4a200000 0x10080000
toshiba 0x4a280000 0x10080000
ttyui 0x4a300000 0x10080000
gptext 0x4a380000 0x10080000
xeroxpcl 0x49000000 0x10080000
loader 0x4a380000 0x10080000
imagehlp 0x4a400000 0x10080000
oki9 0x4a480000 0x10080000
dec3200 0x4a500000 0x10080000
vmmreg32 0x4a580000 0x10080000
dbgss 0x4a600000 0x10080000
csrss 0x4a680000 0x10080000
os2ss 0x4a700000 0x10080000
psxss 0x4a780000 0x10080000
Wx86Group 0x4a800000 0x10080000
eecxx 0x4a880000 0x100c0000
eecxxx86 0x4a880000 0x10080000
eecxxmip 0x4a900000 0x10080000
eecxxalp 0x4a980000 0x10080000
eecxxppc 0x4aa00000 0x10080000
eecxx 0x4aa80000 0x10080000
em 0x4ab00000 0x10080000
emx86 0x4ab00000 0x10080000
emmip 0x4ab80000 0x10080000
emalp 0x4ac00000 0x10080000
emppc 0x4ac80000 0x10080000
cmd 0x4ad00000 0x10080000
wspmib 0x4ad80000 0x10080000
shcv 0x4ae00000 0x10080000
symcvt 0x4ae80000 0x10080000
tlloc 0x4af00000 0x10080000
tlser 0x4af80000 0x10080000
tlpipe 0x4b080000 0x10080000
dm 0x4b100000 0x10080000
dmkdx86 0x4b200000 0x10080000
dmkdmip 0x4b280000 0x10080000
dmkdalp 0x4b300000 0x10080000
dmkdppc 0x4b380000 0x10080000
kdexts 0x4b400000 0x10080000
kdextx86 0x4b400000 0x10080000
kdextmip 0x4b480000 0x10080000
kdextalp 0x4b500000 0x10080000
kdextppc 0x4b580000 0x10080000
acledit 0x4b600000 0x10080000
mpr 0x4b680000 0x10080000
ntlanman 0x4b700000 0x10080000
srvmgr 0x4b780000 0x10080000
ncpa 0x4b800000 0x10080000
mprui 0x4b880000 0x10080000
netui0 0x4b900000 0x10080000
netui1 0x4b980000 0x10080000
ifiltcnv 0x4ba00000 0x10080000
nwcfg 0x4bb80000 0x10080000
ntlanui 0x4bc00000 0x10080000
tcpcfg 0x4bc80000 0x10080000
ipxcfg 0x4bd00000 0x10080000
ntlsapi 0x4bd80000 0x10080000
lsapi32 0x4be00000 0x10080000
mslsp32 0x4be80000 0x10080000
ccfapi32 0x4bf00000 0x10080000
srvkd 0x4bf80000 0x10080000
llsrpc 0x4c000000 0x10080000
racfg 0x4c080000 0x10080000
isnext 0x4c100000 0x10080000
certview 0x4c180000 0x10080000
activeds 0x4c200000 0x10080000
dsrights 0x4c200000 0x10080000
dbgdll 0x4c280000 0x10080000
advapi32 0x4c300000 0x10080000
csrrtl 0x4c380000 0x10080000
csrsrv 0x4c400000 0x10080000
adsnw 0x4c480000 0x10080000
basertl 0x4c500000 0x10080000
basesrv 0x4c580000 0x10080000
adsnds 0x4c600000 0x10080000
winsrv 0x4c680000 0x10080000
winsrv2 0x4c700000 0x10080000
rasdd 0x4c780000 0x10080000
sysmono 0x4c800000 0x10080000
courier 0x4c880000 0x10080000
helv 0x4c900000 0x10080000
times 0x4c980000 0x10080000
netapi32 0x4ca00000 0x10080000
wowfaxui 0x4ca80000 0x10080000
winmgr 0x4cb00000 0x10080000
display 0x4cb80000 0x10080000
vga 0x4cc00000 0x10080000
winspool 0x4cc80000 0x10080000
splsrv 0x4cd00000 0x10080000
ntprint 0x4cd80000 0x10080000
pscript5 0x4ce00000 0x10080000
halftone 0x4ce80000 0x10080000
lmspool 0x4cf00000 0x10080000
os2dll 0x4cf80000 0x10080000
psxdll 0x4d000000 0x10080000
