ofs | hex dump | ascii |
---|
0000 | 50 50 55 31 33 35 02 83 01 00 05 00 80 50 02 00 79 5c 00 00 25 13 3e 94 c4 9a 03 31 63 00 00 00 | PPU135.......P..y\..%.>....1c... |
0020 | 89 01 00 00 00 00 00 00 06 00 00 00 01 01 05 50 73 41 50 49 04 00 00 00 01 55 00 00 00 00 0e 00 | ...............PsAPI.....U...... |
0040 | 00 00 01 02 09 50 73 41 50 49 2e 70 61 73 56 0e 88 41 3a 00 00 00 01 03 06 53 79 73 74 65 6d a6 | .....PsAPI.pasV..A:......System. |
0060 | 75 ae 00 11 84 de 24 d4 af 16 8f 06 6f 62 6a 70 61 73 45 74 cb 9b 42 d9 49 d4 d4 af 16 8f 07 77 | u.....$.....objpasEt..B.I......w |
0080 | 69 6e 64 6f 77 73 ae c8 b7 29 86 0d b1 43 00 00 00 00 0c 00 00 00 01 05 07 50 73 41 50 49 2e 6f | indows...)...C...........PsAPI.o |
00a0 | 02 00 00 00 00 00 00 00 01 06 00 00 00 00 01 07 00 00 00 00 01 08 00 00 00 00 01 09 00 00 00 00 | ................................ |
00c0 | 01 0a 00 00 00 00 01 64 00 00 00 00 01 0b 00 00 00 00 01 52 13 00 00 00 01 13 02 00 00 00 06 53 | .......d...........R...........S |
00e0 | 59 53 54 45 4d 07 57 49 4e 44 4f 57 53 97 12 00 00 01 11 05 02 00 00 00 04 01 00 08 01 00 00 03 | YSTEM.WINDOWS................... |
0100 | 00 00 00 22 05 02 00 00 00 05 01 00 08 01 00 00 03 00 00 00 12 08 01 00 01 03 00 00 00 13 01 00 | ..."............................ |
0120 | 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 09 01 00 08 01 | ................................ |
0140 | 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 01 00 01 03 00 00 00 13 01 00 08 01 00 | ................................ |
0160 | 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 0e 01 00 08 01 00 00 03 | ................................ |
0180 | 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 | ................................ |
01a0 | 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 13 01 00 08 01 00 00 03 00 00 00 | ..3............................. |
01c0 | 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 | ...............................e |
01e0 | 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 19 01 00 08 01 00 00 03 00 00 00 08 08 01 | ................................ |
0200 | 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 | ............................3... |
0220 | 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 1e 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 | ................................ |
0240 | 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 | .........................e...... |
0260 | 03 00 00 00 08 01 00 05 02 00 00 00 24 01 00 08 01 00 00 03 00 00 00 22 08 01 00 00 03 00 00 00 | ............$.........."........ |
0280 | 08 08 01 00 00 03 00 00 00 22 05 02 00 00 00 29 01 00 05 03 00 00 00 07 05 02 00 00 00 2c 01 00 | .........".....).............,.. |
02a0 | 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 | ................................ |
02c0 | 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 31 01 00 08 01 00 00 03 00 | .......................1........ |
02e0 | 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 33 01 00 08 01 00 00 03 00 00 00 12 08 | ...................3............ |
0300 | 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 08 01 00 | .................."............. |
0320 | 05 02 00 00 00 37 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 | .....7.......................... |
0340 | 00 39 01 00 08 01 00 00 03 00 00 00 22 08 01 00 00 03 00 00 00 22 05 02 00 00 00 3d 01 00 05 03 | .9.........."........".....=.... |
0360 | 00 00 00 0d 05 02 00 00 00 40 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 | .........@...................... |
0380 | 05 03 00 00 00 0e 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 44 01 00 08 01 00 00 03 | ........................D....... |
03a0 | 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 | ......................."........ |
03c0 | 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 49 01 00 08 01 00 00 03 00 00 00 | ..3..................I.......... |
03e0 | 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 | ...................."..........e |
0400 | 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 4f 01 00 08 01 00 00 03 00 00 00 08 08 01 | ..................O............. |
0420 | 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 05 | ......"..........3.............. |
0440 | 02 00 00 00 53 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 | ....S..................."....... |
0460 | 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 58 01 00 08 01 00 00 03 00 00 | ...e..................X......... |
0480 | 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 | .........."..........3.......... |
04a0 | 08 01 00 05 02 00 00 00 5c 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 | ........\..................."... |
04c0 | 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 00 61 01 00 08 01 00 | .......e..................a..... |
04e0 | 00 03 00 00 00 12 05 03 00 00 00 00 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 | ................................ |
0500 | 00 08 01 00 05 02 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 | .........e...................... |
0520 | 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 | ................................ |
0540 | 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 08 01 00 | ................................ |
0560 | 00 03 00 00 00 08 05 02 00 00 00 71 01 00 05 03 00 00 00 17 05 02 00 00 00 73 01 00 05 03 00 00 | ...........q.............s...... |
0580 | 00 17 05 02 00 00 00 74 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 03 | .......t........................ |
05a0 | 00 00 00 18 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 | ................................ |
05c0 | 00 01 03 00 00 00 13 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 01 | ................................ |
05e0 | 00 05 02 00 00 00 78 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 08 | ......x......................... |
0600 | 01 00 01 03 00 00 00 13 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 | ................................ |
0620 | 01 00 05 02 00 00 00 7c 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 | .......|........................ |
0640 | 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 | ...................3............ |
0660 | 00 01 00 05 02 00 00 00 81 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 | ................................ |
0680 | 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 | ....................3........... |
06a0 | 01 00 01 00 05 02 00 00 00 86 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 | ................................ |
06c0 | 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 | .....................e.......... |
06e0 | 08 01 00 01 00 05 02 00 00 00 8b 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 | ................................ |
0700 | 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 | ......................3......... |
0720 | 00 08 01 00 01 00 05 02 00 00 00 90 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 | ................................ |
0740 | 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 | .......................3........ |
0760 | 00 00 08 01 00 01 00 05 02 00 00 00 95 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 | ................................ |
0780 | 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 | ........................e....... |
07a0 | 00 00 00 08 01 00 01 00 05 02 00 00 00 9a 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 | ................................ |
07c0 | 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 08 01 00 08 01 00 00 03 00 00 | ................................ |
07e0 | 00 08 01 00 01 00 05 02 00 00 00 9f 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 | ................................ |
0800 | 00 08 01 00 01 00 05 02 00 00 00 a4 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 | ................................ |
0820 | 00 08 01 00 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 | ............"................... |
0840 | 00 a6 01 00 01 00 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 | ................................ |
0860 | 00 aa 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 | ................................ |
0880 | 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 | .."..........3.................. |
08a0 | 00 00 ac 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 | ................................ |
08c0 | 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 | ..."..........3................. |
08e0 | 00 00 00 b1 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 | ................................ |
0900 | 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 | ...."..........e................ |
0920 | 02 00 00 00 b6 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 | .........................."..... |
0940 | 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 bb 01 00 01 00 08 | .....3.......................... |
0960 | 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 08 01 | ................"..........3.... |
0980 | 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 bf 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 | ................................ |
09a0 | 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 00 01 | ......"..........e.............. |
09c0 | 00 05 02 00 00 00 c3 01 00 01 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 | ............................"... |
09e0 | 01 00 00 03 00 00 00 33 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 c7 01 00 01 | .......3........................ |
0a00 | 00 08 01 00 00 03 00 00 00 08 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 33 01 00 | .................."..........3.. |
