summaryrefslogtreecommitdiff
path: root/plugins/Actman30/tmp/PsAPI.ppu
blob: ef67c967e3f83e91fa2f11638dc45fcfa934da3f (plain)
ofshex dumpascii
0000 50 50 55 31 33 35 02 83 01 00 05 00 80 50 02 00 79 5c 00 00 25 13 3e 94 c4 9a 03 31 63 00 00 00 PPU135.......P..y\..%.>....1c...
0020 89 01 00 00 00 00 00 00 06 00 00 00 01 01 05 50 73 41 50 49 04 00 00 00 01 55 00 00 00 00 0e 00 ...............PsAPI.....U......
0040 00 00 01 02 09 50 73 41 50 49 2e 70 61 73 56 0e 88 41 3a 00 00 00 01 03 06 53 79 73 74 65 6d a6 .....PsAPI.pasV..A:......System.
0060 75 ae 00 11 84 de 24 d4 af 16 8f 06 6f 62 6a 70 61 73 45 74 cb 9b 42 d9 49 d4 d4 af 16 8f 07 77 u.....$.....objpasEt..B.I......w
0080 69 6e 64 6f 77 73 ae c8 b7 29 86 0d b1 43 00 00 00 00 0c 00 00 00 01 05 07 50 73 41 50 49 2e 6f indows...)...C...........PsAPI.o
00a0 02 00 00 00 00 00 00 00 01 06 00 00 00 00 01 07 00 00 00 00 01 08 00 00 00 00 01 09 00 00 00 00 ................................
00c0 01 0a 00 00 00 00 01 64 00 00 00 00 01 0b 00 00 00 00 01 52 13 00 00 00 01 13 02 00 00 00 06 53 .......d...........R...........S
00e0 59 53 54 45 4d 07 57 49 4e 44 4f 57 53 97 12 00 00 01 11 05 02 00 00 00 04 01 00 08 01 00 00 03 YSTEM.WINDOWS...................
0100 00 00 00 22 05 02 00 00 00 05 01 00 08 01 00 00 03 00 00 00 12 08 01 00 01 03 00 00 00 13 01 00 ..."............................
0120 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 09 01 00 08 01 ................................
0140 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 01 00 01 03 00 00 00 13 01 00 08 01 00 ................................
0160 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 0e 01 00 08 01 00 00 03 ................................
0180 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 ................................
01a0 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 13 01 00 08 01 00 00 03 00 00 00 ..3.............................
01c0 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 ...............................e
01e0 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 19 01 00 08 01 00 00 03 00 00 00 08 08 01 ................................
0200 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 ............................3...
0220 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 1e 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 ................................
0240 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 .........................e......
0260 03 00 00 00 08 01 00 05 02 00 00 00 24 01 00 08 01 00 00 03 00 00 00 22 08 01 00 00 03 00 00 00 ............$.........."........
0280 08 08 01 00 00 03 00 00 00 22 05 02 00 00 00 29 01 00 05 03 00 00 00 07 05 02 00 00 00 2c 01 00 .........".....).............,..
02a0 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 ................................
02c0 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 31 01 00 08 01 00 00 03 00 .......................1........
02e0 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 33 01 00 08 01 00 00 03 00 00 00 12 08 ...................3............
0300 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 08 01 00 ..................".............
0320 05 02 00 00 00 37 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 .....7..........................
0340 00 39 01 00 08 01 00 00 03 00 00 00 22 08 01 00 00 03 00 00 00 22 05 02 00 00 00 3d 01 00 05 03 .9.........."........".....=....
0360 00 00 00 0d 05 02 00 00 00 40 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 .........@......................
0380 05 03 00 00 00 0e 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 44 01 00 08 01 00 00 03 ........................D.......
03a0 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 ......................."........
03c0 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 49 01 00 08 01 00 00 03 00 00 00 ..3..................I..........
03e0 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 ...................."..........e
0400 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 4f 01 00 08 01 00 00 03 00 00 00 08 08 01 ..................O.............
0420 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 ......"..........3..............
0440 02 00 00 00 53 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 ....S...................".......
0460 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 58 01 00 08 01 00 00 03 00 00 ...e..................X.........
0480 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 .........."..........3..........
04a0 08 01 00 05 02 00 00 00 5c 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 ........\..................."...
04c0 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 61 01 00 08 01 00 .......e..................a.....
04e0 00 03 00 00 00 12 05 03 00 00 00 00 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 ................................
0500 00 08 01 00 05 02 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 .........e......................
0520 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 ................................
0540 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 ................................
0560 00 03 00 00 00 08 05 02 00 00 00 71 01 00 05 03 00 00 00 17 05 02 00 00 00 73 01 00 05 03 00 00 ...........q.............s......
0580 00 17 05 02 00 00 00 74 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 03 .......t........................
05a0 00 00 00 18 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 ................................
05c0 00 01 03 00 00 00 13 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 01 ................................
05e0 00 05 02 00 00 00 78 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 ......x.........................
0600 01 00 01 03 00 00 00 13 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 ................................
0620 01 00 05 02 00 00 00 7c 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 .......|........................
0640 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 ...................3............
0660 00 01 00 05 02 00 00 00 81 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 ................................
0680 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 ....................3...........
06a0 01 00 01 00 05 02 00 00 00 86 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 ................................
06c0 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 .....................e..........
06e0 08 01 00 01 00 05 02 00 00 00 8b 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 ................................
0700 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 ......................3.........
0720 00 08 01 00 01 00 05 02 00 00 00 90 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 ................................
0740 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 .......................3........
0760 00 00 08 01 00 01 00 05 02 00 00 00 95 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 ................................
0780 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 ........................e.......
07a0 00 00 00 08 01 00 01 00 05 02 00 00 00 9a 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 ................................
07c0 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 08 01 00 08 01 00 00 03 00 00 ................................
07e0 00 08 01 00 01 00 05 02 00 00 00 9f 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 ................................
0800 00 08 01 00 01 00 05 02 00 00 00 a4 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 ................................
0820 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 ............"...................
0840 00 a6 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 ................................
0860 00 aa 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 ................................
0880 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 .."..........3..................
08a0 00 00 ac 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 ................................
08c0 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 ..."..........3.................
08e0 00 00 00 b1 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 ................................
0900 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 ...."..........e................
0920 02 00 00 00 b6 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 ..........................".....
0940 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 bb 01 00 01 00 08 .....3..........................
0960 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 ................"..........3....
0980 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 bf 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 ................................
09a0 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 01 ......"..........e..............
09c0 00 05 02 00 00 00 c3 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 ............................"...
09e0 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 c7 01 00 01 .......3........................
0a00 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 .................."..........3..
0a20 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 cb 01 00 01 00 08 01 00 00 03 00 00 00 08 ................................
0a40 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 ........"..........e............
0a60 00 01 00 05 02 00 00 00 cf 01 00 01 00 08 01 00 00 03 00 00 00 12 05 03 00 00 00 00 01 00 08 01 ................................
0a80 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 d3 01 00 01 00 ................................
0aa0 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 18 01 00 08 01 00 00 ................................
0ac0 03 00 00 00 08 01 00 01 00 05 02 00 00 00 d7 05 03 00 00 00 00 05 03 00 00 00 01 05 03 00 00 00 ................................
0ae0 02 05 03 00 00 00 03 05 03 00 00 00 04 05 03 00 00 00 03 05 03 00 00 00 05 05 03 00 00 00 06 05 ................................
0b00 03 00 00 00 05 05 03 00 00 00 07 05 03 00 00 00 07 05 03 00 00 00 08 05 03 00 00 00 07 05 03 00 ................................
0b20 00 00 08 05 03 00 00 00 09 05 03 00 00 00 0a 05 03 00 00 00 0b 05 03 00 00 00 0c 05 03 00 00 00 ................................
0b40 0d 05 03 00 00 00 0d 05 03 00 00 00 0e 05 03 00 00 00 0d 05 03 00 00 00 0e 05 03 00 00 00 0f 05 ................................
0b60 03 00 00 00 10 05 03 00 00 00 11 05 03 00 00 00 10 05 03 00 00 00 12 05 03 00 00 00 13 05 03 00 ................................
0b80 00 00 12 05 03 00 00 00 14 05 03 00 00 00 15 05 03 00 00 00 14 05 03 00 00 00 16 05 03 00 00 00 ................................
0ba0 17 05 03 00 00 00 17 05 03 00 00 00 18 05 03 00 00 00 17 05 03 00 00 00 19 05 03 00 00 00 1a 05 ................................
0bc0 03 00 00 00 1b 05 03 00 00 00 1c 05 03 00 00 00 1d 05 03 00 00 00 1e 05 03 00 00 00 1f 05 03 00 ................................
0be0 00 00 20 05 03 00 00 00 21 05 03 00 00 00 22 05 03 00 00 00 23 05 03 00 00 00 24 05 03 00 00 00 ........!.....".....#.....$.....
0c00 25 05 03 00 00 00 26 05 03 00 00 00 27 05 03 00 00 00 28 05 03 00 00 00 29 05 03 00 00 00 2a 05 %.....&.....'.....(.....).....*.
0c20 03 00 00 00 2b 05 03 00 00 00 2c 05 03 00 00 00 2d 05 03 00 00 00 2e 05 03 00 00 00 2f 05 03 00 ....+.....,.....-.........../...
0c40 00 00 30 05 03 00 00 00 31 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 ..0.....1.......................
0c60 02 00 00 00 fb 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 00 fb 08 01 00 00 03 00 00 00 12 01 ................................
0c80 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 02 08 01 00 00 03 00 00 00 12 01 00 05 02 00 ................................
0ca0 00 01 02 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 09 08 ................................
0cc0 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 09 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 ................................
0ce0 00 00 00 08 01 00 05 02 00 00 01 10 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 10 08 01 00 ................................
0d00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 17 08 01 00 00 03 00 00 ................................
0d20 00 08 01 00 05 02 00 00 01 17 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 ................................
0d40 05 02 00 00 01 1e 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 1e 08 01 00 00 03 00 00 00 08 ................................
0d60 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 25 08 01 00 00 03 00 00 00 08 01 00 05 02 ..................%.............
0d80 00 00 01 25 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 2c ...%...........................,
0da0 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 2c 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 ................,...............
0dc0 03 00 00 00 12 01 00 05 02 00 00 01 33 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 33 08 01 ............3................3..
0de0 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 37 08 01 00 00 03 00 .........................7......
0e00 00 00 12 01 00 05 02 00 00 01 37 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 ..........7.....................
0e20 00 05 02 00 00 01 3d 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 3d 08 01 00 00 03 00 00 00 ......=................=........
0e40 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 41 08 01 00 00 03 00 00 00 12 01 00 05 ...................A............
0e60 02 00 00 01 41 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 ....A...........................
0e80 48 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 48 08 01 00 00 03 00 00 00 08 01 00 08 01 00 H................H..............
0ea0 00 03 00 00 00 08 01 00 05 02 00 00 01 4f 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 4f 08 .............O................O.
0ec0 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 56 08 01 00 00 03 ..........................V.....
0ee0 00 00 00 08 01 00 05 02 00 00 01 56 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 ...........V....................
0f00 01 00 05 02 00 00 01 5c 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 5c 08 01 00 00 03 00 00 .......\................\.......
0f20 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 62 08 01 00 00 03 00 00 00 08 01 00 ....................b...........
0f40 05 02 00 00 01 62 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 .....b..........................
0f60 01 68 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 68 08 01 00 00 03 00 00 00 08 01 00 08 01 .h................h.............
0f80 00 00 03 00 00 00 08 01 00 05 02 00 00 01 6e 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 6e ..............n................n
0fa0 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 74 08 01 00 00 ...........................t....
0fc0 03 00 00 00 08 01 00 05 02 00 00 01 74 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 ............t...................
0fe0 08 01 00 05 02 00 00 01 7a 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 7a 08 01 00 00 03 00 ........z................z......
1000 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 80 08 01 00 00 03 00 00 00 12 01 ................................
1020 00 05 02 00 00 01 80 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 ................................
1040 00 01 86 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 86 01 00 01 00 08 01 00 00 03 00 00 00 ................................
1060 03 01 00 05 02 00 00 00 db 01 00 01 00 08 01 00 00 03 00 00 00 0c 01 00 05 02 00 00 00 f4 05 03 ................................
1080 00 00 00 32 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 01 01 00 05 03 00 00 00 02 01 00 05 ...2............................
10a0 03 00 00 00 03 01 00 05 03 00 00 00 05 01 00 05 03 00 00 00 03 01 00 05 03 00 00 00 05 01 00 05 ................................
10c0 03 00 00 00 04 01 00 05 03 00 00 00 06 01 00 05 03 00 00 00 09 01 00 05 03 00 00 00 0a 01 00 05 ................................
10e0 03 00 00 00 0b 01 00 05 03 00 00 00 0c 01 00 05 03 00 00 00 10 01 00 05 03 00 00 00 12 01 00 05 ................................