winnet 0x4d080000 0x10080000
msv1_0 0x4d100000 0x10080000
samlib 0x4d180000 0x10080000
lsaap 0x4d200000 0x10080000
netrap 0x4d280000 0x10080000
adsnt 0x4d300000 0x10080000
dvideo 0x4d380000 0x10080000
dplay 0x4d400000 0x10080000
console 0x4d480000 0x10080000
gdi32 0x4d500000 0x10080000
apidll 0x4d580000 0x10080000
imgadmin 0x4d600000 0x10080000
imgedit 0x4d680000 0x10080000
imgscan 0x4d700000 0x10080000
imgthumb 0x4d780000 0x10080000
jpeg1x32 0x4d800000 0x10080000
jpeg2x32 0x4d880000 0x10080000
oieng400 0x4d900000 0x10080000
oiprt400 0x4db80000 0x10080000
oislb400 0x4dc00000 0x10080000
oissq400 0x4dc80000 0x10080000
oitwa400 0x4dd00000 0x10080000
oiui400 0x4dd80000 0x10080000
imgcmn 0x4de00000 0x10080000
imgshl 0x4de80000 0x10080000
media 0x4df00000 0x10080000
mediasrv 0x4df80000 0x10080000
lprmon 0x4e000000 0x10080000
lprhelp 0x4e080000 0x10080000
lpdsvc 0x4e100000 0x10080000
printui 0x4e180000 0x10080000
winsrvk 0x4e200000 0x10080000
msafd 0x4e280000 0x10080000
mswsock 0x4e300000 0x10080000
ws2help 0x4e380000 0x10080000
rnr20 0x4e400000 0x10080000
DEBMP 0x4e480000 0x10080000
DEHEX 0x4e500000 0x10080000
DEMET 0x4e580000 0x10080000
DESS 0x4e600000 0x10080000
glexts 0x4e680000 0x10080000
DEWP 0x4e700000 0x10080000
SCCVIEW 0x4e780000 0x10080000
MSVIEWUT 0x4e800000 0x10080000
wdt32 0x4e880000 0x10080000
nddeexts 0x4e900000 0x10080000
sde 0x4e980000 0x10080000
ndrd 0x4ea00000 0x10080000
hdxdll 0x4ea80000 0x10080000
splexts 0x4eb00000 0x10080000
wmitrace 0x4eb80000 0x10080000
gdiexts 0x4ec00000 0x10080000
gdikdx 0x4ec80000 0x10080000
ttkdx 0x4ed00000 0x10080000
userexts 0x4ed80000 0x10080000
userkdx 0x4ee00000 0x10080000
ntsdexts 0x4ee80000 0x10080000
plotter 0x4ef00000 0x10080000
rpcrt4 0x4ef80000 0x10080000
imm32 0x4f000000 0x10080000
winmm 0x4f080000 0x10080000
rpcssp 0x4f100000 0x10080000
mciwave 0x4f180000 0x10080000
w32topl 0x4f200000 0x10080000
acpikd 0x4f280000 0x10080000
ldrdll 0x4f300000 0x10080000
mcicda 0x4f380000 0x10080000
plotui 0x4f400000 0x10080000
rasddui 0x4f480000 0x10080000
ps5ui 0x4f500000 0x10080000
mmio 0x4f580000 0x10080000
gpdparse 0x4f600000 0x10080000
proxydll 0x4f680000 0x10080000
nlsapi 0x4f700000 0x10080000
ws2_32 0x4f780000 0x10080000
afdkd 0x4f800000 0x10080000
olesvr32 0x4f880000 0x10080000
olecli32 0x4f900000 0x10080000
msgsvc 0x4f980000 0x10080000
sys003 0x4fa80000 0x10080000
beta2 0x4fb00000 0x10080000
psapi 0x4fb80000 0x10080000
rpcdce4 0x4fc00000 0x10080000
eventlog 0x4fc80000 0x10080000
xactsrv 0x4fd00000 0x10080000
winreg 0x4fd80000 0x10080000
samlsa 0x4fe80000 0x10080000
mmdrv 0x4ff00000 0x10080000
dlcapi 0x4ff80000 0x10080000
win32spl 0x50000000 0x10080000
localspl 0x50080000 0x10080000
mmdet 0x50100000 0x10080000
netlogon 0x50180000 0x10080000
tmsre32 0x50200000 0x10080000
lsaudll 0x50280000 0x10080000