0a20 | 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 cb 01 00 01 00 08 01 00 00 03 00 00 00 08 | ................................ |
0a40 | 08 01 00 00 03 00 00 00 22 01 00 08 01 00 00 03 00 00 00 65 01 00 08 01 00 00 03 00 00 00 08 01 | ........"..........e............ |
0a60 | 00 01 00 05 02 00 00 00 cf 01 00 01 00 08 01 00 00 03 00 00 00 12 05 03 00 00 00 00 01 00 08 01 | ................................ |
0a80 | 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 01 00 05 02 00 00 00 d3 01 00 01 00 | ................................ |
0aa0 | 08 01 00 00 03 00 00 00 12 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 18 01 00 08 01 00 00 | ................................ |
0ac0 | 03 00 00 00 08 01 00 01 00 05 02 00 00 00 d7 05 03 00 00 00 00 05 03 00 00 00 01 05 03 00 00 00 | ................................ |
0ae0 | 02 05 03 00 00 00 03 05 03 00 00 00 04 05 03 00 00 00 03 05 03 00 00 00 05 05 03 00 00 00 06 05 | ................................ |
0b00 | 03 00 00 00 05 05 03 00 00 00 07 05 03 00 00 00 07 05 03 00 00 00 08 05 03 00 00 00 07 05 03 00 | ................................ |
0b20 | 00 00 08 05 03 00 00 00 09 05 03 00 00 00 0a 05 03 00 00 00 0b 05 03 00 00 00 0c 05 03 00 00 00 | ................................ |
0b40 | 0d 05 03 00 00 00 0d 05 03 00 00 00 0e 05 03 00 00 00 0d 05 03 00 00 00 0e 05 03 00 00 00 0f 05 | ................................ |
0b60 | 03 00 00 00 10 05 03 00 00 00 11 05 03 00 00 00 10 05 03 00 00 00 12 05 03 00 00 00 13 05 03 00 | ................................ |
0b80 | 00 00 12 05 03 00 00 00 14 05 03 00 00 00 15 05 03 00 00 00 14 05 03 00 00 00 16 05 03 00 00 00 | ................................ |
0ba0 | 17 05 03 00 00 00 17 05 03 00 00 00 18 05 03 00 00 00 17 05 03 00 00 00 19 05 03 00 00 00 1a 05 | ................................ |
0bc0 | 03 00 00 00 1b 05 03 00 00 00 1c 05 03 00 00 00 1d 05 03 00 00 00 1e 05 03 00 00 00 1f 05 03 00 | ................................ |
0be0 | 00 00 20 05 03 00 00 00 21 05 03 00 00 00 22 05 03 00 00 00 23 05 03 00 00 00 24 05 03 00 00 00 | ........!.....".....#.....$..... |
0c00 | 25 05 03 00 00 00 26 05 03 00 00 00 27 05 03 00 00 00 28 05 03 00 00 00 29 05 03 00 00 00 2a 05 | %.....&.....'.....(.....).....*. |
0c20 | 03 00 00 00 2b 05 03 00 00 00 2c 05 03 00 00 00 2d 05 03 00 00 00 2e 05 03 00 00 00 2f 05 03 00 | ....+.....,.....-.........../... |
0c40 | 00 00 30 05 03 00 00 00 31 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 | ..0.....1....................... |
0c60 | 02 00 00 00 fb 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 00 fb 08 01 00 00 03 00 00 00 12 01 | ................................ |
0c80 | 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 02 08 01 00 00 03 00 00 00 12 01 00 05 02 00 | ................................ |
0ca0 | 00 01 02 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 09 08 | ................................ |
0cc0 | 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 09 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 | ................................ |
0ce0 | 00 00 00 08 01 00 05 02 00 00 01 10 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 10 08 01 00 | ................................ |
0d00 | 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 17 08 01 00 00 03 00 00 | ................................ |
0d20 | 00 08 01 00 05 02 00 00 01 17 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 | ................................ |
0d40 | 05 02 00 00 01 1e 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 1e 08 01 00 00 03 00 00 00 08 | ................................ |
0d60 | 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 25 08 01 00 00 03 00 00 00 08 01 00 05 02 | ..................%............. |
0d80 | 00 00 01 25 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 2c | ...%..........................., |
0da0 | 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 2c 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 | ................,............... |
0dc0 | 03 00 00 00 12 01 00 05 02 00 00 01 33 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 33 08 01 | ............3................3.. |
0de0 | 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 37 08 01 00 00 03 00 | .........................7...... |
0e00 | 00 00 12 01 00 05 02 00 00 01 37 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 | ..........7..................... |
0e20 | 00 05 02 00 00 01 3d 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 3d 08 01 00 00 03 00 00 00 | ......=................=........ |
0e40 | 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 41 08 01 00 00 03 00 00 00 12 01 00 05 | ...................A............ |
0e60 | 02 00 00 01 41 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 | ....A........................... |
0e80 | 48 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 48 08 01 00 00 03 00 00 00 08 01 00 08 01 00 | H................H.............. |
0ea0 | 00 03 00 00 00 08 01 00 05 02 00 00 01 4f 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 4f 08 | .............O................O. |
0ec0 | 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 56 08 01 00 00 03 | ..........................V..... |
0ee0 | 00 00 00 08 01 00 05 02 00 00 01 56 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 | ...........V.................... |
0f00 | 01 00 05 02 00 00 01 5c 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 5c 08 01 00 00 03 00 00 | .......\................\....... |
0f20 | 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 62 08 01 00 00 03 00 00 00 08 01 00 | ....................b........... |
0f40 | 05 02 00 00 01 62 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 | .....b.......................... |
0f60 | 01 68 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 68 08 01 00 00 03 00 00 00 08 01 00 08 01 | .h................h............. |
0f80 | 00 00 03 00 00 00 08 01 00 05 02 00 00 01 6e 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 6e | ..............n................n |
0fa0 | 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 74 08 01 00 00 | ...........................t.... |
0fc0 | 03 00 00 00 08 01 00 05 02 00 00 01 74 08 01 00 00 03 00 00 00 08 01 00 08 01 00 00 03 00 00 00 | ............t................... |
0fe0 | 08 01 00 05 02 00 00 01 7a 08 01 00 00 03 00 00 00 08 01 00 05 02 00 00 01 7a 08 01 00 00 03 00 | ........z................z...... |
1000 | 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 80 08 01 00 00 03 00 00 00 12 01 | ................................ |
1020 | 00 05 02 00 00 01 80 08 01 00 00 03 00 00 00 12 01 00 08 01 00 00 03 00 00 00 12 01 00 05 02 00 | ................................ |
1040 | 00 01 86 08 01 00 00 03 00 00 00 12 01 00 05 02 00 00 01 86 01 00 01 00 08 01 00 00 03 00 00 00 | ................................ |
1060 | 03 01 00 05 02 00 00 00 db 01 00 01 00 08 01 00 00 03 00 00 00 0c 01 00 05 02 00 00 00 f4 05 03 | ................................ |
1080 | 00 00 00 32 08 01 00 00 03 00 00 00 08 01 00 05 03 00 00 00 01 01 00 05 03 00 00 00 02 01 00 05 | ...2............................ |
10a0 | 03 00 00 00 03 01 00 05 03 00 00 00 05 01 00 05 03 00 00 00 03 01 00 05 03 00 00 00 05 01 00 05 | ................................ |
10c0 | 03 00 00 00 04 01 00 05 03 00 00 00 06 01 00 05 03 00 00 00 09 01 00 05 03 00 00 00 0a 01 00 05 | ................................ |
10e0 | 03 00 00 00 0b 01 00 05 03 00 00 00 0c 01 00 05 03 00 00 00 10 01 00 05 03 00 00 00 12 01 00 05 | ................................ |
1100 | 03 00 00 00 14 01 00 05 03 00 00 00 10 01 00 05 03 00 00 00 12 01 00 05 03 00 00 00 14 01 00 05 | ................................ |
1120 | 03 00 00 00 11 01 00 05 03 00 00 00 13 01 00 05 03 00 00 00 15 01 00 05 03 00 00 00 16 01 00 05 | ................................ |
1140 | 03 00 00 00 1a 01 00 05 03 00 00 00 33 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 | ............3................... |
1160 | 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 | ................................ |
1180 | 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 | ................................ |
11a0 | 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 | ................................ |
11c0 | 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 | ................................ |
11e0 | 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 | ................................ |
1200 | 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 | ................................ |
1220 | 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 | ................................ |
1240 | 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 | ................................ |
1260 | 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 | ................................ |
1280 | 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 | ................................ |
12a0 | 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 | ................................ |
12c0 | 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 | ................................ |
12e0 | 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 | ................................ |
1300 | 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 | ................................ |
1320 | 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 | ................................ |
1340 | 00 00 03 00 00 00 09 01 00 01 00 08 01 00 00 03 00 00 00 14 08 01 00 00 03 00 00 00 09 08 01 00 | ................................ |
1360 | 00 03 00 00 00 0c 01 00 08 01 00 00 03 00 00 00 0c 01 00 05 02 00 00 00 f5 08 01 00 00 03 00 00 | ................................ |
1380 | 00 0c 01 00 05 02 00 00 00 f5 00 00 00 00 01 fc 04 00 00 00 01 5b 00 00 00 00 04 00 00 00 01 f8 | .....................[.......... |
13a0 | 32 00 00 00 16 00 00 00 01 29 00 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 08 00 00 00 00 00 | 2........)............<......... |