1100 03 00 00 00 14 01 00 05 03 00 00 00 10 01 00 05 03 00 00 00 12 01 00 05 03 00 00 00 14 01 00 05 ................................
1120 03 00 00 00 11 01 00 05 03 00 00 00 13 01 00 05 03 00 00 00 15 01 00 05 03 00 00 00 16 01 00 05 ................................
1140 03 00 00 00 1a 01 00 05 03 00 00 00 33 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 ............3...................
1160 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 ................................
1180 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 ................................
11a0 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 ................................
11c0 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 ................................
11e0 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 ................................
1200 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 ................................
1220 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 ................................
1240 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 ................................
1260 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 ................................
1280 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 ................................
12a0 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 ................................
12c0 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 ................................
12e0 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 ................................
1300 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 ................................
1320 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 ................................
1340 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 08 01 00 ................................
1360 00 03 00 00 00 0c 01 00 08 01 00 00 03 00 00 00 0c 01 00 05 02 00 00 00 f5 08 01 00 00 03 00 00 ................................
1380 00 0c 01 00 05 02 00 00 00 f5 00 00 00 00 01 fc 04 00 00 00 01 5b 00 00 00 00 04 00 00 00 01 f8 .....................[..........
13a0 32 00 00 00 16 00 00 00 01 29 00 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 08 00 00 00 00 00 2........)............<.........
13c0 38 00 00 00 01 33 01 00 00 00 11 00 00 00 00 00 00 00 3c 00 00 00 19 00 00 00 00 00 0a 00 00 10 8....3............<.............
13e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 ................................
1400 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 ...[............................
1420 00 00 2c 00 00 00 02 22 06 00 00 00 0b 6c 70 69 64 50 72 6f 63 65 73 73 00 01 0e 1e 05 00 00 00 ..,....".....lpidProcess........
1440 00 00 01 00 22 00 00 00 00 00 00 00 2b 00 00 00 0a 00 00 02 23 00 00 00 02 22 07 00 00 00 02 63 ....".......+.......#....".....c
1460 62 00 01 0e 34 05 00 00 00 00 00 01 00 2d 00 00 00 00 00 00 00 36 00 00 00 14 00 00 02 29 00 00 b...4........-.......6.......)..
1480 00 02 22 08 00 00 00 08 63 62 4e 65 65 64 65 64 00 01 0e 43 05 00 00 00 00 02 01 00 38 00 00 00 ..".....cbNeeded...C........8...
14a0 00 00 00 00 41 00 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 02 00 00 00 43 00 00 00 ....A.............8....3....C...
14c0 00 00 00 00 3c 00 00 00 4b 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....<...K.......................
14e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 .....................[..........
1500 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 0a 00 00 00 08 68 ....................)....".....h
1520 50 72 6f 63 65 73 73 00 01 0f 23 05 00 00 00 00 00 01 00 54 00 00 00 00 00 00 00 5d 00 00 00 0a Process...#........T.......]....
1540 00 00 02 2a 00 00 00 02 22 0b 00 00 00 09 6c 70 68 4d 6f 64 75 6c 65 00 01 0f 36 05 00 00 00 00 ...*....".....lphModule...6.....
1560 00 01 00 5f 00 00 00 00 00 00 00 68 00 00 00 14 00 00 02 23 00 00 00 02 22 0c 00 00 00 02 63 62 ..._.......h.......#....".....cb
1580 00 01 0f 4a 05 00 00 00 00 00 01 00 6a 00 00 00 00 00 00 00 73 00 00 00 1e 00 00 02 2b 00 00 00 ...J........j.......s.......+...
15a0 02 22 0d 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 10 09 05 00 00 00 00 02 01 00 75 00 00 .".....lpcbNeeded............u..
15c0 00 00 00 00 00 7e 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 03 00 00 00 80 00 00 .....~...(.........8....3.......
15e0 00 00 00 00 00 3c 00 00 00 88 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 .....<..........................
1600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 ......................[.........
1620 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 0f 00 00 00 08 .....................)....".....
1640 68 50 72 6f 63 65 73 73 00 01 11 23 05 00 00 00 00 00 01 00 91 00 00 00 00 00 00 00 9a 00 00 00 hProcess...#....................
1660 0a 00 00 02 28 00 00 00 02 22 10 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 11 36 05 00 00 00 00 00 ....(....".....hModule...6......
1680 01 00 9c 00 00 00 00 00 00 00 a5 00 00 00 14 00 00 02 2b 00 00 00 02 22 11 00 00 00 0a 6c 70 42 ..................+....".....lpB
16a0 61 73 65 4e 61 6d 65 00 01 12 05 05 00 00 00 00 00 01 00 a7 00 00 00 00 00 00 00 b0 00 00 00 1e aseName.........................
16c0 00 00 02 26 00 00 00 02 22 12 00 00 00 05 6e 53 69 7a 65 00 01 12 1c 05 00 00 00 00 00 01 00 b2 ...&....".....nSize.............
16e0 00 00 00 00 00 00 00 bb 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 04 00 00 00 bd ...........(.........8....3.....
1700 00 00 00 00 00 00 00 3c 00 00 00 c5 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 .......<........................
1720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 ........................[.......
1740 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 14 00 00 .......................)...."...
1760 00 08 68 50 72 6f 63 65 73 73 00 01 13 23 05 00 00 00 00 00 01 00 ce 00 00 00 00 00 00 00 d7 00 ..hProcess...#..................
1780 00 00 0a 00 00 02 28 00 00 00 02 22 15 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 13 36 05 00 00 00 ......(....".....hModule...6....
17a0 00 00 01 00 d9 00 00 00 00 00 00 00 e2 00 00 00 14 00 00 02 2b 00 00 00 02 22 16 00 00 00 0a 6c ....................+....".....l
17c0 70 42 61 73 65 4e 61 6d 65 00 01 14 05 05 00 00 00 00 00 01 00 e4 00 00 00 00 00 00 00 ed 00 00 pBaseName.......................
17e0 00 1e 00 00 02 26 00 00 00 02 22 17 00 00 00 05 6e 53 69 7a 65 00 01 14 1c 05 00 00 00 00 00 01 .....&....".....nSize...........
1800 00 ef 00 00 00 00 00 00 00 f8 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 05 00 00 .............(.........8....3...
1820 00 fa 00 00 00 00 00 00 00 3c 00 00 00 02 01 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 .........<......................
1840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 ..........................[.....
1860 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 1a .........................)....".
1880 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 16 25 05 00 00 00 00 00 01 00 0b 01 00 00 00 00 00 00 ....hProcess...%................
18a0 14 01 00 00 0a 00 00 02 28 00 00 00 02 22 1b 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 16 38 05 00 ........(....".....hModule...8..
18c0 00 00 00 00 01 00 16 01 00 00 00 00 00 00 1f 01 00 00 14 00 00 02 2b 00 00 00 02 22 1c 00 00 00 ......................+...."....
18e0 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 17 05 05 00 00 00 00 00 01 00 21 01 00 00 00 00 00 00 2a .lpFilename............!.......*
1900 01 00 00 1e 00 00 02 26 00 00 00 02 22 1d 00 00 00 05 6e 53 69 7a 65 00 01 17 1c 05 00 00 00 00 .......&....".....nSize.........
1920 00 01 00 2c 01 00 00 00 00 00 00 35 01 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 06 ...,.......5...(.........8....3.
1940 00 00 00 37 01 00 00 00 00 00 00 3c 00 00 00 3f 01 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 ...7.......<...?................
1960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 ............................[...
1980 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 ...........................)....
19a0 22 1f 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 18 25 05 00 00 00 00 00 01 00 48 01 00 00 00 00 ".....hProcess...%........H.....
19c0 00 00 51 01 00 00 0a 00 00 02 28 00 00 00 02 22 20 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 18 38 ..Q.......(....".....hModule...8
19e0 05 00 00 00 00 00 01 00 53 01 00 00 00 00 00 00 5c 01 00 00 14 00 00 02 2b 00 00 00 02 22 21 00 ........S.......\.......+...."!.
1a00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 19 05 05 00 00 00 00 00 01 00 5e 01 00 00 00 00 00 ...lpFilename............^......
1a20 00 67 01 00 00 1e 00 00 02 26 00 00 00 02 22 22 00 00 00 05 6e 53 69 7a 65 00 01 19 1c 05 00 00 .g.......&....""....nSize.......
1a40 00 00 00 01 00 69 01 00 00 00 00 00 00 72 01 00 00 28 00 00 02 00 00 00 00 02 fb 2a 00 00 00 01 .....i.......r...(.........*....
1a60 2d 07 00 00 00 74 01 00 00 00 00 00 00 3c 00 00 00 0b 5f 4d 4f 44 55 4c 45 49 4e 46 4f 00 00 00 -....t.......<...._MODULEINFO...
1a80 00 01 04 01 01 0c 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 00 00 00 02 5b 00 00 00 00 04 00 00 ................[.......[.......
1aa0 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 28 00 00 00 02 1c 25 00 00 .......................(.....%..
1ac0 00 0b 6c 70 42 61 73 65 4f 66 44 6c 6c 00 01 1e 05 05 00 00 00 00 00 00 00 7c 01 00 00 00 00 00 ..lpBaseOfDll............|......
1ae0 00 00 00 00 00 28 00 00 00 02 1c 26 00 00 00 0b 53 69 7a 65 4f 66 49 6d 61 67 65 00 01 1f 05 05 .....(.....&....SizeOfImage.....
1b00 00 00 00 00 00 00 00 85 01 00 00 00 00 00 00 04 00 00 00 27 00 00 00 02 1c 27 00 00 00 0a 45 6e ...................'.....'....En
1b20 74 72 79 50 6f 69 6e 74 00 01 20 05 05 00 00 00 00 00 00 00 8e 01 00 00 00 00 00 00 08 00 00 00 tryPoint........................
1b40 00 00 00 00 02 fb 16 00 00 00 01 29 08 00 00 00 97 01 00 00 00 00 00 00 3c 00 00 00 9f 01 00 00 ...........)............<.......
1b60 00 00 38 00 00 00 01 33 09 00 00 00 a5 01 00 00 00 00 00 00 3c 00 00 00 ad 01 00 00 00 00 0a 00 ..8....3............<...........
1b80 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 ................................
1ba0 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa .....[..........................
1bc0 04 00 00 00 29 00 00 00 02 22 2d 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 29 25 05 00 00 00 00 ....)...."-....hProcess..)%.....
1be0 00 01 00 b6 01 00 00 00 00 00 00 bf 01 00 00 0a 00 00 02 28 00 00 00 02 22 2e 00 00 00 07 68 4d ...................(....".....hM
1c00 6f 64 75 6c 65 00 01 29 38 05 00 00 00 00 00 01 00 c1 01 00 00 00 00 00 00 ca 01 00 00 14 00 00 odule..)8.......................
1c20 02 2a 00 00 00 02 22 2f 00 00 00 09 6c 70 6d 6f 64 69 6e 66 6f 00 01 2a 05 05 00 00 00 00 00 01 .*...."/....lpmodinfo..*........
1c40 00 cc 01 00 00 00 00 00 00 d2 01 00 00 1e 00 00 02 23 00 00 00 02 22 30 00 00 00 02 63 62 00 01 .................#...."0....cb..
1c60 2a 1e 05 00 00 00 00 00 01 00 d4 01 00 00 00 00 00 00 dd 01 00 00 28 00 00 02 00 00 00 00 02 fb *.....................(.........
1c80 38 00 00 00 01 33 0a 00 00 00 df 01 00 00 00 00 00 00 3c 00 00 00 e7 01 00 00 00 00 0a 00 00 10 8....3............<.............
1ca0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 ................................
1cc0 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 ...[............................
1ce0 00 00 29 00 00 00 02 22 32 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2b 20 05 00 00 00 00 00 01 ..)...."2....hProcess..+........
1d00 00 f0 01 00 00 00 00 00 00 f9 01 00 00 0a 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 0b 00 00 .......................8....3...
1d20 00 fb 01 00 00 00 00 00 00 3c 00 00 00 03 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 .........<......................
1d40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 ..........................[.....
1d60 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 29 00 00 00 02 22 34 .........................)...."4
1d80 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2c 20 05 00 00 00 00 00 01 00 0c 02 00 00 00 00 00 00 ....hProcess..,.................
1da0 15 02 00 00 0a 00 00 02 23 00 00 00 02 22 35 00 00 00 02 70 76 00 01 2c 33 05 00 00 00 00 00 01 ........#...."5....pv..,3.......
1dc0 00 17 02 00 00 00 00 00 00 20 02 00 00 14 00 00 02 23 00 00 00 02 22 36 00 00 00 02 63 62 00 01 .................#...."6....cb..
1de0 2c 40 05 00 00 00 00 00 01 00 22 02 00 00 00 00 00 00 2b 02 00 00 1e 00 00 02 00 00 00 00 02 fb ,@........".......+.............