mciseq 0x50300000 0x10080000
winprint 0x50380000 0x10080000
localmon 0x50400000 0x10080000
msaudite 0x50480000 0x10080000
msobjs 0x50500000 0x10080000
hpmon 0x50580000 0x10080000
alrsvc 0x50600000 0x10080000
srvsvc 0x50680000 0x10080000
wkssvc 0x50700000 0x10080000
msafdext 0x50780000 0x10080000
compstui 0x50800000 0x10080000
htui 0x50880000 0x10080000
; Both will never be loaded
lsasrv 0x50900000 0x100A0000
lsasrvd 0x50900000 0x100A0000
mmsndsrv 0x50980000 0x10080000
midi 0x50a00000 0x10080000
browser 0x50a80000 0x10080000
drivers 0x50b00000 0x10080000
lmmon 0x50b80000 0x10080000
spoolss 0x50c00000 0x10080000
sndblst 0x50c80000 0x10080000
dsrights 0x50d00000 0x10080000
ntlmssps 0x50d80000 0x10080000
ntlms128 0x50d80000 0x10080000
glu32 0x50e00000 0x10080000
memtrace 0x50e80000 0x10080000
ogldrv 0x50f00000 0x10080000
dciman32 0x50f80000 0x10080000
ddraw 0x51000000 0x10080000
dsound 0x51080000 0x10080000
pjlmon 0x51100000 0x10080000
dpwsock 0x51180000 0x10080000
dpserial 0x51200000 0x10080000
dpsocket 0x51280000 0x10080000
formidbl 0x51300000 0x10080000
fole2ui 0x51380000 0x10080000
ntshrui 0x51400000 0x10080000
ntlanui2 0x51480000 0x10080000
shareui 0x51500000 0x10080000
wsasetup 0x51580000 0x10080000
control 0x51600000 0x10080000
access 0x51680000 0x10080000
sound 0x51700000 0x10080000
appwiz 0x51780000 0x10080000
appmgr 0x51780000 0x10080000
intl 0x51800000 0x10080000
timedate 0x51880000 0x10080000
utc 0x51900000 0x10080000
mouse 0x51980000 0x10080000
sysdm 0x51a00000 0x10080000
desk 0x51a80000 0x10080000
modem 0x51b00000 0x10080000
mdminst 0x51b40000 0x10080000
security 0x51b80000 0x10080000
; this is the same as security - both will never be loaded
secur32 0x51b80000 0x10080000
main 0x51c00000 0x10080000
ups 0x51c80000 0x10080000
cursors 0x51d00000 0x10080000
pcmcia 0x51d80000 0x10080000
adprop 0x51e00000 0x10080000
devapps 0x51e80000 0x10080000
console 0x51f00000 0x10080000
mmsys 0x51f80000 0x10080000
indicdll 0x52000000 0x10080000
comdlg32 0x52080000 0x10080000
wldap32 0x52100000 0x10080000
version 0x52180000 0x10080000
nddeapi 0x52200000 0x10080000
nddenb32 0x52280000 0x10080000
shscrap 0x52300000 0x10080000
ftsrch 0x52380000 0x10080000
docprop 0x52400000 0x10080000
diskcopy 0x52480000 0x10080000
mswsutil 0x52500000 0x10080000
ws2map 0x52580000 0x10080000
linkinfo 0x52600000 0x10080000
synceng 0x52680000 0x10080000
syncui 0x52700000 0x10080000
rshx32 0x52780000 0x10080000
prtq32 0x52800000 0x10080000
userenv 0x52880000 0x10080000
shcompui 0x52900000 0x10080000
; Keyboard drivers are all the same
kbdus 0x52980000 0x10080000
kbda1 0x52980000 0x10080000
kbda2 0x52980000 0x10080000
kbda3 0x52980000 0x10080000
kbdal 0x52980000 0x10080000
kbdbe 0x52980000 0x10080000
kbdbene 0x52980000 0x10080000
kbdblr 0x52980000 0x10080000