13c0 | 38 00 00 00 01 33 01 00 00 00 11 00 00 00 00 00 00 00 3c 00 00 00 19 00 00 00 00 00 0a 00 00 10 | 8....3............<............. |
13e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 | ................................ |
1400 | 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 | ...[............................ |
1420 | 00 00 2c 00 00 00 02 22 06 00 00 00 0b 6c 70 69 64 50 72 6f 63 65 73 73 00 01 0e 1e 05 00 00 00 | ..,....".....lpidProcess........ |
1440 | 00 00 01 00 22 00 00 00 00 00 00 00 2b 00 00 00 0a 00 00 02 23 00 00 00 02 22 07 00 00 00 02 63 | ....".......+.......#....".....c |
1460 | 62 00 01 0e 34 05 00 00 00 00 00 01 00 2d 00 00 00 00 00 00 00 36 00 00 00 14 00 00 02 29 00 00 | b...4........-.......6.......).. |
1480 | 00 02 22 08 00 00 00 08 63 62 4e 65 65 64 65 64 00 01 0e 43 05 00 00 00 00 02 01 00 38 00 00 00 | ..".....cbNeeded...C........8... |
14a0 | 00 00 00 00 41 00 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 02 00 00 00 43 00 00 00 | ....A.............8....3....C... |
14c0 | 00 00 00 00 3c 00 00 00 4b 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....<...K....................... |
14e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 | .....................[.......... |
1500 | 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 0a 00 00 00 08 68 | ....................)....".....h |
1520 | 50 72 6f 63 65 73 73 00 01 0f 23 05 00 00 00 00 00 01 00 54 00 00 00 00 00 00 00 5d 00 00 00 0a | Process...#........T.......].... |
1540 | 00 00 02 2a 00 00 00 02 22 0b 00 00 00 09 6c 70 68 4d 6f 64 75 6c 65 00 01 0f 36 05 00 00 00 00 | ...*....".....lphModule...6..... |
1560 | 00 01 00 5f 00 00 00 00 00 00 00 68 00 00 00 14 00 00 02 23 00 00 00 02 22 0c 00 00 00 02 63 62 | ..._.......h.......#....".....cb |
1580 | 00 01 0f 4a 05 00 00 00 00 00 01 00 6a 00 00 00 00 00 00 00 73 00 00 00 1e 00 00 02 2b 00 00 00 | ...J........j.......s.......+... |
15a0 | 02 22 0d 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 10 09 05 00 00 00 00 02 01 00 75 00 00 | .".....lpcbNeeded............u.. |
15c0 | 00 00 00 00 00 7e 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 03 00 00 00 80 00 00 | .....~...(.........8....3....... |
15e0 | 00 00 00 00 00 3c 00 00 00 88 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....<.......................... |
1600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 | ......................[......... |
1620 | f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 0f 00 00 00 08 | .....................)...."..... |
1640 | 68 50 72 6f 63 65 73 73 00 01 11 23 05 00 00 00 00 00 01 00 91 00 00 00 00 00 00 00 9a 00 00 00 | hProcess...#.................... |
1660 | 0a 00 00 02 28 00 00 00 02 22 10 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 11 36 05 00 00 00 00 00 | ....(....".....hModule...6...... |
1680 | 01 00 9c 00 00 00 00 00 00 00 a5 00 00 00 14 00 00 02 2b 00 00 00 02 22 11 00 00 00 0a 6c 70 42 | ..................+....".....lpB |
16a0 | 61 73 65 4e 61 6d 65 00 01 12 05 05 00 00 00 00 00 01 00 a7 00 00 00 00 00 00 00 b0 00 00 00 1e | aseName......................... |
16c0 | 00 00 02 26 00 00 00 02 22 12 00 00 00 05 6e 53 69 7a 65 00 01 12 1c 05 00 00 00 00 00 01 00 b2 | ...&....".....nSize............. |
16e0 | 00 00 00 00 00 00 00 bb 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 04 00 00 00 bd | ...........(.........8....3..... |
1700 | 00 00 00 00 00 00 00 3c 00 00 00 c5 00 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 | .......<........................ |
1720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 | ........................[....... |
1740 | 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 14 00 00 | .......................)...."... |
1760 | 00 08 68 50 72 6f 63 65 73 73 00 01 13 23 05 00 00 00 00 00 01 00 ce 00 00 00 00 00 00 00 d7 00 | ..hProcess...#.................. |
1780 | 00 00 0a 00 00 02 28 00 00 00 02 22 15 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 13 36 05 00 00 00 | ......(....".....hModule...6.... |
17a0 | 00 00 01 00 d9 00 00 00 00 00 00 00 e2 00 00 00 14 00 00 02 2b 00 00 00 02 22 16 00 00 00 0a 6c | ....................+....".....l |
17c0 | 70 42 61 73 65 4e 61 6d 65 00 01 14 05 05 00 00 00 00 00 01 00 e4 00 00 00 00 00 00 00 ed 00 00 | pBaseName....................... |
17e0 | 00 1e 00 00 02 26 00 00 00 02 22 17 00 00 00 05 6e 53 69 7a 65 00 01 14 1c 05 00 00 00 00 00 01 | .....&....".....nSize........... |
1800 | 00 ef 00 00 00 00 00 00 00 f8 00 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 05 00 00 | .............(.........8....3... |
1820 | 00 fa 00 00 00 00 00 00 00 3c 00 00 00 02 01 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 | .........<...................... |
1840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 | ..........................[..... |
1860 | 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 1a | .........................)....". |
1880 | 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 16 25 05 00 00 00 00 00 01 00 0b 01 00 00 00 00 00 00 | ....hProcess...%................ |
18a0 | 14 01 00 00 0a 00 00 02 28 00 00 00 02 22 1b 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 16 38 05 00 | ........(....".....hModule...8.. |
18c0 | 00 00 00 00 01 00 16 01 00 00 00 00 00 00 1f 01 00 00 14 00 00 02 2b 00 00 00 02 22 1c 00 00 00 | ......................+....".... |
18e0 | 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 17 05 05 00 00 00 00 00 01 00 21 01 00 00 00 00 00 00 2a | .lpFilename............!.......* |
1900 | 01 00 00 1e 00 00 02 26 00 00 00 02 22 1d 00 00 00 05 6e 53 69 7a 65 00 01 17 1c 05 00 00 00 00 | .......&....".....nSize......... |
1920 | 00 01 00 2c 01 00 00 00 00 00 00 35 01 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 06 | ...,.......5...(.........8....3. |
1940 | 00 00 00 37 01 00 00 00 00 00 00 3c 00 00 00 3f 01 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 | ...7.......<...?................ |
1960 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 | ............................[... |
1980 | 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 | ...........................).... |
19a0 | 22 1f 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 18 25 05 00 00 00 00 00 01 00 48 01 00 00 00 00 | ".....hProcess...%........H..... |
19c0 | 00 00 51 01 00 00 0a 00 00 02 28 00 00 00 02 22 20 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 18 38 | ..Q.......(....".....hModule...8 |
19e0 | 05 00 00 00 00 00 01 00 53 01 00 00 00 00 00 00 5c 01 00 00 14 00 00 02 2b 00 00 00 02 22 21 00 | ........S.......\.......+...."!. |
1a00 | 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 19 05 05 00 00 00 00 00 01 00 5e 01 00 00 00 00 00 | ...lpFilename............^...... |
1a20 | 00 67 01 00 00 1e 00 00 02 26 00 00 00 02 22 22 00 00 00 05 6e 53 69 7a 65 00 01 19 1c 05 00 00 | .g.......&....""....nSize....... |
1a40 | 00 00 00 01 00 69 01 00 00 00 00 00 00 72 01 00 00 28 00 00 02 00 00 00 00 02 fb 2a 00 00 00 01 | .....i.......r...(.........*.... |
1a60 | 2d 07 00 00 00 74 01 00 00 00 00 00 00 3c 00 00 00 0b 5f 4d 4f 44 55 4c 45 49 4e 46 4f 00 00 00 | -....t.......<...._MODULEINFO... |
1a80 | 00 01 04 01 01 0c 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 00 00 00 02 5b 00 00 00 00 04 00 00 | ................[.......[....... |
1aa0 | 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 28 00 00 00 02 1c 25 00 00 | .......................(.....%.. |
1ac0 | 00 0b 6c 70 42 61 73 65 4f 66 44 6c 6c 00 01 1e 05 05 00 00 00 00 00 00 00 7c 01 00 00 00 00 00 | ..lpBaseOfDll............|...... |
1ae0 | 00 00 00 00 00 28 00 00 00 02 1c 26 00 00 00 0b 53 69 7a 65 4f 66 49 6d 61 67 65 00 01 1f 05 05 | .....(.....&....SizeOfImage..... |
1b00 | 00 00 00 00 00 00 00 85 01 00 00 00 00 00 00 04 00 00 00 27 00 00 00 02 1c 27 00 00 00 0a 45 6e | ...................'.....'....En |
1b20 | 74 72 79 50 6f 69 6e 74 00 01 20 05 05 00 00 00 00 00 00 00 8e 01 00 00 00 00 00 00 08 00 00 00 | tryPoint........................ |
1b40 | 00 00 00 00 02 fb 16 00 00 00 01 29 08 00 00 00 97 01 00 00 00 00 00 00 3c 00 00 00 9f 01 00 00 | ...........)............<....... |
1b60 | 00 00 38 00 00 00 01 33 09 00 00 00 a5 01 00 00 00 00 00 00 3c 00 00 00 ad 01 00 00 00 00 0a 00 | ..8....3............<........... |
1b80 | 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 | ................................ |
1ba0 | 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa | .....[.......................... |
1bc0 | 04 00 00 00 29 00 00 00 02 22 2d 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 29 25 05 00 00 00 00 | ....)...."-....hProcess..)%..... |
1be0 | 00 01 00 b6 01 00 00 00 00 00 00 bf 01 00 00 0a 00 00 02 28 00 00 00 02 22 2e 00 00 00 07 68 4d | ...................(....".....hM |
1c00 | 6f 64 75 6c 65 00 01 29 38 05 00 00 00 00 00 01 00 c1 01 00 00 00 00 00 00 ca 01 00 00 14 00 00 | odule..)8....................... |
1c20 | 02 2a 00 00 00 02 22 2f 00 00 00 09 6c 70 6d 6f 64 69 6e 66 6f 00 01 2a 05 05 00 00 00 00 00 01 | .*...."/....lpmodinfo..*........ |
1c40 | 00 cc 01 00 00 00 00 00 00 d2 01 00 00 1e 00 00 02 23 00 00 00 02 22 30 00 00 00 02 63 62 00 01 | .................#...."0....cb.. |
1c60 | 2a 1e 05 00 00 00 00 00 01 00 d4 01 00 00 00 00 00 00 dd 01 00 00 28 00 00 02 00 00 00 00 02 fb | *.....................(......... |
1c80 | 38 00 00 00 01 33 0a 00 00 00 df 01 00 00 00 00 00 00 3c 00 00 00 e7 01 00 00 00 00 0a 00 00 10 | 8....3............<............. |
1ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 | ................................ |
1cc0 | 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 | ...[............................ |
1ce0 | 00 00 29 00 00 00 02 22 32 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2b 20 05 00 00 00 00 00 01 | ..)...."2....hProcess..+........ |