1e00 38 00 00 00 01 33 0c 00 00 00 2d 02 00 00 00 00 00 00 3c 00 00 00 35 02 00 00 00 00 0a 00 00 10 8....3....-.......<...5.........
1e20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 ................................
1e40 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 ...[............................
1e60 00 00 29 00 00 00 02 22 38 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2d 2c 05 00 00 00 00 00 01 ..)...."8....hProcess..-,.......
1e80 00 3e 02 00 00 00 00 00 00 47 02 00 00 0a 00 00 02 00 00 00 00 02 fb 3a 00 00 00 01 2d 0d 00 00 .>.......G.............:....-...
1ea0 00 49 02 00 00 00 00 00 00 3c 00 00 00 1b 5f 50 53 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e .I.......<...._PSAPI_WS_WATCH_IN
1ec0 46 4f 52 4d 41 54 49 4f 4e 00 00 00 00 01 04 01 01 08 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 FORMATION...................[...
1ee0 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 02 ....[...........................
1f00 00 00 00 27 00 00 00 02 1c 3a 00 00 00 0a 46 61 75 6c 74 69 6e 67 50 63 00 01 31 05 05 00 00 00 ...'.....:....FaultingPc..1.....
1f20 00 00 00 00 51 02 00 00 00 00 00 00 00 00 00 00 27 00 00 00 02 1c 3b 00 00 00 0a 46 61 75 6c 74 ....Q...........'.....;....Fault
1f40 69 6e 67 56 61 00 01 32 05 05 00 00 00 00 00 00 00 5a 02 00 00 00 00 00 00 04 00 00 00 00 00 00 ingVa..2.........Z..............
1f60 00 02 fb 16 00 00 00 01 29 0e 00 00 00 63 02 00 00 00 00 00 00 3c 00 00 00 6b 02 00 00 00 00 38 ........)....c.......<...k.....8
1f80 00 00 00 01 33 0f 00 00 00 71 02 00 00 00 00 00 00 3c 00 00 00 79 02 00 00 00 00 0a 00 00 10 00 ....3....q.......<...y..........
1fa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 ................................
1fc0 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 ..[.............................
1fe0 00 29 00 00 00 02 22 41 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 3b 1d 05 00 00 00 00 00 01 00 .)...."A....hProcess..;.........
2000 82 02 00 00 00 00 00 00 8b 02 00 00 0a 00 00 02 2c 00 00 00 02 22 42 00 00 00 0b 6c 70 57 61 74 ................,...."B....lpWat
2020 63 68 49 6e 66 6f 00 01 3b 30 05 00 00 00 00 00 01 00 8d 02 00 00 00 00 00 00 93 02 00 00 14 00 chInfo..;0......................
2040 00 02 23 00 00 00 02 22 43 00 00 00 02 63 62 00 01 3c 05 05 00 00 00 00 00 01 00 95 02 00 00 00 ..#...."C....cb..<..............
2060 00 00 00 9e 02 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 10 00 00 00 a0 02 00 00 00 .................8....3.........
2080 00 00 00 3c 00 00 00 a8 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...<............................
20a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 ....................[...........
20c0 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 45 00 00 00 08 68 50 ...................)...."E....hP
20e0 72 6f 63 65 73 73 00 01 3e 23 05 00 00 00 00 00 01 00 b1 02 00 00 00 00 00 00 ba 02 00 00 0a 00 rocess..>#......................
2100 00 02 24 00 00 00 02 22 46 00 00 00 03 6c 70 76 00 01 3e 36 05 00 00 00 00 00 01 00 bc 02 00 00 ..$...."F....lpv..>6............
2120 00 00 00 00 c5 02 00 00 14 00 00 02 2b 00 00 00 02 22 47 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d ............+...."G....lpFilenam
2140 65 00 01 3f 05 05 00 00 00 00 00 01 00 c7 02 00 00 00 00 00 00 d0 02 00 00 1e 00 00 02 26 00 00 e..?.........................&..
2160 00 02 22 48 00 00 00 05 6e 53 69 7a 65 00 01 3f 1c 05 00 00 00 00 00 01 00 d2 02 00 00 00 00 00 .."H....nSize..?................
2180 00 db 02 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 11 00 00 00 dd 02 00 00 00 00 00 .....(.........8....3...........
21a0 00 3c 00 00 00 e5 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .<..............................
21c0 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 ..................[.............
21e0 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 4a 00 00 00 08 68 50 72 6f .................)...."J....hPro
2200 63 65 73 73 00 01 40 23 05 00 00 00 00 00 01 00 ee 02 00 00 00 00 00 00 f7 02 00 00 0a 00 00 02 cess..@#........................
2220 24 00 00 00 02 22 4b 00 00 00 03 6c 70 76 00 01 40 36 05 00 00 00 00 00 01 00 f9 02 00 00 00 00 $...."K....lpv..@6..............
2240 00 00 02 03 00 00 14 00 00 02 2b 00 00 00 02 22 4c 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 ..........+...."L....lpFilename.
2260 01 41 05 05 00 00 00 00 00 01 00 04 03 00 00 00 00 00 00 0d 03 00 00 1e 00 00 02 26 00 00 00 02 .A.........................&....
2280 22 4d 00 00 00 05 6e 53 69 7a 65 00 01 41 1c 05 00 00 00 00 00 01 00 0f 03 00 00 00 00 00 00 18 "M....nSize..A..................
22a0 03 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 12 00 00 00 1a 03 00 00 00 00 00 00 3c ...(.........8....3............<
22c0 00 00 00 22 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..."............................
22e0 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 ................[...............
2300 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 50 00 00 00 09 49 6d 61 67 65 42 ...............*...."P....ImageB
2320 61 73 65 00 01 43 29 05 00 00 00 00 00 01 00 2b 03 00 00 00 00 00 00 34 03 00 00 0a 00 00 02 2b ase..C)........+.......4.......+
2340 00 00 00 02 22 51 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 43 3d 05 00 00 00 00 00 01 00 ...."Q....lpBaseName..C=........
2360 36 03 00 00 00 00 00 00 3f 03 00 00 14 00 00 02 26 00 00 00 02 22 52 00 00 00 05 6e 53 69 7a 65 6.......?.......&...."R....nSize
2380 00 01 44 05 05 00 00 00 00 00 01 00 41 03 00 00 00 00 00 00 4a 03 00 00 1e 00 00 02 00 00 00 00 ..D.........A.......J...........
23a0 02 fb 38 00 00 00 01 33 13 00 00 00 4c 03 00 00 00 00 00 00 3c 00 00 00 54 03 00 00 00 00 0a 00 ..8....3....L.......<...T.......
23c0 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 ................................
23e0 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa .....[..........................
2400 03 00 00 00 2a 00 00 00 02 22 54 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 45 29 05 00 00 00 ....*...."T....ImageBase..E)....
2420 00 00 01 00 5d 03 00 00 00 00 00 00 66 03 00 00 0a 00 00 02 2b 00 00 00 02 22 55 00 00 00 0a 6c ....].......f.......+...."U....l
2440 70 42 61 73 65 4e 61 6d 65 00 01 45 3d 05 00 00 00 00 00 01 00 68 03 00 00 00 00 00 00 71 03 00 pBaseName..E=........h.......q..
2460 00 14 00 00 02 26 00 00 00 02 22 56 00 00 00 05 6e 53 69 7a 65 00 01 46 05 05 00 00 00 00 00 01 .....&...."V....nSize..F........
2480 00 73 03 00 00 00 00 00 00 7c 03 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 14 00 00 .s.......|.............8....3...
24a0 00 7e 03 00 00 00 00 00 00 3c 00 00 00 86 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 .~.......<......................
24c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 ..........................[.....
24e0 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 59 .........................*...."Y
2500 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 48 29 05 00 00 00 00 00 01 00 8f 03 00 00 00 00 00 ....ImageBase..H)...............
2520 00 98 03 00 00 0a 00 00 02 2b 00 00 00 02 22 5a 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 .........+...."Z....lpFileName..
2540 48 3d 05 00 00 00 00 00 01 00 9a 03 00 00 00 00 00 00 a3 03 00 00 14 00 00 02 26 00 00 00 02 22 H=........................&...."
2560 5b 00 00 00 05 6e 53 69 7a 65 00 01 49 05 05 00 00 00 00 00 01 00 a5 03 00 00 00 00 00 00 ae 03 [....nSize..I...................
2580 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 15 00 00 00 b0 03 00 00 00 00 00 00 3c 00 ............8....3............<.
25a0 00 00 b8 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
25c0 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 ...............[................
25e0 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 5d 00 00 00 09 49 6d 61 67 65 42 61 ..............*...."]....ImageBa
2600 73 65 00 01 4a 29 05 00 00 00 00 00 01 00 c1 03 00 00 00 00 00 00 ca 03 00 00 0a 00 00 02 2b 00 se..J)........................+.
2620 00 00 02 22 5e 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 4a 3d 05 00 00 00 00 00 01 00 cc ..."^....lpFileName..J=.........
2640 03 00 00 00 00 00 00 d5 03 00 00 14 00 00 02 26 00 00 00 02 22 5f 00 00 00 05 6e 53 69 7a 65 00 ...............&...."_....nSize.
2660 01 4b 05 05 00 00 00 00 00 01 00 d7 03 00 00 00 00 00 00 e0 03 00 00 1e 00 00 02 00 00 00 00 02 .K..............................
2680 fb 38 00 00 00 01 33 16 00 00 00 e2 03 00 00 00 00 00 00 3c 00 00 00 ea 03 00 00 00 00 0a 00 00 .8....3............<............
26a0 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 ................................
26c0 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 ....[...........................
26e0 00 00 00 2c 00 00 00 02 22 62 00 00 00 0b 6c 70 49 6d 61 67 65 42 61 73 65 00 01 4e 22 05 00 00 ...,...."b....lpImageBase..N"...
2700 00 00 00 01 00 f3 03 00 00 00 00 00 00 f9 03 00 00 0a 00 00 02 23 00 00 00 02 22 63 00 00 00 02 .....................#...."c....
2720 63 62 00 01 4e 39 05 00 00 00 00 00 01 00 fb 03 00 00 00 00 00 00 04 04 00 00 14 00 00 02 2b 00 cb..N9........................+.
2740 00 00 02 22 64 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 4f 09 05 00 00 00 00 02 01 00 06 ..."d....lpcbNeeded..O..........
2760 04 00 00 00 00 00 00 0f 04 00 00 1e 00 00 02 00 00 00 00 02 fb 37 00 00 00 01 2d 17 00 00 00 11 .....................7....-.....
2780 04 00 00 00 00 00 00 3c 00 00 00 18 5f 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e .......<...._PROCESS_MEMORY_COUN
27a0 54 45 52 53 00 00 00 00 01 04 01 01 28 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 00 00 00 02 5b TERS........(..........[.......[
27c0 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 0a 00 00 00 1f 00 ................................
27e0 00 00 02 1c 66 00 00 00 02 63 62 00 01 53 05 05 00 00 00 00 00 00 00 19 04 00 00 00 00 00 00 00 ....f....cb..S..................
2800 00 00 00 2b 00 00 00 02 1c 67 00 00 00 0e 50 61 67 65 46 61 75 6c 74 43 6f 75 6e 74 00 01 54 05 ...+.....g....PageFaultCount..T.
2820 05 00 00 00 00 00 00 00 22 04 00 00 00 00 00 00 04 00 00 00 2f 00 00 00 02 1c 68 00 00 00 12 50 ........".........../.....h....P
2840 65 61 6b 57 6f 72 6b 69 6e 67 53 65 74 53 69 7a 65 00 01 55 05 05 00 00 00 00 00 00 00 2b 04 00 eakWorkingSetSize..U.........+..
2860 00 00 00 00 00 08 00 00 00 2b 00 00 00 02 1c 69 00 00 00 0e 57 6f 72 6b 69 6e 67 53 65 74 53 69 .........+.....i....WorkingSetSi
2880 7a 65 00 01 56 05 05 00 00 00 00 00 00 00 34 04 00 00 00 00 00 00 0c 00 00 00 34 00 00 00 02 1c ze..V.........4...........4.....
28a0 6a 00 00 00 17 51 75 6f 74 61 50 65 61 6b 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 57 05 j....QuotaPeakPagedPoolUsage..W.
28c0 05 00 00 00 00 00 00 00 3d 04 00 00 00 00 00 00 10 00 00 00 30 00 00 00 02 1c 6b 00 00 00 13 51 ........=...........0.....k....Q
28e0 75 6f 74 61 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 58 05 05 00 00 00 00 00 00 00 46 04 uotaPagedPoolUsage..X.........F.