kbdbu 0x52980000 0x10080000
kbdbr 0x52980000 0x10080000
kbdca 0x52980000 0x10080000
kbdcan 0x52980000 0x10080000
kbdcr 0x52980000 0x10080000
kbdcz 0x52980000 0x10080000
kbdcz1 0x52980000 0x10080000
kbdcz2 0x52980000 0x10080000
kbdda 0x52980000 0x10080000
kbddv 0x52980000 0x10080000
kbdes 0x52980000 0x10080000
kbdest 0x52980000 0x10080000
kbdfa 0x52980000 0x10080000
kbdfc 0x52980000 0x10080000
kbdfi 0x52980000 0x10080000
kbdfr 0x52980000 0x10080000
kbdgae 0x52980000 0x10080000
kbdgkl 0x52980000 0x10080000
kbdgr 0x52980000 0x10080000
kbdgr1 0x52980000 0x10080000
kbdhe 0x52980000 0x10080000
kbdhe220 0x52980000 0x10080000
kbdhe319 0x52980000 0x10080000
kbdheb 0x52980000 0x10080000
kbdhu 0x52980000 0x10080000
kbdhu1 0x52980000 0x10080000
kbdic 0x52980000 0x10080000
kbdir 0x52980000 0x10080000
kbdit 0x52980000 0x10080000
kbdit142 0x52980000 0x10080000
kbdla 0x52980000 0x10080000
kbdlt 0x52980000 0x10080000
kbdlt1 0x52980000 0x10080000
kbdlv 0x52980000 0x10080000
kbdlv1 0x52980000 0x10080000
kbdne 0x52980000 0x10080000
kbdno 0x52980000 0x10080000
kbdpl 0x52980000 0x10080000
kbdpl1 0x52980000 0x10080000
kbdpo 0x52980000 0x10080000
kbdro 0x52980000 0x10080000
kbdru 0x52980000 0x10080000
kbdru1 0x52980000 0x10080000
kbdsf 0x52980000 0x10080000
kbdsg 0x52980000 0x10080000
kbdsl 0x52980000 0x10080000
kbdsl1 0x52980000 0x10080000
kbdsp 0x52980000 0x10080000
kbdsv 0x52980000 0x10080000
kbdsw 0x52980000 0x10080000
kbdth0 0x52980000 0x10080000
kbdth1 0x52980000 0x10080000
kbdth2 0x52980000 0x10080000
kbdth3 0x52980000 0x10080000
kbdtuf 0x52980000 0x10080000
kbdtuq 0x52980000 0x10080000
kbduk 0x52980000 0x10080000
kbdur 0x52980000 0x10080000
kbdurs 0x52980000 0x10080000
kbdusl 0x52980000 0x10080000
kbdusr 0x52980000 0x10080000
kbdusx 0x52980000 0x10080000
kbdycc 0x52980000 0x10080000
kbdycl 0x52980000 0x10080000
kbdhela2 0x52a00000 0x10080000
kbdhela3 0x52a00000 0x10080000
kbdinasa 0x52980000 0x10080000
kbdinben 0x52980000 0x10080000
kbdindev 0x52980000 0x10080000
kbdinguj 0x52980000 0x10080000
kbdinhin 0x52980000 0x10080000
kbdinkan 0x52980000 0x10080000
kbdinmal 0x52980000 0x10080000
kbdinmar 0x52980000 0x10080000
kbdinori 0x52980000 0x10080000
kbdinpun 0x52980000 0x10080000
kbdintam 0x52980000 0x10080000
kbdintel 0x52980000 0x10080000
kbdarme 0x52980000 0x10080000
kbdarmw 0x52980000 0x10080000
kbdAze 0x52980000 0x10080000
kbdAzel 0x52980000 0x10080000
kbdfo 0x52980000 0x10080000
kbdgeo 0x52980000 0x10080000
kbdhebx 0x52980000 0x10080000
kbdHEPT 0x52980000 0x10080000
kbdkaz 0x52980000 0x10080000
kbdmac 0x52980000 0x10080000
kbdtat 0x52980000 0x10080000
kbduzb 0x52980000 0x10080000
kbdVNTC 0x52980000 0x10080000
kbdusa 0x52980000 0x10080000
;
; FarEast keyboard layouts - begin
;
kbdjpn 0x52a00000 0x10080000
kbd101 0x52980000 0x10080000