1d00 | 00 f0 01 00 00 00 00 00 00 f9 01 00 00 0a 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 0b 00 00 | .......................8....3... |
1d20 | 00 fb 01 00 00 00 00 00 00 3c 00 00 00 03 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 | .........<...................... |
1d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 | ..........................[..... |
1d60 | 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 29 00 00 00 02 22 34 | .........................)...."4 |
1d80 | 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2c 20 05 00 00 00 00 00 01 00 0c 02 00 00 00 00 00 00 | ....hProcess..,................. |
1da0 | 15 02 00 00 0a 00 00 02 23 00 00 00 02 22 35 00 00 00 02 70 76 00 01 2c 33 05 00 00 00 00 00 01 | ........#...."5....pv..,3....... |
1dc0 | 00 17 02 00 00 00 00 00 00 20 02 00 00 14 00 00 02 23 00 00 00 02 22 36 00 00 00 02 63 62 00 01 | .................#...."6....cb.. |
1de0 | 2c 40 05 00 00 00 00 00 01 00 22 02 00 00 00 00 00 00 2b 02 00 00 1e 00 00 02 00 00 00 00 02 fb | ,@........".......+............. |
1e00 | 38 00 00 00 01 33 0c 00 00 00 2d 02 00 00 00 00 00 00 3c 00 00 00 35 02 00 00 00 00 0a 00 00 10 | 8....3....-.......<...5......... |
1e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 | ................................ |
1e40 | 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 | ...[............................ |
1e60 | 00 00 29 00 00 00 02 22 38 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 2d 2c 05 00 00 00 00 00 01 | ..)...."8....hProcess..-,....... |
1e80 | 00 3e 02 00 00 00 00 00 00 47 02 00 00 0a 00 00 02 00 00 00 00 02 fb 3a 00 00 00 01 2d 0d 00 00 | .>.......G.............:....-... |
1ea0 | 00 49 02 00 00 00 00 00 00 3c 00 00 00 1b 5f 50 53 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e | .I.......<...._PSAPI_WS_WATCH_IN |
1ec0 | 46 4f 52 4d 41 54 49 4f 4e 00 00 00 00 01 04 01 01 08 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 | FORMATION...................[... |
1ee0 | 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 02 | ....[........................... |
1f00 | 00 00 00 27 00 00 00 02 1c 3a 00 00 00 0a 46 61 75 6c 74 69 6e 67 50 63 00 01 31 05 05 00 00 00 | ...'.....:....FaultingPc..1..... |
1f20 | 00 00 00 00 51 02 00 00 00 00 00 00 00 00 00 00 27 00 00 00 02 1c 3b 00 00 00 0a 46 61 75 6c 74 | ....Q...........'.....;....Fault |
1f40 | 69 6e 67 56 61 00 01 32 05 05 00 00 00 00 00 00 00 5a 02 00 00 00 00 00 00 04 00 00 00 00 00 00 | ingVa..2.........Z.............. |
1f60 | 00 02 fb 16 00 00 00 01 29 0e 00 00 00 63 02 00 00 00 00 00 00 3c 00 00 00 6b 02 00 00 00 00 38 | ........)....c.......<...k.....8 |
1f80 | 00 00 00 01 33 0f 00 00 00 71 02 00 00 00 00 00 00 3c 00 00 00 79 02 00 00 00 00 0a 00 00 10 00 | ....3....q.......<...y.......... |
1fa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 | ................................ |
1fc0 | 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 | ..[............................. |
1fe0 | 00 29 00 00 00 02 22 41 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 3b 1d 05 00 00 00 00 00 01 00 | .)...."A....hProcess..;......... |
2000 | 82 02 00 00 00 00 00 00 8b 02 00 00 0a 00 00 02 2c 00 00 00 02 22 42 00 00 00 0b 6c 70 57 61 74 | ................,...."B....lpWat |
2020 | 63 68 49 6e 66 6f 00 01 3b 30 05 00 00 00 00 00 01 00 8d 02 00 00 00 00 00 00 93 02 00 00 14 00 | chInfo..;0...................... |
2040 | 00 02 23 00 00 00 02 22 43 00 00 00 02 63 62 00 01 3c 05 05 00 00 00 00 00 01 00 95 02 00 00 00 | ..#...."C....cb..<.............. |
2060 | 00 00 00 9e 02 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 10 00 00 00 a0 02 00 00 00 | .................8....3......... |
2080 | 00 00 00 3c 00 00 00 a8 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...<............................ |
20a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 | ....................[........... |
20c0 | 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 45 00 00 00 08 68 50 | ...................)...."E....hP |
20e0 | 72 6f 63 65 73 73 00 01 3e 23 05 00 00 00 00 00 01 00 b1 02 00 00 00 00 00 00 ba 02 00 00 0a 00 | rocess..>#...................... |
2100 | 00 02 24 00 00 00 02 22 46 00 00 00 03 6c 70 76 00 01 3e 36 05 00 00 00 00 00 01 00 bc 02 00 00 | ..$...."F....lpv..>6............ |
2120 | 00 00 00 00 c5 02 00 00 14 00 00 02 2b 00 00 00 02 22 47 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d | ............+...."G....lpFilenam |
2140 | 65 00 01 3f 05 05 00 00 00 00 00 01 00 c7 02 00 00 00 00 00 00 d0 02 00 00 1e 00 00 02 26 00 00 | e..?.........................&.. |
2160 | 00 02 22 48 00 00 00 05 6e 53 69 7a 65 00 01 3f 1c 05 00 00 00 00 00 01 00 d2 02 00 00 00 00 00 | .."H....nSize..?................ |
2180 | 00 db 02 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 11 00 00 00 dd 02 00 00 00 00 00 | .....(.........8....3........... |
21a0 | 00 3c 00 00 00 e5 02 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .<.............................. |
21c0 | 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 | ..................[............. |
21e0 | 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 4a 00 00 00 08 68 50 72 6f | .................)...."J....hPro |
2200 | 63 65 73 73 00 01 40 23 05 00 00 00 00 00 01 00 ee 02 00 00 00 00 00 00 f7 02 00 00 0a 00 00 02 | cess..@#........................ |
2220 | 24 00 00 00 02 22 4b 00 00 00 03 6c 70 76 00 01 40 36 05 00 00 00 00 00 01 00 f9 02 00 00 00 00 | $...."K....lpv..@6.............. |
2240 | 00 00 02 03 00 00 14 00 00 02 2b 00 00 00 02 22 4c 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 | ..........+...."L....lpFilename. |
2260 | 01 41 05 05 00 00 00 00 00 01 00 04 03 00 00 00 00 00 00 0d 03 00 00 1e 00 00 02 26 00 00 00 02 | .A.........................&.... |
2280 | 22 4d 00 00 00 05 6e 53 69 7a 65 00 01 41 1c 05 00 00 00 00 00 01 00 0f 03 00 00 00 00 00 00 18 | "M....nSize..A.................. |
22a0 | 03 00 00 28 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 12 00 00 00 1a 03 00 00 00 00 00 00 3c | ...(.........8....3............< |
22c0 | 00 00 00 22 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..."............................ |
22e0 | 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 | ................[............... |
2300 | 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 50 00 00 00 09 49 6d 61 67 65 42 | ...............*...."P....ImageB |
2320 | 61 73 65 00 01 43 29 05 00 00 00 00 00 01 00 2b 03 00 00 00 00 00 00 34 03 00 00 0a 00 00 02 2b | ase..C)........+.......4.......+ |
2340 | 00 00 00 02 22 51 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 43 3d 05 00 00 00 00 00 01 00 | ...."Q....lpBaseName..C=........ |
2360 | 36 03 00 00 00 00 00 00 3f 03 00 00 14 00 00 02 26 00 00 00 02 22 52 00 00 00 05 6e 53 69 7a 65 | 6.......?.......&...."R....nSize |
2380 | 00 01 44 05 05 00 00 00 00 00 01 00 41 03 00 00 00 00 00 00 4a 03 00 00 1e 00 00 02 00 00 00 00 | ..D.........A.......J........... |
23a0 | 02 fb 38 00 00 00 01 33 13 00 00 00 4c 03 00 00 00 00 00 00 3c 00 00 00 54 03 00 00 00 00 0a 00 | ..8....3....L.......<...T....... |
23c0 | 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 | ................................ |
23e0 | 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa | .....[.......................... |
2400 | 03 00 00 00 2a 00 00 00 02 22 54 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 45 29 05 00 00 00 | ....*...."T....ImageBase..E).... |
2420 | 00 00 01 00 5d 03 00 00 00 00 00 00 66 03 00 00 0a 00 00 02 2b 00 00 00 02 22 55 00 00 00 0a 6c | ....].......f.......+...."U....l |
2440 | 70 42 61 73 65 4e 61 6d 65 00 01 45 3d 05 00 00 00 00 00 01 00 68 03 00 00 00 00 00 00 71 03 00 | pBaseName..E=........h.......q.. |
2460 | 00 14 00 00 02 26 00 00 00 02 22 56 00 00 00 05 6e 53 69 7a 65 00 01 46 05 05 00 00 00 00 00 01 | .....&...."V....nSize..F........ |
2480 | 00 73 03 00 00 00 00 00 00 7c 03 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 14 00 00 | .s.......|.............8....3... |
24a0 | 00 7e 03 00 00 00 00 00 00 3c 00 00 00 86 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 | .~.......<...................... |
24c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 | ..........................[..... |
24e0 | 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 59 | .........................*...."Y |
2500 | 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 48 29 05 00 00 00 00 00 01 00 8f 03 00 00 00 00 00 | ....ImageBase..H)............... |
2520 | 00 98 03 00 00 0a 00 00 02 2b 00 00 00 02 22 5a 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 | .........+...."Z....lpFileName.. |
2540 | 48 3d 05 00 00 00 00 00 01 00 9a 03 00 00 00 00 00 00 a3 03 00 00 14 00 00 02 26 00 00 00 02 22 | H=........................&...." |
2560 | 5b 00 00 00 05 6e 53 69 7a 65 00 01 49 05 05 00 00 00 00 00 01 00 a5 03 00 00 00 00 00 00 ae 03 | [....nSize..I................... |
2580 | 00 00 1e 00 00 02 00 00 00 00 02 fb 38 00 00 00 01 33 15 00 00 00 b0 03 00 00 00 00 00 00 3c 00 | ............8....3............<. |
25a0 | 00 00 b8 03 00 00 00 00 0a 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
25c0 | 00 00 00 00 00 00 00 00 00 02 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 | ...............[................ |
25e0 | 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 5d 00 00 00 09 49 6d 61 67 65 42 61 | ..............*...."]....ImageBa |
2600 | 73 65 00 01 4a 29 05 00 00 00 00 00 01 00 c1 03 00 00 00 00 00 00 ca 03 00 00 0a 00 00 02 2b 00 | se..J)........................+. |
2620 | 00 00 02 22 5e 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 4a 3d 05 00 00 00 00 00 01 00 cc | ..."^....lpFileName..J=......... |
2640 | 03 00 00 00 00 00 00 d5 03 00 00 14 00 00 02 26 00 00 00 02 22 5f 00 00 00 05 6e 53 69 7a 65 00 | ...............&...."_....nSize. |
2660 | 01 4b 05 05 00 00 00 00 00 01 00 d7 03 00 00 00 00 00 00 e0 03 00 00 1e 00 00 02 00 00 00 00 02 | .K.............................. |