2900 00 00 00 00 00 00 14 00 00 00 37 00 00 00 02 1c 6c 00 00 00 1a 51 75 6f 74 61 50 65 61 6b 4e 6f ..........7.....l....QuotaPeakNo
2920 6e 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 59 05 05 00 00 00 00 00 00 00 4f 04 00 00 00 nPagedPoolUsage..Y.........O....
2940 00 00 00 18 00 00 00 33 00 00 00 02 1c 6d 00 00 00 16 51 75 6f 74 61 4e 6f 6e 50 61 67 65 64 50 .......3.....m....QuotaNonPagedP
2960 6f 6f 6c 55 73 61 67 65 00 01 5a 05 05 00 00 00 00 00 00 00 58 04 00 00 00 00 00 00 1c 00 00 00 oolUsage..Z.........X...........
2980 2a 00 00 00 02 1c 6e 00 00 00 0d 50 61 67 65 66 69 6c 65 55 73 61 67 65 00 01 5b 05 05 00 00 00 *.....n....PagefileUsage..[.....
29a0 00 00 00 00 61 04 00 00 00 00 00 00 20 00 00 00 2e 00 00 00 02 1c 6f 00 00 00 11 50 65 61 6b 50 ....a.................o....PeakP
29c0 61 67 65 66 69 6c 65 55 73 61 67 65 00 01 5c 05 05 00 00 00 00 00 00 00 6a 04 00 00 00 00 00 00 agefileUsage..\.........j.......
29e0 24 00 00 00 00 00 00 00 02 fb 16 00 00 00 01 29 18 00 00 00 73 04 00 00 00 00 00 00 3c 00 00 00 $..............)....s.......<...
2a00 7b 04 00 00 00 00 16 00 00 00 01 29 19 00 00 00 81 04 00 00 00 00 00 00 3c 00 00 00 89 04 00 00 {..........)............<.......
2a20 00 00 38 00 00 00 01 33 1a 00 00 00 8f 04 00 00 00 00 00 00 3c 00 00 00 97 04 00 00 00 00 0a 00 ..8....3............<...........
2a40 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 ................................
2a60 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa .....[..........................
2a80 03 00 00 00 28 00 00 00 02 22 75 00 00 00 07 50 72 6f 63 65 73 73 00 01 65 25 05 00 00 00 00 00 ....(...."u....Process..e%......
2aa0 01 00 a0 04 00 00 00 00 00 00 a9 04 00 00 0a 00 00 02 2f 00 00 00 02 22 76 00 00 00 0e 70 70 73 ................../...."v....pps
2ac0 6d 65 6d 43 6f 75 6e 74 65 72 73 00 01 66 05 05 00 00 00 00 00 01 00 ab 04 00 00 00 00 00 00 b1 memCounters..f..................
2ae0 04 00 00 14 00 00 02 23 00 00 00 02 22 77 00 00 00 02 63 62 00 01 66 2f 05 00 00 00 00 00 01 00 .......#...."w....cb..f/........
2b00 b3 04 00 00 00 00 00 00 bc 04 00 00 1e 00 00 02 00 00 00 00 02 fb 86 00 00 00 01 2b 1b 00 00 00 ...........................+....
2b20 be 04 00 00 00 00 00 00 00 00 00 00 c2 04 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 ................................
2b40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 ec 04 00 00 ee 04 00 00 00 01 ................................
2b60 ee 0a 05 00 00 00 00 00 00 01 37 50 53 41 50 49 5f 45 4e 55 4d 50 52 4f 43 45 53 53 45 53 24 4c ..........7PSAPI_ENUMPROCESSES$L
2b80 50 44 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f PDWORD$LONGWORD$LONGWORD$$LONGBO
2ba0 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 OL.....[........................
2bc0 02 fa 03 00 00 00 2c 00 00 00 02 22 79 00 00 00 0b 6c 70 69 64 50 72 6f 63 65 73 73 00 01 69 18 ......,...."y....lpidProcess..i.
2be0 05 00 00 00 00 00 01 00 cb 04 00 00 00 00 00 00 d4 04 00 00 0a 00 00 03 23 00 00 00 02 22 7a 00 ........................#...."z.
2c00 00 00 02 63 62 00 01 69 2e 05 00 00 00 00 00 01 00 d6 04 00 00 00 00 00 00 df 04 00 00 14 00 00 ...cb..i........................
2c20 03 29 00 00 00 02 22 7b 00 00 00 08 63 62 4e 65 65 64 65 64 00 01 69 3d 05 00 00 00 00 02 04 01 .)...."{....cbNeeded..i=........
2c40 e1 04 00 00 00 00 00 00 ea 04 00 00 1e 00 00 07 00 00 00 00 02 fb 94 00 00 00 01 2b 1c 00 00 00 ...........................+....
2c60 f4 04 00 00 00 00 00 00 00 00 00 00 f8 04 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 ................................
2c80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 2d 05 00 00 2f 05 00 00 00 01 ......................-.../.....
2ca0 f5 0a 05 00 00 00 00 00 00 01 45 50 53 41 50 49 5f 45 4e 55 4d 50 52 4f 43 45 53 53 4d 4f 44 55 ..........EPSAPI_ENUMPROCESSMODU
2cc0 4c 45 53 24 4c 4f 4e 47 57 4f 52 44 24 4c 50 44 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f LES$LONGWORD$LPDWORD$LONGWORD$LO
2ce0 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 NGWORD$$LONGBOOL.....[..........
2d00 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 7d 00 00 00 08 68 ....................)...."}....h
2d20 50 72 6f 63 65 73 73 00 01 6b 1d 05 00 00 00 00 00 01 00 01 05 00 00 00 00 00 00 0a 05 00 00 0a Process..k......................
2d40 00 00 03 2a 00 00 00 02 22 7e 00 00 00 09 6c 70 68 4d 6f 64 75 6c 65 00 01 6b 30 05 00 00 00 00 ...*...."~....lphModule..k0.....
2d60 00 01 00 0c 05 00 00 00 00 00 00 15 05 00 00 14 00 00 03 23 00 00 00 02 22 7f 00 00 00 02 63 62 ...................#....".....cb
2d80 00 01 6b 44 05 00 00 00 00 00 01 00 17 05 00 00 00 00 00 00 20 05 00 00 1e 00 00 03 2b 00 00 00 ..kD........................+...
2da0 02 22 80 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 6c 07 05 00 00 00 00 02 04 01 22 05 00 .".....lpcbNeeded..l........."..
2dc0 00 00 00 00 00 2b 05 00 00 28 00 00 07 00 00 00 00 02 fb 91 00 00 00 01 2b 1d 00 00 00 35 05 00 .....+...(..............+....5..
2de0 00 00 00 00 00 00 00 00 00 39 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 .........9......................
2e00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 6e 05 00 00 70 05 00 00 00 01 fd 0a 05 ...................n...p........
2e20 00 00 00 00 00 00 01 42 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 24 .......BPSAPI_GETMODULEBASENAME$
2e40 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 LONGWORD$LONGWORD$PCHAR$LONGWORD
2e60 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 $$LONGWORD.....[................
2e80 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 82 00 00 00 08 68 50 72 6f 63 65 73 ..............)....".....hProces
2ea0 73 00 01 6e 1c 05 00 00 00 00 00 01 00 42 05 00 00 00 00 00 00 4b 05 00 00 0a 00 00 03 28 00 00 s..n.........B.......K.......(..
2ec0 00 02 22 83 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 6e 2f 05 00 00 00 00 00 01 00 4d 05 00 00 00 ..".....hModule..n/........M....
2ee0 00 00 00 56 05 00 00 14 00 00 03 2b 00 00 00 02 22 84 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 ...V.......+....".....lpBaseName
2f00 00 01 6f 03 05 00 00 00 00 00 01 00 58 05 00 00 00 00 00 00 61 05 00 00 1e 00 00 03 26 00 00 00 ..o.........X.......a.......&...
2f20 02 22 85 00 00 00 05 6e 53 69 7a 65 00 01 6f 16 05 00 00 00 00 00 01 00 63 05 00 00 00 00 00 00 .".....nSize..o.........c.......
2f40 6c 05 00 00 28 00 00 03 00 00 00 00 02 fb 93 00 00 00 01 2b 1e 00 00 00 76 05 00 00 00 00 00 00 l...(..............+....v.......
2f60 00 00 00 00 7a 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....z...........................
2f80 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 af 05 00 00 b1 05 00 00 04 01 05 01 0a 05 00 00 00 00 ................................
2fa0 00 00 01 43 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 41 24 4c 4f 4e ...CPSAPI_GETMODULEBASENAMEA$LON
2fc0 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c GWORD$LONGWORD$PCHAR$LONGWORD$$L
2fe0 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 ONGWORD.....[...................
3000 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 87 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 ...........)....".....hProcess..
3020 71 1d 05 00 00 00 00 00 01 00 83 05 00 00 00 00 00 00 8c 05 00 00 0a 00 00 03 28 00 00 00 02 22 q.........................(...."
3040 88 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 71 30 05 00 00 00 00 00 01 00 8e 05 00 00 00 00 00 00 .....hModule..q0................
3060 97 05 00 00 14 00 00 03 2b 00 00 00 02 22 89 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 72 ........+....".....lpBaseName..r
3080 03 05 00 00 00 00 00 01 00 99 05 00 00 00 00 00 00 a2 05 00 00 1e 00 00 03 26 00 00 00 02 22 8a .........................&....".
30a0 00 00 00 05 6e 53 69 7a 65 00 01 72 1a 05 00 00 00 00 00 01 00 a4 05 00 00 00 00 00 00 ad 05 00 ....nSize..r....................
30c0 00 28 00 00 03 00 00 00 00 02 fb 97 00 00 00 01 2b 1f 00 00 00 b7 05 00 00 00 00 00 00 00 00 00 .(..............+...............
30e0 00 bb 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3100 00 00 00 00 00 00 00 00 ff ff 02 f0 05 00 00 f2 05 00 00 04 01 0d 01 0a 05 00 00 00 00 00 00 01 ................................
3120 47 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 57 24 4c 4f 4e 47 57 4f GPSAPI_GETMODULEBASENAMEW$LONGWO
3140 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 RD$LONGWORD$PWIDECHAR$LONGWORD$$
3160 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 LONGWORD.....[..................
3180 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 8c 00 00 00 08 68 50 72 6f 63 65 73 73 00 ............)....".....hProcess.
31a0 01 74 1d 05 00 00 00 00 00 01 00 c4 05 00 00 00 00 00 00 cd 05 00 00 0a 00 00 03 28 00 00 00 02 .t.........................(....
31c0 22 8d 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 74 30 05 00 00 00 00 00 01 00 cf 05 00 00 00 00 00 ".....hModule..t0...............
31e0 00 d8 05 00 00 14 00 00 03 2b 00 00 00 02 22 8e 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 .........+....".....lpBaseName..
3200 75 03 05 00 00 00 00 00 01 00 da 05 00 00 00 00 00 00 e3 05 00 00 1e 00 00 03 26 00 00 00 02 22 u.........................&...."
3220 8f 00 00 00 05 6e 53 69 7a 65 00 01 75 1a 05 00 00 00 00 00 01 00 e5 05 00 00 00 00 00 00 ee 05 .....nSize..u...................
3240 00 00 28 00 00 03 00 00 00 00 02 fb 94 00 00 00 01 2b 20 00 00 00 f8 05 00 00 00 00 00 00 00 00 ..(..............+..............
3260 00 00 fc 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3280 00 00 00 00 00 00 00 00 00 ff ff 02 31 06 00 00 33 06 00 00 04 01 15 01 0a 05 00 00 00 00 00 00 ............1...3...............
32a0 01 44 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 24 4c 4f 4e 47 .DPSAPI_GETMODULEFILENAMEEX$LONG
32c0 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f WORD$LONGWORD$PCHAR$LONGWORD$$LO
32e0 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 NGWORD.....[....................
3300 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 91 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 77 ..........)....".....hProcess..w
3320 1e 05 00 00 00 00 00 01 00 05 06 00 00 00 00 00 00 0e 06 00 00 0a 00 00 03 28 00 00 00 02 22 92 .........................(....".
3340 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 77 31 05 00 00 00 00 00 01 00 10 06 00 00 00 00 00 00 19 ....hModule..w1.................
3360 06 00 00 14 00 00 03 2b 00 00 00 02 22 93 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 78 03 .......+....".....lpFilename..x.
3380 05 00 00 00 00 00 01 00 1b 06 00 00 00 00 00 00 24 06 00 00 1e 00 00 03 26 00 00 00 02 22 94 00 ................$.......&...."..
33a0 00 00 05 6e 53 69 7a 65 00 01 78 16 05 00 00 00 00 00 01 00 26 06 00 00 00 00 00 00 2f 06 00 00 ...nSize..x.........&......./...
33c0 28 00 00 03 00 00 00 00 02 fb 95 00 00 00 01 2b 21 00 00 00 39 06 00 00 00 00 00 00 00 00 00 00 (..............+!...9...........
33e0 3d 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =...............................