kbd106 0x52980000 0x10080000
kbd106n 0x52980000 0x10080000
kbdax2 0x52980000 0x10080000
kbdibm02 0x52980000 0x10080000
f3ahvoas 0x52980000 0x10080000
kbdlk41a 0x52980000 0x10080000
kbdlk41j 0x52980000 0x10080000
kbdkor 0x52a00000 0x10080000
kbd101a 0x52980000 0x10080000
kbd101b 0x52980000 0x10080000
kbd101c 0x52980000 0x10080000
kbd103 0x52980000 0x10080000
kbdnec 0x52980000 0x10080000
kbdnec95 0x52980000 0x10080000
kbdnecAT 0x52980000 0x10080000
kbdnecNT 0x52980000 0x10080000
kbdn106 0x52980000 0x10080000
; FarEast keyboard layouts - end
localui 0x52a80000 0x10080000
dsquery 0x52b00000 0x10080000
trace 0x52b80000 0x10080000
relay 0x52c00000 0x10080000
infosoft 0x52c80000 0x10180000
iprip 0x52e00000 0x10080000
wsock32 0x52e80000 0x10080000
winstrm 0x52f00000 0x10080000
inetmib1 0x52f80000 0x10080000
lmmib2 0x53100000 0x10080000
tcpipsvc 0x53180000 0x10080000
nbtsvc 0x53200000 0x10080000
telnet 0x53280000 0x10080000
wshtcpip 0x53300000 0x10080000
cnfgprts 0x53380000 0x10080000
icmp 0x53400000 0x10080000
inettrap 0x53480000 0x10080000
testdll 0x53500000 0x10080000
lmhsvc 0x53580000 0x10080000
dhcpsapi 0x53600000 0x10080000
dhcpcsvc 0x53680000 0x10080000
dhcpssvc 0x53700000 0x10080000
inetsvcs 0x53780000 0x10080000
ftpsvc 0x53800000 0x10080000
ftpctrs 0x53900000 0x10080000
infocomm 0x53980000 0x10080000
wspapi 0x53a00000 0x10080000
cxxflt 0x53a80000 0x10080000
wspcfg 0x53b00000 0x10080000
w3proxy 0x53b80000 0x10080000
clusiis4 0x53c00000 0x10080000
iisclex4 0x53c80000 0x10080000
w3svc 0x53d00000 0x10080000
w3svapi 0x53d80000 0x10080000
w3ctrs 0x53e00000 0x10080000
sspifilt 0x53e80000 0x10080000
pwsdata 0x53e80000 0x10080000
festrcnv 0x53f00000 0x10080000
;same as festrcnv - this is ok, iisfecnv is festrcnv renamed to prevent
;conflicts
iisfecnv 0x53f00000 0x10080000
gopherd 0x53f00000 0x10080000
gdapi 0x53f80000 0x10080000
gdctrs 0x54000000 0x10080000
gdspace 0x54080000 0x10080000
;
sage 0x54100000 0x10080000
adsldp 0x54180000 0x10080000
isatq 0x54200000 0x10080000
mspapi 0x54280000 0x10080000
infoadmn 0x54300000 0x10080000
infoctrs 0x54380000 0x10080000
mspip 0x54400000 0x10080000
httpodbc 0x54480000 0x10080000
w3pcfg 0x54500000 0x10080000
w3papi 0x54580000 0x10080000
mspmon 0x54600000 0x10080000
logui 0x54680000 0x10080000
;
; controt, pagecnt, permchk, are all standard components of ASP in K2
; there is no problem if they collide
;
controt 0x54700000 0x10080000
pagecnt 0x54700000 0x10080000
permchk 0x54700000 0x10080000
inetaux 0x54780000 0x10080000
inetsloc 0x54800000 0x10080000
urlcache 0x54880000 0x10080000
mspsec 0x54900000 0x10080000
w32sinet 0x54980000 0x10080000
httpmib 0x54a00000 0x10080000
gdmib 0x54a80000 0x10080000
ftpmib 0x54b00000 0x10080000
;
; Deliberate sharing of the following two entries with other *mib files done.