2680 | fb 38 00 00 00 01 33 16 00 00 00 e2 03 00 00 00 00 00 00 3c 00 00 00 ea 03 00 00 00 00 0a 00 00 | .8....3............<............ |
26a0 | 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 | ................................ |
26c0 | 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 | ....[........................... |
26e0 | 00 00 00 2c 00 00 00 02 22 62 00 00 00 0b 6c 70 49 6d 61 67 65 42 61 73 65 00 01 4e 22 05 00 00 | ...,...."b....lpImageBase..N"... |
2700 | 00 00 00 01 00 f3 03 00 00 00 00 00 00 f9 03 00 00 0a 00 00 02 23 00 00 00 02 22 63 00 00 00 02 | .....................#...."c.... |
2720 | 63 62 00 01 4e 39 05 00 00 00 00 00 01 00 fb 03 00 00 00 00 00 00 04 04 00 00 14 00 00 02 2b 00 | cb..N9........................+. |
2740 | 00 00 02 22 64 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 4f 09 05 00 00 00 00 02 01 00 06 | ..."d....lpcbNeeded..O.......... |
2760 | 04 00 00 00 00 00 00 0f 04 00 00 1e 00 00 02 00 00 00 00 02 fb 37 00 00 00 01 2d 17 00 00 00 11 | .....................7....-..... |
2780 | 04 00 00 00 00 00 00 3c 00 00 00 18 5f 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e | .......<...._PROCESS_MEMORY_COUN |
27a0 | 54 45 52 53 00 00 00 00 01 04 01 01 28 00 00 00 00 00 02 00 00 00 02 5b 04 01 04 00 00 00 02 5b | TERS........(..........[.......[ |
27c0 | 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 0a 00 00 00 1f 00 | ................................ |
27e0 | 00 00 02 1c 66 00 00 00 02 63 62 00 01 53 05 05 00 00 00 00 00 00 00 19 04 00 00 00 00 00 00 00 | ....f....cb..S.................. |
2800 | 00 00 00 2b 00 00 00 02 1c 67 00 00 00 0e 50 61 67 65 46 61 75 6c 74 43 6f 75 6e 74 00 01 54 05 | ...+.....g....PageFaultCount..T. |
2820 | 05 00 00 00 00 00 00 00 22 04 00 00 00 00 00 00 04 00 00 00 2f 00 00 00 02 1c 68 00 00 00 12 50 | ........".........../.....h....P |
2840 | 65 61 6b 57 6f 72 6b 69 6e 67 53 65 74 53 69 7a 65 00 01 55 05 05 00 00 00 00 00 00 00 2b 04 00 | eakWorkingSetSize..U.........+.. |
2860 | 00 00 00 00 00 08 00 00 00 2b 00 00 00 02 1c 69 00 00 00 0e 57 6f 72 6b 69 6e 67 53 65 74 53 69 | .........+.....i....WorkingSetSi |
2880 | 7a 65 00 01 56 05 05 00 00 00 00 00 00 00 34 04 00 00 00 00 00 00 0c 00 00 00 34 00 00 00 02 1c | ze..V.........4...........4..... |
28a0 | 6a 00 00 00 17 51 75 6f 74 61 50 65 61 6b 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 57 05 | j....QuotaPeakPagedPoolUsage..W. |
28c0 | 05 00 00 00 00 00 00 00 3d 04 00 00 00 00 00 00 10 00 00 00 30 00 00 00 02 1c 6b 00 00 00 13 51 | ........=...........0.....k....Q |
28e0 | 75 6f 74 61 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 58 05 05 00 00 00 00 00 00 00 46 04 | uotaPagedPoolUsage..X.........F. |
2900 | 00 00 00 00 00 00 14 00 00 00 37 00 00 00 02 1c 6c 00 00 00 1a 51 75 6f 74 61 50 65 61 6b 4e 6f | ..........7.....l....QuotaPeakNo |
2920 | 6e 50 61 67 65 64 50 6f 6f 6c 55 73 61 67 65 00 01 59 05 05 00 00 00 00 00 00 00 4f 04 00 00 00 | nPagedPoolUsage..Y.........O.... |
2940 | 00 00 00 18 00 00 00 33 00 00 00 02 1c 6d 00 00 00 16 51 75 6f 74 61 4e 6f 6e 50 61 67 65 64 50 | .......3.....m....QuotaNonPagedP |
2960 | 6f 6f 6c 55 73 61 67 65 00 01 5a 05 05 00 00 00 00 00 00 00 58 04 00 00 00 00 00 00 1c 00 00 00 | oolUsage..Z.........X........... |
2980 | 2a 00 00 00 02 1c 6e 00 00 00 0d 50 61 67 65 66 69 6c 65 55 73 61 67 65 00 01 5b 05 05 00 00 00 | *.....n....PagefileUsage..[..... |
29a0 | 00 00 00 00 61 04 00 00 00 00 00 00 20 00 00 00 2e 00 00 00 02 1c 6f 00 00 00 11 50 65 61 6b 50 | ....a.................o....PeakP |
29c0 | 61 67 65 66 69 6c 65 55 73 61 67 65 00 01 5c 05 05 00 00 00 00 00 00 00 6a 04 00 00 00 00 00 00 | agefileUsage..\.........j....... |
29e0 | 24 00 00 00 00 00 00 00 02 fb 16 00 00 00 01 29 18 00 00 00 73 04 00 00 00 00 00 00 3c 00 00 00 | $..............)....s.......<... |
2a00 | 7b 04 00 00 00 00 16 00 00 00 01 29 19 00 00 00 81 04 00 00 00 00 00 00 3c 00 00 00 89 04 00 00 | {..........)............<....... |
2a20 | 00 00 38 00 00 00 01 33 1a 00 00 00 8f 04 00 00 00 00 00 00 3c 00 00 00 97 04 00 00 00 00 0a 00 | ..8....3............<........... |
2a40 | 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 | ................................ |
2a60 | 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa | .....[.......................... |
2a80 | 03 00 00 00 28 00 00 00 02 22 75 00 00 00 07 50 72 6f 63 65 73 73 00 01 65 25 05 00 00 00 00 00 | ....(...."u....Process..e%...... |
2aa0 | 01 00 a0 04 00 00 00 00 00 00 a9 04 00 00 0a 00 00 02 2f 00 00 00 02 22 76 00 00 00 0e 70 70 73 | ................../...."v....pps |
2ac0 | 6d 65 6d 43 6f 75 6e 74 65 72 73 00 01 66 05 05 00 00 00 00 00 01 00 ab 04 00 00 00 00 00 00 b1 | memCounters..f.................. |
2ae0 | 04 00 00 14 00 00 02 23 00 00 00 02 22 77 00 00 00 02 63 62 00 01 66 2f 05 00 00 00 00 00 01 00 | .......#...."w....cb..f/........ |
2b00 | b3 04 00 00 00 00 00 00 bc 04 00 00 1e 00 00 02 00 00 00 00 02 fb 86 00 00 00 01 2b 1b 00 00 00 | ...........................+.... |
2b20 | be 04 00 00 00 00 00 00 00 00 00 00 c2 04 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 | ................................ |
2b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 ec 04 00 00 ee 04 00 00 00 01 | ................................ |
2b60 | ee 0a 05 00 00 00 00 00 00 01 37 50 53 41 50 49 5f 45 4e 55 4d 50 52 4f 43 45 53 53 45 53 24 4c | ..........7PSAPI_ENUMPROCESSES$L |
2b80 | 50 44 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f | PDWORD$LONGWORD$LONGWORD$$LONGBO |
2ba0 | 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 | OL.....[........................ |
2bc0 | 02 fa 03 00 00 00 2c 00 00 00 02 22 79 00 00 00 0b 6c 70 69 64 50 72 6f 63 65 73 73 00 01 69 18 | ......,...."y....lpidProcess..i. |
2be0 | 05 00 00 00 00 00 01 00 cb 04 00 00 00 00 00 00 d4 04 00 00 0a 00 00 03 23 00 00 00 02 22 7a 00 | ........................#...."z. |
2c00 | 00 00 02 63 62 00 01 69 2e 05 00 00 00 00 00 01 00 d6 04 00 00 00 00 00 00 df 04 00 00 14 00 00 | ...cb..i........................ |
2c20 | 03 29 00 00 00 02 22 7b 00 00 00 08 63 62 4e 65 65 64 65 64 00 01 69 3d 05 00 00 00 00 02 04 01 | .)...."{....cbNeeded..i=........ |
2c40 | e1 04 00 00 00 00 00 00 ea 04 00 00 1e 00 00 07 00 00 00 00 02 fb 94 00 00 00 01 2b 1c 00 00 00 | ...........................+.... |
2c60 | f4 04 00 00 00 00 00 00 00 00 00 00 f8 04 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 | ................................ |
2c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 2d 05 00 00 2f 05 00 00 00 01 | ......................-.../..... |
2ca0 | f5 0a 05 00 00 00 00 00 00 01 45 50 53 41 50 49 5f 45 4e 55 4d 50 52 4f 43 45 53 53 4d 4f 44 55 | ..........EPSAPI_ENUMPROCESSMODU |
2cc0 | 4c 45 53 24 4c 4f 4e 47 57 4f 52 44 24 4c 50 44 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f | LES$LONGWORD$LPDWORD$LONGWORD$LO |
2ce0 | 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 | NGWORD$$LONGBOOL.....[.......... |
2d00 | 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 7d 00 00 00 08 68 | ....................)...."}....h |
2d20 | 50 72 6f 63 65 73 73 00 01 6b 1d 05 00 00 00 00 00 01 00 01 05 00 00 00 00 00 00 0a 05 00 00 0a | Process..k...................... |
2d40 | 00 00 03 2a 00 00 00 02 22 7e 00 00 00 09 6c 70 68 4d 6f 64 75 6c 65 00 01 6b 30 05 00 00 00 00 | ...*...."~....lphModule..k0..... |
2d60 | 00 01 00 0c 05 00 00 00 00 00 00 15 05 00 00 14 00 00 03 23 00 00 00 02 22 7f 00 00 00 02 63 62 | ...................#....".....cb |
2d80 | 00 01 6b 44 05 00 00 00 00 00 01 00 17 05 00 00 00 00 00 00 20 05 00 00 1e 00 00 03 2b 00 00 00 | ..kD........................+... |
2da0 | 02 22 80 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 64 00 01 6c 07 05 00 00 00 00 02 04 01 22 05 00 | .".....lpcbNeeded..l.........".. |
2dc0 | 00 00 00 00 00 2b 05 00 00 28 00 00 07 00 00 00 00 02 fb 91 00 00 00 01 2b 1d 00 00 00 35 05 00 | .....+...(..............+....5.. |
2de0 | 00 00 00 00 00 00 00 00 00 39 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 | .........9...................... |
2e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 6e 05 00 00 70 05 00 00 00 01 fd 0a 05 | ...................n...p........ |
2e20 | 00 00 00 00 00 00 01 42 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 24 | .......BPSAPI_GETMODULEBASENAME$ |
2e40 | 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 | LONGWORD$LONGWORD$PCHAR$LONGWORD |
2e60 | 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 | $$LONGWORD.....[................ |
2e80 | 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 82 00 00 00 08 68 50 72 6f 63 65 73 | ..............)....".....hProces |
2ea0 | 73 00 01 6e 1c 05 00 00 00 00 00 01 00 42 05 00 00 00 00 00 00 4b 05 00 00 0a 00 00 03 28 00 00 | s..n.........B.......K.......(.. |
2ec0 | 00 02 22 83 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 6e 2f 05 00 00 00 00 00 01 00 4d 05 00 00 00 | ..".....hModule..n/........M.... |
2ee0 | 00 00 00 56 05 00 00 14 00 00 03 2b 00 00 00 02 22 84 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 | ...V.......+....".....lpBaseName |
2f00 | 00 01 6f 03 05 00 00 00 00 00 01 00 58 05 00 00 00 00 00 00 61 05 00 00 1e 00 00 03 26 00 00 00 | ..o.........X.......a.......&... |
2f20 | 02 22 85 00 00 00 05 6e 53 69 7a 65 00 01 6f 16 05 00 00 00 00 00 01 00 63 05 00 00 00 00 00 00 | .".....nSize..o.........c....... |
2f40 | 6c 05 00 00 28 00 00 03 00 00 00 00 02 fb 93 00 00 00 01 2b 1e 00 00 00 76 05 00 00 00 00 00 00 | l...(..............+....v....... |
2f60 | 00 00 00 00 7a 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....z........................... |
2f80 | 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 af 05 00 00 b1 05 00 00 04 01 05 01 0a 05 00 00 00 00 | ................................ |
2fa0 | 00 00 01 43 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 41 24 4c 4f 4e | ...CPSAPI_GETMODULEBASENAMEA$LON |