3400 00 00 00 00 00 00 00 ff ff 02 72 06 00 00 74 06 00 00 04 01 1d 01 0a 05 00 00 00 00 00 00 01 45 ..........r...t................E
3420 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 41 24 4c 4f 4e 47 57 PSAPI_GETMODULEFILENAMEEXA$LONGW
3440 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e ORD$LONGWORD$PCHAR$LONGWORD$$LON
3460 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 GWORD.....[.....................
3480 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 96 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 7a 1f .........)....".....hProcess..z.
34a0 05 00 00 00 00 00 01 00 46 06 00 00 00 00 00 00 4f 06 00 00 0a 00 00 03 28 00 00 00 02 22 97 00 ........F.......O.......(...."..
34c0 00 00 07 68 4d 6f 64 75 6c 65 00 01 7a 32 05 00 00 00 00 00 01 00 51 06 00 00 00 00 00 00 5a 06 ...hModule..z2........Q.......Z.
34e0 00 00 14 00 00 03 2b 00 00 00 02 22 98 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 7b 03 05 ......+....".....lpFilename..{..
3500 00 00 00 00 00 01 00 5c 06 00 00 00 00 00 00 65 06 00 00 1e 00 00 03 26 00 00 00 02 22 99 00 00 .......\.......e.......&...."...
3520 00 05 6e 53 69 7a 65 00 01 7b 1a 05 00 00 00 00 00 01 00 67 06 00 00 00 00 00 00 70 06 00 00 28 ..nSize..{.........g.......p...(
3540 00 00 03 00 00 00 00 02 fb 99 00 00 00 01 2b 22 00 00 00 7a 06 00 00 00 00 00 00 00 00 00 00 7e ..............+"...z...........~
3560 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3580 00 00 00 00 00 00 ff ff 02 b3 06 00 00 b5 06 00 00 04 01 25 01 0a 05 00 00 00 00 00 00 01 49 50 ...................%..........IP
35a0 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 57 24 4c 4f 4e 47 57 4f SAPI_GETMODULEFILENAMEEXW$LONGWO
35c0 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 RD$LONGWORD$PWIDECHAR$LONGWORD$$
35e0 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 LONGWORD.....[..................
3600 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 9b 00 00 00 08 68 50 72 6f 63 65 73 73 00 ............)....".....hProcess.
3620 01 7d 1f 05 00 00 00 00 00 01 00 87 06 00 00 00 00 00 00 90 06 00 00 0a 00 00 03 28 00 00 00 02 .}.........................(....
3640 22 9c 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 7d 32 05 00 00 00 00 00 01 00 92 06 00 00 00 00 00 ".....hModule..}2...............
3660 00 9b 06 00 00 14 00 00 03 2b 00 00 00 02 22 9d 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 .........+....".....lpFilename..
3680 7e 03 05 00 00 00 00 00 01 00 9d 06 00 00 00 00 00 00 a6 06 00 00 1e 00 00 03 26 00 00 00 02 22 ~.........................&...."
36a0 9e 00 00 00 05 6e 53 69 7a 65 00 01 7e 1a 05 00 00 00 00 00 01 00 a8 06 00 00 00 00 00 00 b1 06 .....nSize..~...................
36c0 00 00 28 00 00 03 00 00 00 00 02 fb 9c 00 00 00 01 2b 23 00 00 00 bb 06 00 00 00 00 00 00 00 00 ..(..............+#.............
36e0 00 00 bf 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3700 00 00 00 00 00 00 00 00 00 ff ff 02 f1 06 00 00 f3 06 00 00 04 01 2d 01 0a 05 00 00 00 00 00 00 ......................-.........
3720 01 4c 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 49 4e 46 4f 52 4d 41 54 49 4f 4e 24 4c 4f 4e .LPSAPI_GETMODULEINFORMATION$LON
3740 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 50 4d 4f 44 55 4c 45 49 4e 46 4f 24 4c 4f 4e 47 GWORD$LONGWORD$LPMODULEINFO$LONG
3760 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 WORD$$LONGBOOL.....[............
3780 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 a0 00 00 00 08 68 50 72 ..................)....".....hPr
37a0 6f 63 65 73 73 00 01 80 1f 05 00 00 00 00 00 01 00 c8 06 00 00 00 00 00 00 d1 06 00 00 0a 00 00 ocess...........................
37c0 03 28 00 00 00 02 22 a1 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 80 32 05 00 00 00 00 00 01 00 d3 .(....".....hModule...2.........
37e0 06 00 00 00 00 00 00 dc 06 00 00 14 00 00 03 2a 00 00 00 02 22 a2 00 00 00 09 6c 70 6d 6f 64 69 ...............*....".....lpmodi
3800 6e 66 6f 00 01 81 03 05 00 00 00 00 00 01 00 de 06 00 00 00 00 00 00 e4 06 00 00 1e 00 00 03 23 nfo............................#
3820 00 00 00 02 22 a3 00 00 00 02 63 62 00 01 81 1c 05 00 00 00 00 00 01 00 e6 06 00 00 00 00 00 00 ....".....cb....................
3840 ef 06 00 00 28 00 00 03 00 00 00 00 02 fb 78 00 00 00 01 2b 24 00 00 00 f9 06 00 00 00 00 00 00 ....(.........x....+$...........
3860 00 00 00 00 fd 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3880 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 11 07 00 00 13 07 00 00 04 01 35 01 0a 05 00 00 00 00 ........................5.......
38a0 00 00 01 28 50 53 41 50 49 5f 45 4d 50 54 59 57 4f 52 4b 49 4e 47 53 45 54 24 4c 4f 4e 47 57 4f ...(PSAPI_EMPTYWORKINGSET$LONGWO
38c0 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 RD$$LONGBOOL.....[..............
38e0 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 00 00 29 00 00 00 02 22 a5 00 00 00 08 68 50 72 6f 63 ................)....".....hProc
3900 65 73 73 00 01 83 1a 05 00 00 00 00 00 01 00 06 07 00 00 00 00 00 00 0f 07 00 00 0a 00 00 03 00 ess.............................
3920 00 00 00 02 fb 89 00 00 00 01 2b 25 00 00 00 19 07 00 00 00 00 00 00 00 00 00 00 1d 07 00 00 00 ..........+%....................
3940 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3960 00 00 ff ff 02 47 07 00 00 49 07 00 00 04 01 3c 01 0a 05 00 00 00 00 00 00 01 39 50 53 41 50 49 .....G...I.....<..........9PSAPI
3980 5f 51 55 45 52 59 57 4f 52 4b 49 4e 47 53 45 54 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 _QUERYWORKINGSET$LONGWORD$POINTE
39a0 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 R$LONGWORD$$LONGBOOL.....[......
39c0 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 29 00 00 00 02 22 a7 00 ........................)...."..
39e0 00 00 08 68 50 72 6f 63 65 73 73 00 01 85 1a 05 00 00 00 00 00 01 00 26 07 00 00 00 00 00 00 2f ...hProcess............&......./
3a00 07 00 00 0a 00 00 03 23 00 00 00 02 22 a8 00 00 00 02 70 76 00 01 85 2d 05 00 00 00 00 00 01 00 .......#....".....pv...-........
3a20 31 07 00 00 00 00 00 00 3a 07 00 00 14 00 00 03 23 00 00 00 02 22 a9 00 00 00 02 63 62 00 01 85 1.......:.......#....".....cb...
3a40 3a 05 00 00 00 00 00 01 00 3c 07 00 00 00 00 00 00 45 07 00 00 1e 00 00 03 00 00 00 00 02 fb 84 :........<.......E..............
3a60 00 00 00 01 2b 26 00 00 00 4f 07 00 00 00 00 00 00 00 00 00 00 53 07 00 00 00 08 08 00 00 00 08 ....+&...O...........S..........
3a80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 67 ...............................g
3aa0 07 00 00 69 07 00 00 04 01 43 01 0a 05 00 00 00 00 00 00 01 34 50 53 41 50 49 5f 49 4e 49 54 49 ...i.....C..........4PSAPI_INITI
3ac0 41 4c 49 5a 45 50 52 4f 43 45 53 53 46 4f 52 57 53 57 41 54 43 48 24 4c 4f 4e 47 57 4f 52 44 24 ALIZEPROCESSFORWSWATCH$LONGWORD$
3ae0 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 $LONGBOOL.....[.................
3b00 00 02 f9 04 00 00 00 02 fa 01 00 00 00 29 00 00 00 02 22 ab 00 00 00 08 68 50 72 6f 63 65 73 73 .............)....".....hProcess
3b20 00 01 87 26 05 00 00 00 00 00 01 00 5c 07 00 00 00 00 00 00 65 07 00 00 0a 00 00 03 00 00 00 00 ...&........\.......e...........
3b40 02 fb 91 00 00 00 01 2b 27 00 00 00 6f 07 00 00 00 00 00 00 00 00 00 00 73 07 00 00 00 08 08 00 .......+'...o...........s.......
3b60 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ................................
3b80 ff 02 a8 07 00 00 aa 07 00 00 04 01 4a 01 0a 05 00 00 00 00 00 00 01 41 50 53 41 50 49 5f 47 45 ............J..........APSAPI_GE
3ba0 54 4d 41 50 50 45 44 46 49 4c 45 4e 41 4d 45 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 TMAPPEDFILENAME$LONGWORD$POINTER
3bc0 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 $PCHAR$LONGWORD$$LONGWORD.....[.
3be0 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 .............................)..
3c00 00 02 22 ad 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 89 1c 05 00 00 00 00 00 01 00 7c 07 00 00 ..".....hProcess............|...
3c20 00 00 00 00 85 07 00 00 0a 00 00 03 24 00 00 00 02 22 ae 00 00 00 03 6c 70 76 00 01 89 2f 05 00 ............$....".....lpv.../..
3c40 00 00 00 00 01 00 87 07 00 00 00 00 00 00 90 07 00 00 14 00 00 03 2b 00 00 00 02 22 af 00 00 00 ......................+...."....
3c60 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 8a 03 05 00 00 00 00 00 01 00 92 07 00 00 00 00 00 00 9b .lpFilename.....................
3c80 07 00 00 1e 00 00 03 26 00 00 00 02 22 b0 00 00 00 05 6e 53 69 7a 65 00 01 8a 16 05 00 00 00 00 .......&....".....nSize.........
3ca0 00 01 00 9d 07 00 00 00 00 00 00 a6 07 00 00 28 00 00 03 00 00 00 00 02 fb 92 00 00 00 01 2b 28 ...............(..............+(
3cc0 00 00 00 b0 07 00 00 00 00 00 00 00 00 00 00 b4 07 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 ................................
3ce0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 e9 07 00 00 eb 07 00 ................................
3d00 00 04 01 52 01 0a 05 00 00 00 00 00 00 01 42 50 53 41 50 49 5f 47 45 54 4d 41 50 50 45 44 46 49 ...R..........BPSAPI_GETMAPPEDFI
3d20 4c 45 4e 41 4d 45 41 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c LENAMEA$LONGWORD$POINTER$PCHAR$L
3d40 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 ONGWORD$$LONGWORD.....[.........
3d60 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 b2 00 00 00 08 .....................)....".....
3d80 68 50 72 6f 63 65 73 73 00 01 8c 1d 05 00 00 00 00 00 01 00 bd 07 00 00 00 00 00 00 c6 07 00 00 hProcess........................
3da0 0a 00 00 03 24 00 00 00 02 22 b3 00 00 00 03 6c 70 76 00 01 8c 30 05 00 00 00 00 00 01 00 c8 07 ....$....".....lpv...0..........
3dc0 00 00 00 00 00 00 d1 07 00 00 14 00 00 03 2b 00 00 00 02 22 b4 00 00 00 0a 6c 70 46 69 6c 65 6e ..............+....".....lpFilen
3de0 61 6d 65 00 01 8d 03 05 00 00 00 00 00 01 00 d3 07 00 00 00 00 00 00 dc 07 00 00 1e 00 00 03 26 ame............................&
3e00 00 00 00 02 22 b5 00 00 00 05 6e 53 69 7a 65 00 01 8d 1a 05 00 00 00 00 00 01 00 de 07 00 00 00 ....".....nSize.................
3e20 00 00 00 e7 07 00 00 28 00 00 03 00 00 00 00 02 fb 96 00 00 00 01 2b 29 00 00 00 f1 07 00 00 00 .......(..............+)........
3e40 00 00 00 00 00 00 00 f5 07 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
3e60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 2a 08 00 00 2c 08 00 00 04 01 5a 01 0a 05 00 .................*...,.....Z....
3e80 00 00 00 00 00 01 46 50 53 41 50 49 5f 47 45 54 4d 41 50 50 45 44 46 49 4c 45 4e 41 4d 45 57 24 ......FPSAPI_GETMAPPEDFILENAMEW$
3ea0 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 LONGWORD$POINTER$PWIDECHAR$LONGW
3ec0 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 ORD$$LONGWORD.....[.............