;
iwrps 0x54a80000 0x10080000
wamps 0x54b00000 0x10080000
iisadmin 0x54b80000 0x10080000
w3pmib 0x54c00000 0x10080000
ftpsvc2 0x54c80000 0x10080000
ftpsapi2 0x54d00000 0x10080000
ftpctrs2 0x54d80000 0x10080000
miniprox 0x54e00000 0x10080000
_wsock32 0x54e80000 0x10080000
wsock32f 0x54f00000 0x10080000
netdtect 0x54f80000 0x10080000
netdet 0x55000000 0x10080000
npincdet 0x55080000 0x10080000
amddet 0x55100000 0x10080000
netflx 0x55180000 0x10080000
bhsupp 0x55200000 0x10080000
nal 0x55280000 0x10080000
bhmon 0x55300000 0x10080000
ndis30 0x55380000 0x10080000
bhnetb 0x55400000 0x10080000
rnal 0x55480000 0x10080000
bhkctrl 0x55500000 0x10080000
nwsap 0x55580000 0x10080000
rws32 0x55600000 0x10080000
hostmib 0x55680000 0x10080000
convmsg 0x55700000 0x10080000
winsctrs 0x55780000 0x10080000
winsmib 0x55800000 0x10080000
dhcpmib 0x55880000 0x10080000
winsevnt 0x55900000 0x10080000
winsrpc 0x55980000 0x10080000
winsrpcb 0x55a00000 0x10080000
dscont 0x55a80000 0x10080000
NTCTL3D 0x55b00000 0x10080000
MPHEAP 0x55b80000 0x10080000
MAPI32 0x55c00000 0x10080000
EDB 0x55c80000 0x10080000
EDBPERF 0x55d00000 0x10080000
ESCPRINT 0x55d80000 0x10080000
RICHED32 0x55e00000 0x10080000
WMSUI32 0x55e80000 0x10080000
MLCFG32 0x55f00000 0x10080000
MSFS32 0x55f80000 0x10080000
GAPI32 0x56000000 0x10080000
samsrv 0x56080000 0x10100000
msvcrt40 0x56180000 0x10080000
msvcr40d 0x56200000 0x10080000
msvcrt20 0x56280000 0x10080000
msvcrt10 0x56300000 0x10080000
msvcrt 0x56380000 0x10080000
MMFMIG32 0x56400000 0x10080000
WMSFR32 0x56480000 0x10080000
WGPOCPL 0x56500000 0x10080000
WGPOADMN 0x56580000 0x10080000
MINET32 0x56600000 0x10080000
INETAB32 0x56680000 0x10080000
MSPST32 0x56700000 0x10080000
MLSHEXT 0x56780000 0x10080000
MAPIU32 0x56800000 0x10080000
MAPIX32 0x56880000 0x10080000
LPREXT 0x56900000 0x10080000
ISNEXT 0x56980000 0x10080000
htmlfilt 0x56c80000 0x10080000
SCCUT 0x56d00000 0x10080000
SCCFA 0x56d80000 0x10080000
SCCFI 0x56e00000 0x10080000
SCCIFILT 0x56e80000 0x10080000
VSACS 0x56f00000 0x10080000
VSASC8 0x56f80000 0x10080000
VSBDR 0x57000000 0x10080000
VSBMP 0x57080000 0x10080000
VSDBS 0x57100000 0x10080000
VSDRW 0x57180000 0x10080000
VSEXE 0x57200000 0x10080000
VSEXE2 0x57280000 0x10080000
VSGIF 0x57300000 0x10080000
VSMCW 0x57380000 0x10080000
VSMP 0x57400000 0x10080000
VSMSW 0x57480000 0x10080000
VSMWP2 0x57500000 0x10080000
VSMWPF 0x57580000 0x10080000
VSPCL 0x57600000 0x10080000
VSPDX 0x57680000 0x10080000
VSPFS 0x57700000 0x10080000
VSPP 0x57780000 0x10080000
VSPP5 0x57800000 0x10080000
VSPP7 0x57880000 0x10080000
VSQPW 0x57900000 0x10080000
VSRTF 0x57980000 0x10080000
VSTIFF 0x57a00000 0x10080000
VSTEXT 0x57a80000 0x10080000
VSTXT 0x57b00000 0x10080000
VSVW3 0x57b80000 0x10080000
VSW6 0x57c00000 0x10080000
VSWKS 0x57c80000 0x10080000
VSWMF 0x57d00000 0x10080000
VSWORD 0x57d80000 0x10080000
VSWORK 0x57e00000 0x10080000
VSWP5 0x57e80000 0x10080000
VSWP6 0x57f00000 0x10080000
VSWPF 0x57f80000 0x10080000