2fc0 | 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c | GWORD$LONGWORD$PCHAR$LONGWORD$$L |
2fe0 | 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 | ONGWORD.....[................... |
3000 | f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 87 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 | ...........)....".....hProcess.. |
3020 | 71 1d 05 00 00 00 00 00 01 00 83 05 00 00 00 00 00 00 8c 05 00 00 0a 00 00 03 28 00 00 00 02 22 | q.........................(...." |
3040 | 88 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 71 30 05 00 00 00 00 00 01 00 8e 05 00 00 00 00 00 00 | .....hModule..q0................ |
3060 | 97 05 00 00 14 00 00 03 2b 00 00 00 02 22 89 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 72 | ........+....".....lpBaseName..r |
3080 | 03 05 00 00 00 00 00 01 00 99 05 00 00 00 00 00 00 a2 05 00 00 1e 00 00 03 26 00 00 00 02 22 8a | .........................&....". |
30a0 | 00 00 00 05 6e 53 69 7a 65 00 01 72 1a 05 00 00 00 00 00 01 00 a4 05 00 00 00 00 00 00 ad 05 00 | ....nSize..r.................... |
30c0 | 00 28 00 00 03 00 00 00 00 02 fb 97 00 00 00 01 2b 1f 00 00 00 b7 05 00 00 00 00 00 00 00 00 00 | .(..............+............... |
30e0 | 00 bb 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3100 | 00 00 00 00 00 00 00 00 ff ff 02 f0 05 00 00 f2 05 00 00 04 01 0d 01 0a 05 00 00 00 00 00 00 01 | ................................ |
3120 | 47 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 42 41 53 45 4e 41 4d 45 57 24 4c 4f 4e 47 57 4f | GPSAPI_GETMODULEBASENAMEW$LONGWO |
3140 | 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 | RD$LONGWORD$PWIDECHAR$LONGWORD$$ |
3160 | 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 | LONGWORD.....[.................. |
3180 | 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 8c 00 00 00 08 68 50 72 6f 63 65 73 73 00 | ............)....".....hProcess. |
31a0 | 01 74 1d 05 00 00 00 00 00 01 00 c4 05 00 00 00 00 00 00 cd 05 00 00 0a 00 00 03 28 00 00 00 02 | .t.........................(.... |
31c0 | 22 8d 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 74 30 05 00 00 00 00 00 01 00 cf 05 00 00 00 00 00 | ".....hModule..t0............... |
31e0 | 00 d8 05 00 00 14 00 00 03 2b 00 00 00 02 22 8e 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 | .........+....".....lpBaseName.. |
3200 | 75 03 05 00 00 00 00 00 01 00 da 05 00 00 00 00 00 00 e3 05 00 00 1e 00 00 03 26 00 00 00 02 22 | u.........................&...." |
3220 | 8f 00 00 00 05 6e 53 69 7a 65 00 01 75 1a 05 00 00 00 00 00 01 00 e5 05 00 00 00 00 00 00 ee 05 | .....nSize..u................... |
3240 | 00 00 28 00 00 03 00 00 00 00 02 fb 94 00 00 00 01 2b 20 00 00 00 f8 05 00 00 00 00 00 00 00 00 | ..(..............+.............. |
3260 | 00 00 fc 05 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3280 | 00 00 00 00 00 00 00 00 00 ff ff 02 31 06 00 00 33 06 00 00 04 01 15 01 0a 05 00 00 00 00 00 00 | ............1...3............... |
32a0 | 01 44 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 24 4c 4f 4e 47 | .DPSAPI_GETMODULEFILENAMEEX$LONG |
32c0 | 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f | WORD$LONGWORD$PCHAR$LONGWORD$$LO |
32e0 | 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 | NGWORD.....[.................... |
3300 | 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 91 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 77 | ..........)....".....hProcess..w |
3320 | 1e 05 00 00 00 00 00 01 00 05 06 00 00 00 00 00 00 0e 06 00 00 0a 00 00 03 28 00 00 00 02 22 92 | .........................(....". |
3340 | 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 77 31 05 00 00 00 00 00 01 00 10 06 00 00 00 00 00 00 19 | ....hModule..w1................. |
3360 | 06 00 00 14 00 00 03 2b 00 00 00 02 22 93 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 78 03 | .......+....".....lpFilename..x. |
3380 | 05 00 00 00 00 00 01 00 1b 06 00 00 00 00 00 00 24 06 00 00 1e 00 00 03 26 00 00 00 02 22 94 00 | ................$.......&....".. |
33a0 | 00 00 05 6e 53 69 7a 65 00 01 78 16 05 00 00 00 00 00 01 00 26 06 00 00 00 00 00 00 2f 06 00 00 | ...nSize..x.........&......./... |
33c0 | 28 00 00 03 00 00 00 00 02 fb 95 00 00 00 01 2b 21 00 00 00 39 06 00 00 00 00 00 00 00 00 00 00 | (..............+!...9........... |
33e0 | 3d 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | =............................... |
3400 | 00 00 00 00 00 00 00 ff ff 02 72 06 00 00 74 06 00 00 04 01 1d 01 0a 05 00 00 00 00 00 00 01 45 | ..........r...t................E |
3420 | 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 41 24 4c 4f 4e 47 57 | PSAPI_GETMODULEFILENAMEEXA$LONGW |
3440 | 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e | ORD$LONGWORD$PCHAR$LONGWORD$$LON |
3460 | 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 | GWORD.....[..................... |
3480 | 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 96 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 7a 1f | .........)....".....hProcess..z. |
34a0 | 05 00 00 00 00 00 01 00 46 06 00 00 00 00 00 00 4f 06 00 00 0a 00 00 03 28 00 00 00 02 22 97 00 | ........F.......O.......(....".. |
34c0 | 00 00 07 68 4d 6f 64 75 6c 65 00 01 7a 32 05 00 00 00 00 00 01 00 51 06 00 00 00 00 00 00 5a 06 | ...hModule..z2........Q.......Z. |
34e0 | 00 00 14 00 00 03 2b 00 00 00 02 22 98 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 7b 03 05 | ......+....".....lpFilename..{.. |
3500 | 00 00 00 00 00 01 00 5c 06 00 00 00 00 00 00 65 06 00 00 1e 00 00 03 26 00 00 00 02 22 99 00 00 | .......\.......e.......&...."... |
3520 | 00 05 6e 53 69 7a 65 00 01 7b 1a 05 00 00 00 00 00 01 00 67 06 00 00 00 00 00 00 70 06 00 00 28 | ..nSize..{.........g.......p...( |
3540 | 00 00 03 00 00 00 00 02 fb 99 00 00 00 01 2b 22 00 00 00 7a 06 00 00 00 00 00 00 00 00 00 00 7e | ..............+"...z...........~ |
3560 | 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3580 | 00 00 00 00 00 00 ff ff 02 b3 06 00 00 b5 06 00 00 04 01 25 01 0a 05 00 00 00 00 00 00 01 49 50 | ...................%..........IP |
35a0 | 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 46 49 4c 45 4e 41 4d 45 45 58 57 24 4c 4f 4e 47 57 4f | SAPI_GETMODULEFILENAMEEXW$LONGWO |
35c0 | 52 44 24 4c 4f 4e 47 57 4f 52 44 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 | RD$LONGWORD$PWIDECHAR$LONGWORD$$ |
35e0 | 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 | LONGWORD.....[.................. |
3600 | 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 9b 00 00 00 08 68 50 72 6f 63 65 73 73 00 | ............)....".....hProcess. |
3620 | 01 7d 1f 05 00 00 00 00 00 01 00 87 06 00 00 00 00 00 00 90 06 00 00 0a 00 00 03 28 00 00 00 02 | .}.........................(.... |
3640 | 22 9c 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 7d 32 05 00 00 00 00 00 01 00 92 06 00 00 00 00 00 | ".....hModule..}2............... |
3660 | 00 9b 06 00 00 14 00 00 03 2b 00 00 00 02 22 9d 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 | .........+....".....lpFilename.. |
3680 | 7e 03 05 00 00 00 00 00 01 00 9d 06 00 00 00 00 00 00 a6 06 00 00 1e 00 00 03 26 00 00 00 02 22 | ~.........................&...." |
36a0 | 9e 00 00 00 05 6e 53 69 7a 65 00 01 7e 1a 05 00 00 00 00 00 01 00 a8 06 00 00 00 00 00 00 b1 06 | .....nSize..~................... |
36c0 | 00 00 28 00 00 03 00 00 00 00 02 fb 9c 00 00 00 01 2b 23 00 00 00 bb 06 00 00 00 00 00 00 00 00 | ..(..............+#............. |
36e0 | 00 00 bf 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3700 | 00 00 00 00 00 00 00 00 00 ff ff 02 f1 06 00 00 f3 06 00 00 04 01 2d 01 0a 05 00 00 00 00 00 00 | ......................-......... |
3720 | 01 4c 50 53 41 50 49 5f 47 45 54 4d 4f 44 55 4c 45 49 4e 46 4f 52 4d 41 54 49 4f 4e 24 4c 4f 4e | .LPSAPI_GETMODULEINFORMATION$LON |
3740 | 47 57 4f 52 44 24 4c 4f 4e 47 57 4f 52 44 24 4c 50 4d 4f 44 55 4c 45 49 4e 46 4f 24 4c 4f 4e 47 | GWORD$LONGWORD$LPMODULEINFO$LONG |
3760 | 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 | WORD$$LONGBOOL.....[............ |
3780 | 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 a0 00 00 00 08 68 50 72 | ..................)....".....hPr |
37a0 | 6f 63 65 73 73 00 01 80 1f 05 00 00 00 00 00 01 00 c8 06 00 00 00 00 00 00 d1 06 00 00 0a 00 00 | ocess........................... |
37c0 | 03 28 00 00 00 02 22 a1 00 00 00 07 68 4d 6f 64 75 6c 65 00 01 80 32 05 00 00 00 00 00 01 00 d3 | .(....".....hModule...2......... |
37e0 | 06 00 00 00 00 00 00 dc 06 00 00 14 00 00 03 2a 00 00 00 02 22 a2 00 00 00 09 6c 70 6d 6f 64 69 | ...............*....".....lpmodi |
3800 | 6e 66 6f 00 01 81 03 05 00 00 00 00 00 01 00 de 06 00 00 00 00 00 00 e4 06 00 00 1e 00 00 03 23 | nfo............................# |
3820 | 00 00 00 02 22 a3 00 00 00 02 63 62 00 01 81 1c 05 00 00 00 00 00 01 00 e6 06 00 00 00 00 00 00 | ....".....cb.................... |
3840 | ef 06 00 00 28 00 00 03 00 00 00 00 02 fb 78 00 00 00 01 2b 24 00 00 00 f9 06 00 00 00 00 00 00 | ....(.........x....+$........... |
3860 | 00 00 00 00 fd 06 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3880 | 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 11 07 00 00 13 07 00 00 04 01 35 01 0a 05 00 00 00 00 | ........................5....... |
38a0 | 00 00 01 28 50 53 41 50 49 5f 45 4d 50 54 59 57 4f 52 4b 49 4e 47 53 45 54 24 4c 4f 4e 47 57 4f | ...(PSAPI_EMPTYWORKINGSET$LONGWO |
38c0 | 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 | RD$$LONGBOOL.....[.............. |
38e0 | 00 00 00 00 02 f9 04 00 00 00 02 fa 01 00 00 00 29 00 00 00 02 22 a5 00 00 00 08 68 50 72 6f 63 | ................)....".....hProc |
3900 | 65 73 73 00 01 83 1a 05 00 00 00 00 00 01 00 06 07 00 00 00 00 00 00 0f 07 00 00 0a 00 00 03 00 | ess............................. |
3920 | 00 00 00 02 fb 89 00 00 00 01 2b 25 00 00 00 19 07 00 00 00 00 00 00 00 00 00 00 1d 07 00 00 00 | ..........+%.................... |