3ee0 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 b7 00 00 00 08 68 50 72 6f .................)....".....hPro
3f00 63 65 73 73 00 01 8f 1d 05 00 00 00 00 00 01 00 fe 07 00 00 00 00 00 00 07 08 00 00 0a 00 00 03 cess............................
3f20 24 00 00 00 02 22 b8 00 00 00 03 6c 70 76 00 01 8f 30 05 00 00 00 00 00 01 00 09 08 00 00 00 00 $....".....lpv...0..............
3f40 00 00 12 08 00 00 14 00 00 03 2b 00 00 00 02 22 b9 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 ..........+....".....lpFilename.
3f60 01 90 03 05 00 00 00 00 00 01 00 14 08 00 00 00 00 00 00 1d 08 00 00 1e 00 00 03 26 00 00 00 02 ...........................&....
3f80 22 ba 00 00 00 05 6e 53 69 7a 65 00 01 90 1a 05 00 00 00 00 00 01 00 1f 08 00 00 00 00 00 00 28 ".....nSize....................(
3fa0 08 00 00 28 00 00 03 00 00 00 00 02 fb 8e 00 00 00 01 2b 2a 00 00 00 32 08 00 00 00 00 00 00 00 ...(..............+*...2........
3fc0 00 00 00 36 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...6............................
3fe0 00 00 00 00 00 00 00 00 00 00 ff ff 02 60 08 00 00 62 08 00 00 04 01 62 01 0a 05 00 00 00 00 00 .............`...b.....b........
4000 00 01 3e 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 42 41 53 45 4e 41 4d 45 ..>PSAPI_GETDEVICEDRIVERBASENAME
4020 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 $POINTER$PCHAR$LONGWORD$$LONGWOR
4040 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 D.....[.........................
4060 fa 03 00 00 00 2a 00 00 00 02 22 bc 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 92 22 05 00 00 .....*....".....ImageBase..."...
4080 00 00 00 01 00 3f 08 00 00 00 00 00 00 48 08 00 00 0a 00 00 03 2b 00 00 00 02 22 bd 00 00 00 0a .....?.......H.......+....".....
40a0 6c 70 42 61 73 65 4e 61 6d 65 00 01 92 36 05 00 00 00 00 00 01 00 4a 08 00 00 00 00 00 00 53 08 lpBaseName...6........J.......S.
40c0 00 00 14 00 00 03 26 00 00 00 02 22 be 00 00 00 05 6e 53 69 7a 65 00 01 93 03 05 00 00 00 00 00 ......&....".....nSize..........
40e0 01 00 55 08 00 00 00 00 00 00 5e 08 00 00 1e 00 00 03 00 00 00 00 02 fb 8f 00 00 00 01 2b 2b 00 ..U.......^..................++.
4100 00 00 68 08 00 00 00 00 00 00 00 00 00 00 6c 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 ..h...........l.................
4120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 96 08 00 00 98 08 00 00 ................................
4140 04 01 6a 01 0a 05 00 00 00 00 00 00 01 3f 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 ..j..........?PSAPI_GETDEVICEDRI
4160 56 45 52 42 41 53 45 4e 41 4d 45 41 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 VERBASENAMEA$POINTER$PCHAR$LONGW
4180 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 ORD$$LONGWORD.....[.............
41a0 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 c0 00 00 00 09 49 6d 61 67 .................*....".....Imag
41c0 65 42 61 73 65 00 01 95 23 05 00 00 00 00 00 01 00 75 08 00 00 00 00 00 00 7e 08 00 00 0a 00 00 eBase...#........u.......~......
41e0 03 2b 00 00 00 02 22 c1 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 95 37 05 00 00 00 00 00 .+....".....lpBaseName...7......
4200 01 00 80 08 00 00 00 00 00 00 89 08 00 00 14 00 00 03 26 00 00 00 02 22 c2 00 00 00 05 6e 53 69 ..................&....".....nSi
4220 7a 65 00 01 96 03 05 00 00 00 00 00 01 00 8b 08 00 00 00 00 00 00 94 08 00 00 1e 00 00 03 00 00 ze..............................
4240 00 00 02 fb 93 00 00 00 01 2b 2c 00 00 00 9e 08 00 00 00 00 00 00 00 00 00 00 a2 08 00 00 00 08 .........+,.....................
4260 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
4280 00 ff ff 02 cc 08 00 00 ce 08 00 00 04 01 72 01 0a 05 00 00 00 00 00 00 01 43 50 53 41 50 49 5f ..............r..........CPSAPI_
42a0 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 42 41 53 45 4e 41 4d 45 57 24 50 4f 49 4e 54 45 52 GETDEVICEDRIVERBASENAMEW$POINTER
42c0 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 $PWIDECHAR$LONGWORD$$LONGWORD...
42e0 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 ..[.............................
4300 00 2a 00 00 00 02 22 c4 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 98 23 05 00 00 00 00 00 01 .*....".....ImageBase...#.......
4320 00 ab 08 00 00 00 00 00 00 b4 08 00 00 0a 00 00 03 2b 00 00 00 02 22 c5 00 00 00 0a 6c 70 42 61 .................+....".....lpBa
4340 73 65 4e 61 6d 65 00 01 98 37 05 00 00 00 00 00 01 00 b6 08 00 00 00 00 00 00 bf 08 00 00 14 00 seName...7......................
4360 00 03 26 00 00 00 02 22 c6 00 00 00 05 6e 53 69 7a 65 00 01 99 03 05 00 00 00 00 00 01 00 c1 08 ..&....".....nSize..............
4380 00 00 00 00 00 00 ca 08 00 00 1e 00 00 03 00 00 00 00 02 fb 8e 00 00 00 01 2b 2d 00 00 00 d4 08 .........................+-.....
43a0 00 00 00 00 00 00 00 00 00 00 d8 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 ................................
43c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 02 09 00 00 04 09 00 00 04 01 7a 01 ..............................z.
43e0 0a 05 00 00 00 00 00 00 01 3e 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 46 .........>PSAPI_GETDEVICEDRIVERF
4400 49 4c 45 4e 41 4d 45 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 ILENAME$POINTER$PCHAR$LONGWORD$$
4420 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 LONGWORD.....[..................
4440 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 c8 00 00 00 09 49 6d 61 67 65 42 61 73 65 ............*....".....ImageBase
4460 00 01 9b 22 05 00 00 00 00 00 01 00 e1 08 00 00 00 00 00 00 ea 08 00 00 0a 00 00 03 2b 00 00 00 ..."........................+...
4480 02 22 c9 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 9b 36 05 00 00 00 00 00 01 00 ec 08 00 .".....lpFileName...6...........
44a0 00 00 00 00 00 f5 08 00 00 14 00 00 03 26 00 00 00 02 22 ca 00 00 00 05 6e 53 69 7a 65 00 01 9c .............&....".....nSize...
44c0 03 05 00 00 00 00 00 01 00 f7 08 00 00 00 00 00 00 00 09 00 00 1e 00 00 03 00 00 00 00 02 fb 8f ................................
44e0 00 00 00 01 2b 2e 00 00 00 0a 09 00 00 00 00 00 00 00 00 00 00 0e 09 00 00 00 08 08 00 00 00 08 ....+...........................
4500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 38 ...............................8
4520 09 00 00 3a 09 00 00 04 01 82 01 0a 05 00 00 00 00 00 00 01 3f 50 53 41 50 49 5f 47 45 54 44 45 ...:................?PSAPI_GETDE
4540 56 49 43 45 44 52 49 56 45 52 46 49 4c 45 4e 41 4d 45 41 24 50 4f 49 4e 54 45 52 24 50 43 48 41 VICEDRIVERFILENAMEA$POINTER$PCHA
4560 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 R$LONGWORD$$LONGWORD.....[......
4580 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 cc 00 ........................*...."..
45a0 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 9e 23 05 00 00 00 00 00 01 00 17 09 00 00 00 00 00 00 ...ImageBase...#................
45c0 20 09 00 00 0a 00 00 03 2b 00 00 00 02 22 cd 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 9e ........+....".....lpFileName...
45e0 37 05 00 00 00 00 00 01 00 22 09 00 00 00 00 00 00 2b 09 00 00 14 00 00 03 26 00 00 00 02 22 ce 7........".......+.......&....".
4600 00 00 00 05 6e 53 69 7a 65 00 01 9f 03 05 00 00 00 00 00 01 00 2d 09 00 00 00 00 00 00 36 09 00 ....nSize............-.......6..
4620 00 1e 00 00 03 00 00 00 00 02 fb 93 00 00 00 01 2b 2f 00 00 00 40 09 00 00 00 00 00 00 00 00 00 ................+/...@..........
4640 00 44 09 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .D..............................
4660 00 00 00 00 00 00 00 00 ff ff 02 6e 09 00 00 70 09 00 00 04 01 8a 01 0a 05 00 00 00 00 00 00 01 ...........n...p................
4680 43 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 46 49 4c 45 4e 41 4d 45 57 24 CPSAPI_GETDEVICEDRIVERFILENAMEW$
46a0 50 4f 49 4e 54 45 52 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 POINTER$PWIDECHAR$LONGWORD$$LONG
46c0 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 WORD.....[......................
46e0 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 d0 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 a1 23 ........*....".....ImageBase...#
4700 05 00 00 00 00 00 01 00 4d 09 00 00 00 00 00 00 56 09 00 00 0a 00 00 03 2b 00 00 00 02 22 d1 00 ........M.......V.......+...."..
4720 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 a1 37 05 00 00 00 00 00 01 00 58 09 00 00 00 00 00 ...lpFileName...7........X......
4740 00 61 09 00 00 14 00 00 03 26 00 00 00 02 22 d2 00 00 00 05 6e 53 69 7a 65 00 01 a2 03 05 00 00 .a.......&....".....nSize.......
4760 00 00 00 01 00 63 09 00 00 00 00 00 00 6c 09 00 00 1e 00 00 03 00 00 00 00 02 fb 8c 00 00 00 01 .....c.......l..................
4780 2b 30 00 00 00 76 09 00 00 00 00 00 00 00 00 00 00 7a 09 00 00 00 08 08 00 00 00 08 00 00 00 00 +0...v...........z..............
47a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 a1 09 00 00 a3 ................................
47c0 09 00 00 04 01 92 01 0a 05 00 00 00 00 00 00 01 3c 50 53 41 50 49 5f 45 4e 55 4d 44 45 56 49 43 ................<PSAPI_ENUMDEVIC
47e0 45 44 52 49 56 45 52 53 24 50 50 4f 49 4e 54 45 52 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 EDRIVERS$PPOINTER$LONGWORD$LONGW
4800 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 ORD$$LONGBOOL.....[.............
4820 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2c 00 00 00 02 22 d4 00 00 00 0b 6c 70 49 6d .................,....".....lpIm
4840 61 67 65 42 61 73 65 00 01 a4 1c 05 00 00 00 00 00 01 00 83 09 00 00 00 00 00 00 89 09 00 00 0a ageBase.........................
4860 00 00 03 23 00 00 00 02 22 d5 00 00 00 02 63 62 00 01 a4 33 05 00 00 00 00 00 01 00 8b 09 00 00 ...#....".....cb...3............
4880 00 00 00 00 94 09 00 00 14 00 00 03 2b 00 00 00 02 22 d6 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 ............+....".....lpcbNeede
48a0 64 00 01 a5 07 05 00 00 00 00 02 04 01 96 09 00 00 00 00 00 00 9f 09 00 00 1e 00 00 07 00 00 00 d...............................
48c0 00 02 fb 9f 00 00 00 01 2b 31 00 00 00 a9 09 00 00 00 00 00 00 00 00 00 00 ad 09 00 00 00 08 08 ........+1......................
48e0 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
4900 ff ff 02 d4 09 00 00 d6 09 00 00 04 01 9a 01 0a 05 00 00 00 00 00 00 01 4f 50 53 41 50 49 5f 47 ........................OPSAPI_G
4920 45 54 50 52 4f 43 45 53 53 4d 45 4d 4f 52 59 49 4e 46 4f 24 4c 4f 4e 47 57 4f 52 44 24 50 50 52 ETPROCESSMEMORYINFO$LONGWORD$PPR
4940 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 24 4c 4f 4e 47 57 4f 52 44 24 24 OCESS_MEMORY_COUNTERS$LONGWORD$$
4960 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 LONGBOOL.....[..................
4980 02 f9 04 00 00 00 02 fa 03 00 00 00 28 00 00 00 02 22 d8 00 00 00 07 50 72 6f 63 65 73 73 00 01 ............(....".....Process..
49a0 a7 1f 05 00 00 00 00 00 01 00 b6 09 00 00 00 00 00 00 bf 09 00 00 0a 00 00 03 2f 00 00 00 02 22 ........................../...."