VSWS2 0x58000000 0x10080000
VSXL5 0x58080000 0x10080000
VSXY 0x58100000 0x10080000
CFM30 0x58180000 0x10100000
CFM30U 0x58280000 0x10100000
CFMO30 0x58380000 0x10080000
CFMO30U 0x58400000 0x10080000
inetcpl 0x58500000 0x10080000
secsspi 0x58580000 0x10080000
msnsspc 0x58600000 0x10080000
qperf 0x58680000 0x10080000
iismap 0x58700000 0x10080000
iiscrmap 0x58780000 0x10080000
;
; Security Related DLLs (there is only
; ever one at a time, hence the overlap)
;
schannel 0x58800000 0x10100000
schnl128 0x58800000 0x10100000
schanlsa 0x58900000 0x10080000
secure32 0x58980000 0x10080000
w3scfg 0x58A00000 0x10080000
fscfg 0x58A80000 0x10080000
gscfg 0x58B00000 0x10080000
ipudll 0x58B80000 0x10080000
mupkd 0x58C00000 0x10080000
netsetup 0x58C80000 0x10080000
netcfg 0x58D00000 0x10100000
w3key 0x58E00000 0x10080000
hid 0x58E80000 0x10080000
powercfg 0x58F00000 0x10080000
ntmarta 0x58F80000 0x10080000
ntdsa 0x59000000 0x10200000
ntdssmtp 0x59200000 0x10080000
ntdsapi 0x59280000 0x10080000
printree 0x59300000 0x10080000
lexnetui 0x59380000 0x10080000
mvprm 0x59400000 0x10080000
mvprtobj 0x59480000 0x10080000
mvpo_wri 0x59500000 0x10080000
mvpo_sun 0x59580000 0x10080000
mvprtmgr 0x59600000 0x10080000
mvresdll 0x59680000 0x10080000
mvguidll 0x59700000 0x10080000
agguidll 0x59780000 0x10080000
sfguidll 0x59800000 0x10080000
common 0x59880000 0x10080000
lexll32 0x59900000 0x10080000
lexip32 0x59980000 0x10080000
lexipx32 0x59A00000 0x10080000
mvprtgui 0x59A80000 0x10080000
agprtgui 0x59B00000 0x10080000
sfprtgui 0x59B80000 0x10080000
mvntinst 0x59C00000 0x10080000
lexbce 0x59C80000 0x10080000
lexbcelm 0x59D00000 0x10080000
lexlmpm 0x59D80000 0x10080000
lexlang 0x59E00000 0x10080000
lexcfg 0x59E80000 0x10080000
interact 0x59F00000 0x10080000
lexmon 0x59F80000 0x10080000
drax400 0x5A000000 0x10080000
joy 0x5A080000 0x10080000
backend 0x5a500000 0x10080000
ccrdsvr 0x5a580000 0x10080000
certapi 0x5a600000 0x10080000
certhelp 0x5a680000 0x10080000
certstor 0x5a700000 0x10080000
pstorep 0x5a780000 0x10080000
pstorec 0x5a800000 0x10080000
psbase 0x5a880000 0x10080000
; Policy modules all reside at the same base address.
certpol 0x5a900000 0x10080000
certpdef 0x5a900000 0x10080000
certpent 0x5a900000 0x10080000
certpsam 0x5a900000 0x10080000
certif 0x5a980000 0x10080000
certenc 0x5aa00000 0x10080000
certexit 0x5aa80000 0x10080000
certadm 0x5ab00000 0x10080000
certcli 0x5ab80000 0x10080000
webhits 0x5ac00000 0x10040000
fontsub 0x5ac40000 0x10040000
msidxs 0x5ac80000 0x10080000
feclient 0x5ad00000 0x10080000
dnsmgr 0x5ad80000 0x10080000
dsprop 0x5ae00000 0x10080000
dsuiext 0x5ae80000 0x10080000
digsig 0x5af00000 0x10080000
wintrust 0x5af80000 0x10080000
runornot 0x5b000000 0x10080000
pcertsvr 0x5b080000 0x10080000
certxent 0x5b100000 0x10080000
redir 0x5b180000 0x10080000
spc 0x5b200000 0x10080000
syscert 0x5b280000 0x10080000
thunkcr 0x5b300000 0x10080000
wincert 0x5b380000 0x10080000