3940 | 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3960 | 00 00 ff ff 02 47 07 00 00 49 07 00 00 04 01 3c 01 0a 05 00 00 00 00 00 00 01 39 50 53 41 50 49 | .....G...I.....<..........9PSAPI |
3980 | 5f 51 55 45 52 59 57 4f 52 4b 49 4e 47 53 45 54 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 | _QUERYWORKINGSET$LONGWORD$POINTE |
39a0 | 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 | R$LONGWORD$$LONGBOOL.....[...... |
39c0 | 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 29 00 00 00 02 22 a7 00 | ........................)....".. |
39e0 | 00 00 08 68 50 72 6f 63 65 73 73 00 01 85 1a 05 00 00 00 00 00 01 00 26 07 00 00 00 00 00 00 2f | ...hProcess............&......./ |
3a00 | 07 00 00 0a 00 00 03 23 00 00 00 02 22 a8 00 00 00 02 70 76 00 01 85 2d 05 00 00 00 00 00 01 00 | .......#....".....pv...-........ |
3a20 | 31 07 00 00 00 00 00 00 3a 07 00 00 14 00 00 03 23 00 00 00 02 22 a9 00 00 00 02 63 62 00 01 85 | 1.......:.......#....".....cb... |
3a40 | 3a 05 00 00 00 00 00 01 00 3c 07 00 00 00 00 00 00 45 07 00 00 1e 00 00 03 00 00 00 00 02 fb 84 | :........<.......E.............. |
3a60 | 00 00 00 01 2b 26 00 00 00 4f 07 00 00 00 00 00 00 00 00 00 00 53 07 00 00 00 08 08 00 00 00 08 | ....+&...O...........S.......... |
3a80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 67 | ...............................g |
3aa0 | 07 00 00 69 07 00 00 04 01 43 01 0a 05 00 00 00 00 00 00 01 34 50 53 41 50 49 5f 49 4e 49 54 49 | ...i.....C..........4PSAPI_INITI |
3ac0 | 41 4c 49 5a 45 50 52 4f 43 45 53 53 46 4f 52 57 53 57 41 54 43 48 24 4c 4f 4e 47 57 4f 52 44 24 | ALIZEPROCESSFORWSWATCH$LONGWORD$ |
3ae0 | 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 | $LONGBOOL.....[................. |
3b00 | 00 02 f9 04 00 00 00 02 fa 01 00 00 00 29 00 00 00 02 22 ab 00 00 00 08 68 50 72 6f 63 65 73 73 | .............)....".....hProcess |
3b20 | 00 01 87 26 05 00 00 00 00 00 01 00 5c 07 00 00 00 00 00 00 65 07 00 00 0a 00 00 03 00 00 00 00 | ...&........\.......e........... |
3b40 | 02 fb 91 00 00 00 01 2b 27 00 00 00 6f 07 00 00 00 00 00 00 00 00 00 00 73 07 00 00 00 08 08 00 | .......+'...o...........s....... |
3b60 | 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff | ................................ |
3b80 | ff 02 a8 07 00 00 aa 07 00 00 04 01 4a 01 0a 05 00 00 00 00 00 00 01 41 50 53 41 50 49 5f 47 45 | ............J..........APSAPI_GE |
3ba0 | 54 4d 41 50 50 45 44 46 49 4c 45 4e 41 4d 45 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 | TMAPPEDFILENAME$LONGWORD$POINTER |
3bc0 | 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 | $PCHAR$LONGWORD$$LONGWORD.....[. |
3be0 | 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 | .............................).. |
3c00 | 00 02 22 ad 00 00 00 08 68 50 72 6f 63 65 73 73 00 01 89 1c 05 00 00 00 00 00 01 00 7c 07 00 00 | ..".....hProcess............|... |
3c20 | 00 00 00 00 85 07 00 00 0a 00 00 03 24 00 00 00 02 22 ae 00 00 00 03 6c 70 76 00 01 89 2f 05 00 | ............$....".....lpv.../.. |
3c40 | 00 00 00 00 01 00 87 07 00 00 00 00 00 00 90 07 00 00 14 00 00 03 2b 00 00 00 02 22 af 00 00 00 | ......................+....".... |
3c60 | 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 01 8a 03 05 00 00 00 00 00 01 00 92 07 00 00 00 00 00 00 9b | .lpFilename..................... |
3c80 | 07 00 00 1e 00 00 03 26 00 00 00 02 22 b0 00 00 00 05 6e 53 69 7a 65 00 01 8a 16 05 00 00 00 00 | .......&....".....nSize......... |
3ca0 | 00 01 00 9d 07 00 00 00 00 00 00 a6 07 00 00 28 00 00 03 00 00 00 00 02 fb 92 00 00 00 01 2b 28 | ...............(..............+( |
3cc0 | 00 00 00 b0 07 00 00 00 00 00 00 00 00 00 00 b4 07 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 | ................................ |
3ce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 e9 07 00 00 eb 07 00 | ................................ |
3d00 | 00 04 01 52 01 0a 05 00 00 00 00 00 00 01 42 50 53 41 50 49 5f 47 45 54 4d 41 50 50 45 44 46 49 | ...R..........BPSAPI_GETMAPPEDFI |
3d20 | 4c 45 4e 41 4d 45 41 24 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c | LENAMEA$LONGWORD$POINTER$PCHAR$L |
3d40 | 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 | ONGWORD$$LONGWORD.....[......... |
3d60 | f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 b2 00 00 00 08 | .....................)...."..... |
3d80 | 68 50 72 6f 63 65 73 73 00 01 8c 1d 05 00 00 00 00 00 01 00 bd 07 00 00 00 00 00 00 c6 07 00 00 | hProcess........................ |
3da0 | 0a 00 00 03 24 00 00 00 02 22 b3 00 00 00 03 6c 70 76 00 01 8c 30 05 00 00 00 00 00 01 00 c8 07 | ....$....".....lpv...0.......... |
3dc0 | 00 00 00 00 00 00 d1 07 00 00 14 00 00 03 2b 00 00 00 02 22 b4 00 00 00 0a 6c 70 46 69 6c 65 6e | ..............+....".....lpFilen |
3de0 | 61 6d 65 00 01 8d 03 05 00 00 00 00 00 01 00 d3 07 00 00 00 00 00 00 dc 07 00 00 1e 00 00 03 26 | ame............................& |
3e00 | 00 00 00 02 22 b5 00 00 00 05 6e 53 69 7a 65 00 01 8d 1a 05 00 00 00 00 00 01 00 de 07 00 00 00 | ....".....nSize................. |
3e20 | 00 00 00 e7 07 00 00 28 00 00 03 00 00 00 00 02 fb 96 00 00 00 01 2b 29 00 00 00 f1 07 00 00 00 | .......(..............+)........ |
3e40 | 00 00 00 00 00 00 00 f5 07 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
3e60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 2a 08 00 00 2c 08 00 00 04 01 5a 01 0a 05 00 | .................*...,.....Z.... |
3e80 | 00 00 00 00 00 01 46 50 53 41 50 49 5f 47 45 54 4d 41 50 50 45 44 46 49 4c 45 4e 41 4d 45 57 24 | ......FPSAPI_GETMAPPEDFILENAMEW$ |
3ea0 | 4c 4f 4e 47 57 4f 52 44 24 50 4f 49 4e 54 45 52 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 | LONGWORD$POINTER$PWIDECHAR$LONGW |
3ec0 | 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 | ORD$$LONGWORD.....[............. |
3ee0 | 00 00 00 00 00 02 f9 04 00 00 00 02 fa 04 00 00 00 29 00 00 00 02 22 b7 00 00 00 08 68 50 72 6f | .................)....".....hPro |
3f00 | 63 65 73 73 00 01 8f 1d 05 00 00 00 00 00 01 00 fe 07 00 00 00 00 00 00 07 08 00 00 0a 00 00 03 | cess............................ |
3f20 | 24 00 00 00 02 22 b8 00 00 00 03 6c 70 76 00 01 8f 30 05 00 00 00 00 00 01 00 09 08 00 00 00 00 | $....".....lpv...0.............. |
3f40 | 00 00 12 08 00 00 14 00 00 03 2b 00 00 00 02 22 b9 00 00 00 0a 6c 70 46 69 6c 65 6e 61 6d 65 00 | ..........+....".....lpFilename. |
3f60 | 01 90 03 05 00 00 00 00 00 01 00 14 08 00 00 00 00 00 00 1d 08 00 00 1e 00 00 03 26 00 00 00 02 | ...........................&.... |
3f80 | 22 ba 00 00 00 05 6e 53 69 7a 65 00 01 90 1a 05 00 00 00 00 00 01 00 1f 08 00 00 00 00 00 00 28 | ".....nSize....................( |
3fa0 | 08 00 00 28 00 00 03 00 00 00 00 02 fb 8e 00 00 00 01 2b 2a 00 00 00 32 08 00 00 00 00 00 00 00 | ...(..............+*...2........ |
3fc0 | 00 00 00 36 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...6............................ |
3fe0 | 00 00 00 00 00 00 00 00 00 00 ff ff 02 60 08 00 00 62 08 00 00 04 01 62 01 0a 05 00 00 00 00 00 | .............`...b.....b........ |
4000 | 00 01 3e 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 42 41 53 45 4e 41 4d 45 | ..>PSAPI_GETDEVICEDRIVERBASENAME |
4020 | 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 | $POINTER$PCHAR$LONGWORD$$LONGWOR |
4040 | 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 | D.....[......................... |
4060 | fa 03 00 00 00 2a 00 00 00 02 22 bc 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 92 22 05 00 00 | .....*....".....ImageBase..."... |
4080 | 00 00 00 01 00 3f 08 00 00 00 00 00 00 48 08 00 00 0a 00 00 03 2b 00 00 00 02 22 bd 00 00 00 0a | .....?.......H.......+...."..... |
40a0 | 6c 70 42 61 73 65 4e 61 6d 65 00 01 92 36 05 00 00 00 00 00 01 00 4a 08 00 00 00 00 00 00 53 08 | lpBaseName...6........J.......S. |
40c0 | 00 00 14 00 00 03 26 00 00 00 02 22 be 00 00 00 05 6e 53 69 7a 65 00 01 93 03 05 00 00 00 00 00 | ......&....".....nSize.......... |
40e0 | 01 00 55 08 00 00 00 00 00 00 5e 08 00 00 1e 00 00 03 00 00 00 00 02 fb 8f 00 00 00 01 2b 2b 00 | ..U.......^..................++. |
4100 | 00 00 68 08 00 00 00 00 00 00 00 00 00 00 6c 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 | ..h...........l................. |
4120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 96 08 00 00 98 08 00 00 | ................................ |
4140 | 04 01 6a 01 0a 05 00 00 00 00 00 00 01 3f 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 | ..j..........?PSAPI_GETDEVICEDRI |
4160 | 56 45 52 42 41 53 45 4e 41 4d 45 41 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 | VERBASENAMEA$POINTER$PCHAR$LONGW |
4180 | 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 | ORD$$LONGWORD.....[............. |
41a0 | 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 c0 00 00 00 09 49 6d 61 67 | .................*....".....Imag |
41c0 | 65 42 61 73 65 00 01 95 23 05 00 00 00 00 00 01 00 75 08 00 00 00 00 00 00 7e 08 00 00 0a 00 00 | eBase...#........u.......~...... |
41e0 | 03 2b 00 00 00 02 22 c1 00 00 00 0a 6c 70 42 61 73 65 4e 61 6d 65 00 01 95 37 05 00 00 00 00 00 | .+....".....lpBaseName...7...... |
4200 | 01 00 80 08 00 00 00 00 00 00 89 08 00 00 14 00 00 03 26 00 00 00 02 22 c2 00 00 00 05 6e 53 69 | ..................&....".....nSi |
4220 | 7a 65 00 01 96 03 05 00 00 00 00 00 01 00 8b 08 00 00 00 00 00 00 94 08 00 00 1e 00 00 03 00 00 | ze.............................. |
4240 | 00 00 02 fb 93 00 00 00 01 2b 2c 00 00 00 9e 08 00 00 00 00 00 00 00 00 00 00 a2 08 00 00 00 08 | .........+,..................... |
4260 | 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
4280 | 00 ff ff 02 cc 08 00 00 ce 08 00 00 04 01 72 01 0a 05 00 00 00 00 00 00 01 43 50 53 41 50 49 5f | ..............r..........CPSAPI_ |
42a0 | 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 42 41 53 45 4e 41 4d 45 57 24 50 4f 49 4e 54 45 52 | GETDEVICEDRIVERBASENAMEW$POINTER |