49c0 d9 00 00 00 0e 70 70 73 6d 65 6d 43 6f 75 6e 74 65 72 73 00 01 a8 03 05 00 00 00 00 00 01 00 c1 .....ppsmemCounters.............
49e0 09 00 00 00 00 00 00 c7 09 00 00 14 00 00 03 23 00 00 00 02 22 da 00 00 00 02 63 62 00 01 a8 2d ...............#....".....cb...-
4a00 05 00 00 00 00 00 01 00 c9 09 00 00 00 00 00 00 d2 09 00 00 1e 00 00 03 00 00 00 00 02 fb 00 00 ................................
4a20 00 00 01 f9 04 00 00 00 01 fa 43 00 00 00 13 00 00 00 01 1d 00 00 00 00 05 50 73 41 50 49 00 01 ..........C..............PsAPI..
4a40 07 01 05 00 00 00 00 14 00 00 00 01 1d 01 00 00 00 06 73 79 73 74 65 6d 00 01 07 01 05 00 00 00 ..................system........
4a60 00 14 00 00 00 01 1d 02 00 00 00 06 6f 62 6a 70 61 73 00 01 07 05 05 00 00 00 00 15 00 00 00 01 ............objpas..............
4a80 1d 03 00 00 00 07 57 69 6e 64 6f 77 73 00 01 07 06 05 00 00 00 00 1a 00 00 00 01 14 04 00 00 00 ......Windows...................
4aa0 08 50 50 6f 69 6e 74 65 72 00 01 0c 0e 05 00 00 00 00 dc 09 00 00 20 00 00 00 01 14 05 00 00 00 .PPointer.......................
4ac0 0e 54 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 01 0e 14 05 00 00 00 00 e2 09 00 00 25 00 00 00 .TEnumProcesses.............%...
4ae0 01 14 09 00 00 00 13 54 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 73 00 01 0f 19 05 00 .......TEnumProcessModules......
4b00 00 00 00 e8 09 00 00 25 00 00 00 01 14 0e 00 00 00 13 54 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 .......%..........TGetModuleBase
4b20 4e 61 6d 65 41 00 01 11 19 05 00 00 00 00 ee 09 00 00 25 00 00 00 01 14 13 00 00 00 13 54 47 65 NameA.............%..........TGe
4b40 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 13 19 05 00 00 00 00 f4 09 00 00 24 00 00 tModuleBaseNameW.............$..
4b60 00 01 14 18 00 00 00 12 54 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 01 15 18 05 00 ........TGetModuleBaseName......
4b80 00 00 00 fa 09 00 00 27 00 00 00 01 14 19 00 00 00 15 54 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 .......'..........TGetModuleFile
4ba0 4e 61 6d 65 45 78 41 00 01 16 1b 05 00 00 00 00 00 0a 00 00 27 00 00 00 01 14 1e 00 00 00 15 54 NameExA.............'..........T
4bc0 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 01 18 1b 05 00 00 00 00 06 0a 00 GetModuleFileNameExW............
4be0 00 26 00 00 00 01 14 23 00 00 00 14 54 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 .&.....#....TGetModuleFileNameEx
4c00 00 01 1a 1a 05 00 00 00 00 0c 0a 00 00 1d 00 00 00 01 14 24 00 00 00 0b 5f 4d 4f 44 55 4c 45 49 ...................$...._MODULEI
4c20 4e 46 4f 00 01 1d 11 05 00 00 00 00 12 0a 00 00 1c 00 00 00 01 14 28 00 00 00 0a 4d 4f 44 55 4c NFO...................(....MODUL
4c40 45 49 4e 46 4f 00 01 23 10 05 00 00 00 00 18 0a 00 00 1e 00 00 00 01 14 29 00 00 00 0c 4c 50 4d EINFO..#................)....LPM
4c60 4f 44 55 4c 45 49 4e 46 4f 00 01 25 12 05 00 00 00 00 1e 0a 00 00 1d 00 00 00 01 14 2a 00 00 00 ODULEINFO..%................*...
4c80 0b 54 4d 6f 64 75 6c 65 49 6e 66 6f 00 01 26 11 05 00 00 00 00 24 0a 00 00 1d 00 00 00 01 14 2b .TModuleInfo..&......$.........+
4ca0 00 00 00 0b 50 4d 6f 64 75 6c 65 49 6e 66 6f 00 01 27 11 05 00 00 00 00 2a 0a 00 00 27 00 00 00 ....PModuleInfo..'......*...'...
4cc0 01 14 2c 00 00 00 15 54 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 29 1b ..,....TGetModuleInformation..).
4ce0 05 00 00 00 00 30 0a 00 00 22 00 00 00 01 14 31 00 00 00 10 54 45 6d 70 74 79 57 6f 72 6b 69 6e .....0...".....1....TEmptyWorkin
4d00 67 53 65 74 00 01 2b 16 05 00 00 00 00 36 0a 00 00 22 00 00 00 01 14 33 00 00 00 10 54 51 75 65 gSet..+......6...".....3....TQue
4d20 72 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 2c 16 05 00 00 00 00 3c 0a 00 00 2e 00 00 00 01 14 37 ryWorkingSet..,......<.........7
4d40 00 00 00 1c 54 49 6e 69 74 69 61 6c 69 7a 65 50 72 6f 63 65 73 73 46 6f 72 57 73 57 61 74 63 68 ....TInitializeProcessForWsWatch
4d60 00 01 2d 22 05 00 00 00 00 42 0a 00 00 2d 00 00 00 01 14 39 00 00 00 1b 5f 50 53 41 50 49 5f 57 ..-".....B...-.....9...._PSAPI_W
4d80 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 00 01 30 21 05 00 00 00 00 48 0a 00 00 S_WATCH_INFORMATION..0!.....H...
4da0 2c 00 00 00 01 14 3c 00 00 00 1a 50 53 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d ,.....<....PSAPI_WS_WATCH_INFORM
4dc0 41 54 49 4f 4e 00 01 35 20 05 00 00 00 00 4e 0a 00 00 2d 00 00 00 01 14 3d 00 00 00 1b 50 50 53 ATION..5......N...-.....=....PPS
4de0 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 00 01 37 21 05 00 00 00 API_WS_WATCH_INFORMATION..7!....
4e00 00 54 0a 00 00 2a 00 00 00 01 14 3e 00 00 00 18 54 50 53 41 50 49 57 73 57 61 74 63 68 49 6e 66 .T...*.....>....TPSAPIWsWatchInf
4e20 6f 72 6d 61 74 69 6f 6e 00 01 38 1e 05 00 00 00 00 5a 0a 00 00 2a 00 00 00 01 14 3f 00 00 00 18 ormation..8......Z...*.....?....
4e40 50 50 53 41 50 49 57 73 57 61 74 63 68 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 39 1e 05 00 00 00 PPSAPIWsWatchInformation..9.....
4e60 00 60 0a 00 00 1f 00 00 00 01 14 40 00 00 00 0d 54 47 65 74 57 73 43 68 61 6e 67 65 73 00 01 3b .`.........@....TGetWsChanges..;
4e80 13 05 00 00 00 00 66 0a 00 00 25 00 00 00 01 14 44 00 00 00 13 54 47 65 74 4d 61 70 70 65 64 46 ......f...%.....D....TGetMappedF
4ea0 69 6c 65 4e 61 6d 65 41 00 01 3e 19 05 00 00 00 00 6c 0a 00 00 25 00 00 00 01 14 49 00 00 00 13 ileNameA..>......l...%.....I....
4ec0 54 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 40 19 05 00 00 00 00 72 0a 00 00 TGetMappedFileNameW..@......r...
4ee0 24 00 00 00 01 14 4e 00 00 00 12 54 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 00 01 42 $.....N....TGetMappedFileName..B
4f00 18 05 00 00 00 00 78 0a 00 00 2b 00 00 00 01 14 4f 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 ......x...+.....O....TGetDeviceD
4f20 72 69 76 65 72 42 61 73 65 4e 61 6d 65 41 00 01 43 1f 05 00 00 00 00 7e 0a 00 00 2b 00 00 00 01 riverBaseNameA..C......~...+....
4f40 14 53 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 .S....TGetDeviceDriverBaseNameW.
4f60 01 45 1f 05 00 00 00 00 84 0a 00 00 2a 00 00 00 01 14 57 00 00 00 18 54 47 65 74 44 65 76 69 63 .E..........*.....W....TGetDevic
4f80 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 00 01 47 1e 05 00 00 00 00 8a 0a 00 00 2b 00 00 00 eDriverBaseName..G..........+...
4fa0 01 14 58 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 41 ..X....TGetDeviceDriverFileNameA
4fc0 00 01 48 1f 05 00 00 00 00 90 0a 00 00 2b 00 00 00 01 14 5c 00 00 00 19 54 47 65 74 44 65 76 69 ..H..........+.....\....TGetDevi
4fe0 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 57 00 01 4a 1f 05 00 00 00 00 96 0a 00 00 2a 00 ceDriverFileNameW..J..........*.
5000 00 00 01 14 60 00 00 00 18 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d ....`....TGetDeviceDriverFileNam
5020 65 00 01 4c 1e 05 00 00 00 00 9c 0a 00 00 24 00 00 00 01 14 61 00 00 00 12 54 45 6e 75 6d 44 65 e..L..........$.....a....TEnumDe
5040 76 69 63 65 44 72 69 76 65 72 73 00 01 4e 18 05 00 00 00 00 a2 0a 00 00 2a 00 00 00 01 14 65 00 viceDrivers..N..........*.....e.
5060 00 00 18 5f 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 00 01 52 1e 05 ..._PROCESS_MEMORY_COUNTERS..R..
5080 00 00 00 00 a8 0a 00 00 29 00 00 00 01 14 70 00 00 00 17 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 ........).....p....PROCESS_MEMOR
50a0 59 5f 43 4f 55 4e 54 45 52 53 00 01 5f 1d 05 00 00 00 00 ae 0a 00 00 2a 00 00 00 01 14 71 00 00 Y_COUNTERS.._..........*.....q..
50c0 00 18 50 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 00 01 61 1e 05 00 ..PPROCESS_MEMORY_COUNTERS..a...
50e0 00 00 00 b4 0a 00 00 28 00 00 00 01 14 72 00 00 00 16 54 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 .......(.....r....TProcessMemory
5100 43 6f 75 6e 74 65 72 73 00 01 62 1c 05 00 00 00 00 ba 0a 00 00 28 00 00 00 01 14 73 00 00 00 16 Counters..b..........(.....s....
5120 50 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 43 6f 75 6e 74 65 72 73 00 01 63 1c 05 00 00 00 00 c0 PProcessMemoryCounters..c.......
5140 0a 00 00 27 00 00 00 01 14 74 00 00 00 15 54 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 ...'.....t....TGetProcessMemoryI
5160 6e 66 6f 00 01 65 1b 05 00 00 00 00 c6 0a 00 00 21 00 00 00 01 15 78 00 00 00 0d 45 6e 75 6d 50 nfo..e..........!.....x....EnumP
5180 72 6f 63 65 73 73 65 73 00 01 69 0a 05 00 00 00 00 01 00 cc 0a 00 00 26 00 00 00 01 15 7c 00 00 rocesses..i............&.....|..
51a0 00 12 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 73 00 01 6b 0a 05 00 00 00 00 01 00 d2 ..EnumProcessModules..k.........
51c0 0a 00 00 25 00 00 00 01 15 81 00 00 00 11 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 ...%..........GetModuleBaseName.
51e0 01 6e 0a 05 00 00 00 00 01 00 d8 0a 00 00 26 00 00 00 01 15 86 00 00 00 12 47 65 74 4d 6f 64 75 .n............&..........GetModu
5200 6c 65 42 61 73 65 4e 61 6d 65 41 00 01 71 0a 05 00 00 00 00 01 00 de 0a 00 00 26 00 00 00 01 15 leBaseNameA..q............&.....
5220 8b 00 00 00 12 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 74 0a 05 00 00 00 00 .....GetModuleBaseNameW..t......
5240 01 00 e4 0a 00 00 27 00 00 00 01 15 90 00 00 00 13 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 ......'..........GetModuleFileNa
5260 6d 65 45 78 00 01 77 0a 05 00 00 00 00 01 00 ea 0a 00 00 28 00 00 00 01 15 95 00 00 00 14 47 65 meEx..w............(..........Ge
5280 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 41 00 01 7a 0a 05 00 00 00 00 01 00 f0 0a 00 tModuleFileNameExA..z...........
52a0 00 28 00 00 00 01 15 9a 00 00 00 14 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 .(..........GetModuleFileNameExW
52c0 00 01 7d 0a 05 00 00 00 00 01 00 f6 0a 00 00 28 00 00 00 01 15 9f 00 00 00 14 47 65 74 4d 6f 64 ..}............(..........GetMod
52e0 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 80 0a 05 00 00 00 00 01 00 fc 0a 00 00 23 00 00 uleInformation...............#..