wintrust 0x5b400000 0x10080000
scpmer 0x5b480000 0x10080000
scppay 0x5b500000 0x10080000
scproot 0x5b580000 0x10080000
advpack 0x5b600000 0x10080000
;Next Three Slots for hprasdd
hprasdd 0x5b680000 0x10080000
hprasdui 0x5b700000 0x10080000
hp5sim 0x5b780000 0x10080000
msimg32 0x5b800000 0x10100000
; CODEWORK doubly-used space here
mscms 0x5b880000 0x10100000
; space 0x5b900000 0x10100000
mmc 0x5b980000 0x10100000
mmcndmgr 0x5ba80000 0x10180000
bull24 0x5bc00000 0x10080000
bull9 0x5bc80000 0x10080000
dpcpcl 0x5bd00000 0x10080000
snapsamp 0x5bd80000 0x10080000
cmnquery 0x5be00000 0x10080000
bullaser 0x5bf00000 0x10080000
comctl32 0x5bf80000 0x10080000
;DirectDraw's shared data block:
;(keep in sync with private\ntos\w32\ntgdi\direct\ddraw\main\umodemem.c)
ddmemblk 0x5c000000 0x00100000
; These dlls will reappear in some other form in DX7
d3dim700 0x5c000000 0x10200000
; d3dref 0x5c200000 0x10080000
; d3drgbf 0x5c280000 0x10080000
; d3drm16f 0x5c300000 0x10080000
; d3drm32f 0x5c380000 0x10080000
d3dpmesh 0x5c400000 0x10080000
; d3drm8f 0x5c480000 0x10080000
d3dxof 0x5c500000 0x10080000
; d3drg24f 0x5c580000 0x10080000
; d3drm24f 0x5c600000 0x10080000
dfrgsnap 0x5c680000 0x10080000
msw3prt 0x5c700000 0x10080000
ntdsetup 0x5c780000 0x10080000
winrnr 0x5c800000 0x10080000
comcat 0x5c880000 0x10080000
iscomlog 0x5c900000 0x10080000
mailnews 0x5c980000 0x10020000
iislog 0x5ca00000 0x10080000
lprmonui 0x5ca80000 0x10080000
smonctrl 0x5cb00000 0x10080000
dssec 0x5cb80000 0x10080000
hp5simui 0x5cc00000 0x10080000
ipsecsnp 0x5cc80000 0x10080000
mspui 0x5cd00000 0x10080000
wshom 0x5cd80000 0x10080000
chanelui 0x5ce00000 0x10080000
dsadmin 0x5ce80000 0x10080000
crypt32 0x5cf00000 0x10100000
ochelpr 0x5d000000 0x10080000
ocimgr 0x5d080000 0x10080000
spriter 0x5d100000 0x10080000
stager 0x5d180000 0x10080000
textfxr 0x5d200000 0x10080000
hostlwr 0x5d280000 0x10080000
hhctrl 0x5d300000 0x10080000
themes 0x5d380000 0x10080000
plustab 0x5d400000 0x10080000
htmlhelp 0x5d480000 0x10080000
aclui 0x5d500000 0x10080000
bull18 0x5d580000 0x10080000
x42xxpcl 0x5d600000 0x10080000
iisui 0x5d680000 0x10080000
certmap 0x5d700000 0x10080000
redirect 0x5d780000 0x10080000
lonsint 0x5d800000 0x10080000
lonsiw95 0x5d800000 0x10080000
passfilt 0x5d880000 0x10080000
iprop 0x5d900000 0x10080000
; d3drgbxf 0x5d980000 0x10080000
; d3drg24x 0x5da00000 0x10080000
; d3drg32x 0x5da80000 0x10080000
; d3drg55x 0x5db00000 0x10080000
; d3drg56x 0x5db80000 0x10080000
; d3drg8x 0x5dc00000 0x10080000
rapilib 0x5dc80000 0x10080000
rsvpsp 0x5dd00000 0x10080000
traffic 0x5dd80000 0x10080000
nsepm 0x5de00000 0x10080000
zawproxy 0x5de80000 0x10080000
dpwsockx 0x5df00000 0x10080000
dpmodemx 0x5df80000 0x10080000
dpldplay 0x5e000000 0x10080000
dplayx 0x5e080000 0x10080000
inetpp 0x5e100000 0x10080000
coadmin 0x5e180000 0x10080000
mlang 0x5e200000 0x10080000
idq 0x5e280000 0x10080000
; deliberate sharing of address space
ixsso 0x5e300000 0x10080000