5300 00 01 15 a4 00 00 00 0f 45 6d 70 74 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 83 0a 05 00 00 00 00 ........EmptyWorkingSet.........
5320 01 00 02 0b 00 00 23 00 00 00 01 15 a6 00 00 00 0f 51 75 65 72 79 57 6f 72 6b 69 6e 67 53 65 74 ......#..........QueryWorkingSet
5340 00 01 85 0a 05 00 00 00 00 01 00 08 0b 00 00 2f 00 00 00 01 15 aa 00 00 00 1b 49 6e 69 74 69 61 .............../..........Initia
5360 6c 69 7a 65 50 72 6f 63 65 73 73 46 6f 72 57 73 57 61 74 63 68 00 01 87 0a 05 00 00 00 00 01 00 lizeProcessForWsWatch...........
5380 0e 0b 00 00 25 00 00 00 01 15 ac 00 00 00 11 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 ....%..........GetMappedFileName
53a0 00 01 89 0a 05 00 00 00 00 01 00 14 0b 00 00 26 00 00 00 01 15 b1 00 00 00 12 47 65 74 4d 61 70 ...............&..........GetMap
53c0 70 65 64 46 69 6c 65 4e 61 6d 65 41 00 01 8c 0a 05 00 00 00 00 01 00 1a 0b 00 00 26 00 00 00 01 pedFileNameA...............&....
53e0 15 b6 00 00 00 12 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 8f 0a 05 00 00 00 ......GetMappedFileNameW........
5400 00 01 00 20 0b 00 00 2b 00 00 00 01 15 bb 00 00 00 17 47 65 74 44 65 76 69 63 65 44 72 69 76 65 .......+..........GetDeviceDrive
5420 72 42 61 73 65 4e 61 6d 65 00 01 92 0a 05 00 00 00 00 01 00 26 0b 00 00 2c 00 00 00 01 15 bf 00 rBaseName...........&...,.......
5440 00 00 18 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 41 00 01 95 0a 05 ...GetDeviceDriverBaseNameA.....
5460 00 00 00 00 01 00 2c 0b 00 00 2c 00 00 00 01 15 c3 00 00 00 18 47 65 74 44 65 76 69 63 65 44 72 ......,...,..........GetDeviceDr
5480 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 01 98 0a 05 00 00 00 00 01 00 32 0b 00 00 2b 00 00 00 iverBaseNameW...........2...+...
54a0 01 15 c7 00 00 00 17 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 00 01 .......GetDeviceDriverFileName..
54c0 9b 0a 05 00 00 00 00 01 00 38 0b 00 00 2c 00 00 00 01 15 cb 00 00 00 18 47 65 74 44 65 76 69 63 .........8...,..........GetDevic
54e0 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 41 00 01 9e 0a 05 00 00 00 00 01 00 3e 0b 00 00 2c eDriverFileNameA...........>...,
5500 00 00 00 01 15 cf 00 00 00 18 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d ..........GetDeviceDriverFileNam
5520 65 57 00 01 a1 0a 05 00 00 00 00 01 00 44 0b 00 00 25 00 00 00 01 15 d3 00 00 00 11 45 6e 75 6d eW...........D...%..........Enum
5540 44 65 76 69 63 65 44 72 69 76 65 72 73 00 01 a4 0a 05 00 00 00 00 01 00 4a 0b 00 00 28 00 00 00 DeviceDrivers...........J...(...
5560 01 15 d7 00 00 00 14 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 01 a7 0a 05 .......GetProcessMemoryInfo.....
5580 00 00 00 00 01 00 50 0b 00 00 00 00 00 00 01 fb 01 00 00 00 01 12 00 00 00 00 00 01 03 00 00 00 ......P.........................
55a0 00 01 fd 04 00 00 00 01 5b 00 00 00 00 04 00 00 00 01 f8 02 00 00 00 72 00 00 00 01 2b 32 00 00 ........[..............r....+2..
55c0 00 61 0f 00 00 00 00 00 00 00 00 00 00 65 0f 00 00 00 02 08 00 00 10 09 00 00 00 00 00 00 00 00 .a...........e..................
55e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 5f 50 53 41 50 49 5f 69 6e 69 74 ....................._PSAPI_init
5600 ff ff 01 6e 0f 00 00 70 0f 00 00 00 01 ac 01 00 00 00 00 00 00 00 02 0b 49 4e 49 54 24 5f 50 53 ...n...p................INIT$_PS
5620 41 50 49 0b 5f 50 53 41 50 49 5f 69 6e 69 74 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 API._PSAPI_init.....[...........
5640 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 00 00 00 00 00 00 00 00 02 fb 6e 00 00 00 01 2b 33 .........................n....+3
5660 00 00 00 76 0f 00 00 00 00 00 00 00 00 00 00 7a 0f 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 ...v...........z................
5680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 83 0f 00 00 85 0f 00 ................................
56a0 00 00 01 c6 0a 05 00 00 00 00 00 00 01 1f 50 53 41 50 49 5f 43 48 45 43 4b 50 53 41 50 49 4c 4f ..............PSAPI_CHECKPSAPILO
56c0 41 44 45 44 24 24 42 4f 4f 4c 45 41 4e 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 ADED$$BOOLEAN.....[.............
56e0 00 00 00 00 00 02 f9 04 00 00 00 02 fa 00 00 00 00 00 00 00 00 02 fb 00 00 00 00 01 f9 04 00 00 ................................
5700 00 01 fa 1a 00 00 00 1f 00 00 00 01 15 db 00 00 00 0b 24 50 53 41 50 49 5f 69 6e 69 74 00 01 ac ..................$PSAPI_init...
5720 01 05 00 00 00 00 01 00 8b 0f 00 00 23 00 00 00 01 16 dc 00 00 00 06 68 50 53 41 50 49 00 01 ad ............#..........hPSAPI...
5740 03 05 00 00 00 00 00 00 01 91 0f 00 00 00 00 00 00 9a 0f 00 00 2b 00 00 00 01 16 dd 00 00 00 0e .....................+..........
5760 5f 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 01 ae 03 05 00 00 00 00 00 00 01 9c 0f 00 00 00 00 _EnumProcesses..................
5780 00 00 a2 0f 00 00 30 00 00 00 01 16 de 00 00 00 13 5f 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 ......0.........._EnumProcessMod
57a0 75 6c 65 73 00 01 af 03 05 00 00 00 00 00 00 01 a4 0f 00 00 00 00 00 00 aa 0f 00 00 2f 00 00 00 ules......................../...
57c0 01 16 df 00 00 00 12 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 01 b0 0e 05 00 00 ......._GetModuleBaseName.......
57e0 00 00 00 00 01 ac 0f 00 00 00 00 00 00 b2 0f 00 00 31 00 00 00 01 16 e0 00 00 00 14 5f 47 65 74 .................1.........._Get
5800 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 00 01 b1 0e 05 00 00 00 00 00 00 01 b4 0f 00 00 ModuleFileNameEx................
5820 00 00 00 00 ba 0f 00 00 30 00 00 00 01 16 e1 00 00 00 13 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 ........0.........._GetModuleBas
5840 65 4e 61 6d 65 41 00 01 b2 0e 05 00 00 00 00 00 00 01 bc 0f 00 00 00 00 00 00 c2 0f 00 00 32 00 eNameA........................2.
5860 00 00 01 16 e2 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 41 00 01 ........._GetModuleFileNameExA..
5880 b3 0e 05 00 00 00 00 00 00 01 c4 0f 00 00 00 00 00 00 ca 0f 00 00 30 00 00 00 01 16 e3 00 00 00 ......................0.........
58a0 13 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 b4 0e 05 00 00 00 00 00 00 01 ._GetModuleBaseNameW............
58c0 cc 0f 00 00 00 00 00 00 d2 0f 00 00 32 00 00 00 01 16 e4 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c ............2.........._GetModul
58e0 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 01 b5 0e 05 00 00 00 00 00 00 01 d4 0f 00 00 00 00 00 00 eFileNameExW....................
5900 da 0f 00 00 32 00 00 00 01 16 e5 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 ....2.........._GetModuleInforma
5920 74 69 6f 6e 00 01 b6 03 05 00 00 00 00 00 00 01 dc 0f 00 00 00 00 00 00 e2 0f 00 00 2d 00 00 00 tion........................-...
5940 01 16 e6 00 00 00 10 5f 45 6d 70 74 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 b7 03 05 00 00 00 00 ......._EmptyWorkingSet.........
5960 00 00 01 e4 0f 00 00 00 00 00 00 ea 0f 00 00 2d 00 00 00 01 16 e7 00 00 00 10 5f 51 75 65 72 79 ...............-.........._Query
5980 57 6f 72 6b 69 6e 67 53 65 74 00 01 b8 03 05 00 00 00 00 00 00 01 ec 0f 00 00 00 00 00 00 f2 0f WorkingSet......................
59a0 00 00 39 00 00 00 01 16 e8 00 00 00 1c 5f 49 6e 69 74 69 61 6c 69 7a 65 50 72 6f 63 65 73 73 46 ..9.........._InitializeProcessF
59c0 6f 72 57 73 57 61 74 63 68 00 01 b9 03 05 00 00 00 00 00 00 01 f4 0f 00 00 00 00 00 00 fa 0f 00 orWsWatch.......................
59e0 00 2f 00 00 00 01 16 e9 00 00 00 12 5f 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 00 01 ./.........._GetMappedFileName..
5a00 ba 0e 05 00 00 00 00 00 00 01 fc 0f 00 00 00 00 00 00 02 10 00 00 35 00 00 00 01 16 ea 00 00 00 ......................5.........
5a20 18 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 00 01 bb 0e 05 00 00 ._GetDeviceDriverBaseName.......
5a40 00 00 00 00 01 04 10 00 00 00 00 00 00 0a 10 00 00 35 00 00 00 01 16 eb 00 00 00 18 5f 47 65 74 .................5.........._Get
5a60 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 00 01 bc 0e 05 00 00 00 00 00 00 01 DeviceDriverFileName............
5a80 0c 10 00 00 00 00 00 00 12 10 00 00 30 00 00 00 01 16 ec 00 00 00 13 5f 47 65 74 4d 61 70 70 65 ............0.........._GetMappe
5aa0 64 46 69 6c 65 4e 61 6d 65 41 00 01 bd 0e 05 00 00 00 00 00 00 01 14 10 00 00 00 00 00 00 1a 10 dFileNameA......................
5ac0 00 00 36 00 00 00 01 16 ed 00 00 00 19 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 ..6.........._GetDeviceDriverBas
5ae0 65 4e 61 6d 65 41 00 01 be 0e 05 00 00 00 00 00 00 01 1c 10 00 00 00 00 00 00 22 10 00 00 36 00 eNameA...................."...6.
5b00 00 00 01 16 ee 00 00 00 19 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d ........._GetDeviceDriverFileNam
5b20 65 41 00 01 bf 0e 05 00 00 00 00 00 00 01 24 10 00 00 00 00 00 00 2a 10 00 00 30 00 00 00 01 16 eA............$.......*...0.....
5b40 ef 00 00 00 13 5f 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 c0 0e 05 00 00 00 ....._GetMappedFileNameW........
5b60 00 00 00 01 2c 10 00 00 00 00 00 00 32 10 00 00 36 00 00 00 01 16 f0 00 00 00 19 5f 47 65 74 44 ....,.......2...6.........._GetD
5b80 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 01 c1 0e 05 00 00 00 00 00 00 01 eviceDriverBaseNameW............
5ba0 34 10 00 00 00 00 00 00 3a 10 00 00 36 00 00 00 01 16 f1 00 00 00 19 5f 47 65 74 44 65 76 69 63 4.......:...6.........._GetDevic
5bc0 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 57 00 01 c2 0e 05 00 00 00 00 00 00 01 3c 10 00 00 eDriverFileNameW............<...
5be0 00 00 00 00 42 10 00 00 2f 00 00 00 01 16 f2 00 00 00 12 5f 45 6e 75 6d 44 65 76 69 63 65 44 72 ....B.../.........._EnumDeviceDr
5c00 69 76 65 72 73 00 01 c3 03 05 00 00 00 00 00 00 01 44 10 00 00 00 00 00 00 4a 10 00 00 32 00 00 ivers............D.......J...2..
5c20 00 01 16 f3 00 00 00 15 5f 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 01 c4 ........_GetProcessMemoryInfo...
5c40 03 05 00 00 00 00 00 00 01 4c 10 00 00 00 00 00 00 52 10 00 00 24 00 00 00 01 15 f4 00 00 00 10 .........L.......R...$..........
5c60 43 68 65 63 6b 50 53 41 50 49 4c 6f 61 64 65 64 00 01 c6 0a 05 00 00 00 00 01 00 54 10 00 00 00 CheckPSAPILoaded...........T....
5c80 00 00 00 01 fb 10 00 00 00 01 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ..........S.....................
5ca0 ff .