42c0 | 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 | $PWIDECHAR$LONGWORD$$LONGWORD... |
42e0 | 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 | ..[............................. |
4300 | 00 2a 00 00 00 02 22 c4 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 98 23 05 00 00 00 00 00 01 | .*....".....ImageBase...#....... |
4320 | 00 ab 08 00 00 00 00 00 00 b4 08 00 00 0a 00 00 03 2b 00 00 00 02 22 c5 00 00 00 0a 6c 70 42 61 | .................+....".....lpBa |
4340 | 73 65 4e 61 6d 65 00 01 98 37 05 00 00 00 00 00 01 00 b6 08 00 00 00 00 00 00 bf 08 00 00 14 00 | seName...7...................... |
4360 | 00 03 26 00 00 00 02 22 c6 00 00 00 05 6e 53 69 7a 65 00 01 99 03 05 00 00 00 00 00 01 00 c1 08 | ..&....".....nSize.............. |
4380 | 00 00 00 00 00 00 ca 08 00 00 1e 00 00 03 00 00 00 00 02 fb 8e 00 00 00 01 2b 2d 00 00 00 d4 08 | .........................+-..... |
43a0 | 00 00 00 00 00 00 00 00 00 00 d8 08 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
43c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 02 09 00 00 04 09 00 00 04 01 7a 01 | ..............................z. |
43e0 | 0a 05 00 00 00 00 00 00 01 3e 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 46 | .........>PSAPI_GETDEVICEDRIVERF |
4400 | 49 4c 45 4e 41 4d 45 24 50 4f 49 4e 54 45 52 24 50 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 | ILENAME$POINTER$PCHAR$LONGWORD$$ |
4420 | 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 | LONGWORD.....[.................. |
4440 | 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 c8 00 00 00 09 49 6d 61 67 65 42 61 73 65 | ............*....".....ImageBase |
4460 | 00 01 9b 22 05 00 00 00 00 00 01 00 e1 08 00 00 00 00 00 00 ea 08 00 00 0a 00 00 03 2b 00 00 00 | ..."........................+... |
4480 | 02 22 c9 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 9b 36 05 00 00 00 00 00 01 00 ec 08 00 | .".....lpFileName...6........... |
44a0 | 00 00 00 00 00 f5 08 00 00 14 00 00 03 26 00 00 00 02 22 ca 00 00 00 05 6e 53 69 7a 65 00 01 9c | .............&....".....nSize... |
44c0 | 03 05 00 00 00 00 00 01 00 f7 08 00 00 00 00 00 00 00 09 00 00 1e 00 00 03 00 00 00 00 02 fb 8f | ................................ |
44e0 | 00 00 00 01 2b 2e 00 00 00 0a 09 00 00 00 00 00 00 00 00 00 00 0e 09 00 00 00 08 08 00 00 00 08 | ....+........................... |
4500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 38 | ...............................8 |
4520 | 09 00 00 3a 09 00 00 04 01 82 01 0a 05 00 00 00 00 00 00 01 3f 50 53 41 50 49 5f 47 45 54 44 45 | ...:................?PSAPI_GETDE |
4540 | 56 49 43 45 44 52 49 56 45 52 46 49 4c 45 4e 41 4d 45 41 24 50 4f 49 4e 54 45 52 24 50 43 48 41 | VICEDRIVERFILENAMEA$POINTER$PCHA |
4560 | 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 | R$LONGWORD$$LONGWORD.....[...... |
4580 | 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 cc 00 | ........................*....".. |
45a0 | 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 9e 23 05 00 00 00 00 00 01 00 17 09 00 00 00 00 00 00 | ...ImageBase...#................ |
45c0 | 20 09 00 00 0a 00 00 03 2b 00 00 00 02 22 cd 00 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 9e | ........+....".....lpFileName... |
45e0 | 37 05 00 00 00 00 00 01 00 22 09 00 00 00 00 00 00 2b 09 00 00 14 00 00 03 26 00 00 00 02 22 ce | 7........".......+.......&....". |
4600 | 00 00 00 05 6e 53 69 7a 65 00 01 9f 03 05 00 00 00 00 00 01 00 2d 09 00 00 00 00 00 00 36 09 00 | ....nSize............-.......6.. |
4620 | 00 1e 00 00 03 00 00 00 00 02 fb 93 00 00 00 01 2b 2f 00 00 00 40 09 00 00 00 00 00 00 00 00 00 | ................+/...@.......... |
4640 | 00 44 09 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .D.............................. |
4660 | 00 00 00 00 00 00 00 00 ff ff 02 6e 09 00 00 70 09 00 00 04 01 8a 01 0a 05 00 00 00 00 00 00 01 | ...........n...p................ |
4680 | 43 50 53 41 50 49 5f 47 45 54 44 45 56 49 43 45 44 52 49 56 45 52 46 49 4c 45 4e 41 4d 45 57 24 | CPSAPI_GETDEVICEDRIVERFILENAMEW$ |
46a0 | 50 4f 49 4e 54 45 52 24 50 57 49 44 45 43 48 41 52 24 4c 4f 4e 47 57 4f 52 44 24 24 4c 4f 4e 47 | POINTER$PWIDECHAR$LONGWORD$$LONG |
46c0 | 57 4f 52 44 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 02 f9 04 00 | WORD.....[...................... |
46e0 | 00 00 02 fa 03 00 00 00 2a 00 00 00 02 22 d0 00 00 00 09 49 6d 61 67 65 42 61 73 65 00 01 a1 23 | ........*....".....ImageBase...# |
4700 | 05 00 00 00 00 00 01 00 4d 09 00 00 00 00 00 00 56 09 00 00 0a 00 00 03 2b 00 00 00 02 22 d1 00 | ........M.......V.......+....".. |
4720 | 00 00 0a 6c 70 46 69 6c 65 4e 61 6d 65 00 01 a1 37 05 00 00 00 00 00 01 00 58 09 00 00 00 00 00 | ...lpFileName...7........X...... |
4740 | 00 61 09 00 00 14 00 00 03 26 00 00 00 02 22 d2 00 00 00 05 6e 53 69 7a 65 00 01 a2 03 05 00 00 | .a.......&....".....nSize....... |
4760 | 00 00 00 01 00 63 09 00 00 00 00 00 00 6c 09 00 00 1e 00 00 03 00 00 00 00 02 fb 8c 00 00 00 01 | .....c.......l.................. |
4780 | 2b 30 00 00 00 76 09 00 00 00 00 00 00 00 00 00 00 7a 09 00 00 00 08 08 00 00 00 08 00 00 00 00 | +0...v...........z.............. |
47a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 a1 09 00 00 a3 | ................................ |
47c0 | 09 00 00 04 01 92 01 0a 05 00 00 00 00 00 00 01 3c 50 53 41 50 49 5f 45 4e 55 4d 44 45 56 49 43 | ................<PSAPI_ENUMDEVIC |
47e0 | 45 44 52 49 56 45 52 53 24 50 50 4f 49 4e 54 45 52 24 4c 4f 4e 47 57 4f 52 44 24 4c 4f 4e 47 57 | EDRIVERS$PPOINTER$LONGWORD$LONGW |
4800 | 4f 52 44 24 24 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 | ORD$$LONGBOOL.....[............. |
4820 | 00 00 00 00 00 02 f9 04 00 00 00 02 fa 03 00 00 00 2c 00 00 00 02 22 d4 00 00 00 0b 6c 70 49 6d | .................,....".....lpIm |
4840 | 61 67 65 42 61 73 65 00 01 a4 1c 05 00 00 00 00 00 01 00 83 09 00 00 00 00 00 00 89 09 00 00 0a | ageBase......................... |
4860 | 00 00 03 23 00 00 00 02 22 d5 00 00 00 02 63 62 00 01 a4 33 05 00 00 00 00 00 01 00 8b 09 00 00 | ...#....".....cb...3............ |
4880 | 00 00 00 00 94 09 00 00 14 00 00 03 2b 00 00 00 02 22 d6 00 00 00 0a 6c 70 63 62 4e 65 65 64 65 | ............+....".....lpcbNeede |
48a0 | 64 00 01 a5 07 05 00 00 00 00 02 04 01 96 09 00 00 00 00 00 00 9f 09 00 00 1e 00 00 07 00 00 00 | d............................... |
48c0 | 00 02 fb 9f 00 00 00 01 2b 31 00 00 00 a9 09 00 00 00 00 00 00 00 00 00 00 ad 09 00 00 00 08 08 | ........+1...................... |
48e0 | 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
4900 | ff ff 02 d4 09 00 00 d6 09 00 00 04 01 9a 01 0a 05 00 00 00 00 00 00 01 4f 50 53 41 50 49 5f 47 | ........................OPSAPI_G |
4920 | 45 54 50 52 4f 43 45 53 53 4d 45 4d 4f 52 59 49 4e 46 4f 24 4c 4f 4e 47 57 4f 52 44 24 50 50 52 | ETPROCESSMEMORYINFO$LONGWORD$PPR |
4940 | 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 24 4c 4f 4e 47 57 4f 52 44 24 24 | OCESS_MEMORY_COUNTERS$LONGWORD$$ |
4960 | 4c 4f 4e 47 42 4f 4f 4c 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 00 00 00 00 00 | LONGBOOL.....[.................. |
4980 | 02 f9 04 00 00 00 02 fa 03 00 00 00 28 00 00 00 02 22 d8 00 00 00 07 50 72 6f 63 65 73 73 00 01 | ............(....".....Process.. |
49a0 | a7 1f 05 00 00 00 00 00 01 00 b6 09 00 00 00 00 00 00 bf 09 00 00 0a 00 00 03 2f 00 00 00 02 22 | ........................../...." |
49c0 | d9 00 00 00 0e 70 70 73 6d 65 6d 43 6f 75 6e 74 65 72 73 00 01 a8 03 05 00 00 00 00 00 01 00 c1 | .....ppsmemCounters............. |
49e0 | 09 00 00 00 00 00 00 c7 09 00 00 14 00 00 03 23 00 00 00 02 22 da 00 00 00 02 63 62 00 01 a8 2d | ...............#....".....cb...- |
4a00 | 05 00 00 00 00 00 01 00 c9 09 00 00 00 00 00 00 d2 09 00 00 1e 00 00 03 00 00 00 00 02 fb 00 00 | ................................ |
4a20 | 00 00 01 f9 04 00 00 00 01 fa 43 00 00 00 13 00 00 00 01 1d 00 00 00 00 05 50 73 41 50 49 00 01 | ..........C..............PsAPI.. |
4a40 | 07 01 05 00 00 00 00 14 00 00 00 01 1d 01 00 00 00 06 73 79 73 74 65 6d 00 01 07 01 05 00 00 00 | ..................system........ |
4a60 | 00 14 00 00 00 01 1d 02 00 00 00 06 6f 62 6a 70 61 73 00 01 07 05 05 00 00 00 00 15 00 00 00 01 | ............objpas.............. |
4a80 | 1d 03 00 00 00 07 57 69 6e 64 6f 77 73 00 01 07 06 05 00 00 00 00 1a 00 00 00 01 14 04 00 00 00 | ......Windows................... |
4aa0 | 08 50 50 6f 69 6e 74 65 72 00 01 0c 0e 05 00 00 00 00 dc 09 00 00 20 00 00 00 01 14 05 00 00 00 | .PPointer....................... |
4ac0 | 0e 54 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 01 0e 14 05 00 00 00 00 e2 09 00 00 25 00 00 00 | .TEnumProcesses.............%... |
4ae0 | 01 14 09 00 00 00 13 54 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 73 00 01 0f 19 05 00 | .......TEnumProcessModules...... |
4b00 | 00 00 00 e8 09 00 00 25 00 00 00 01 14 0e 00 00 00 13 54 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 | .......%..........TGetModuleBase |
4b20 | 4e 61 6d 65 41 00 01 11 19 05 00 00 00 00 ee 09 00 00 25 00 00 00 01 14 13 00 00 00 13 54 47 65 | NameA.............%..........TGe |
4b40 | 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 13 19 05 00 00 00 00 f4 09 00 00 24 00 00 | tModuleBaseNameW.............$.. |
4b60 | 00 01 14 18 00 00 00 12 54 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 01 15 18 05 00 | ........TGetModuleBaseName...... |
4b80 | 00 00 00 fa 09 00 00 27 00 00 00 01 14 19 00 00 00 15 54 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 | .......'..........TGetModuleFile |
4ba0 | 4e 61 6d 65 45 78 41 00 01 16 1b 05 00 00 00 00 00 0a 00 00 27 00 00 00 01 14 1e 00 00 00 15 54 | NameExA.............'..........T |
4bc0 | 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 01 18 1b 05 00 00 00 00 06 0a 00 | GetModuleFileNameExW............ |
4be0 | 00 26 00 00 00 01 14 23 00 00 00 14 54 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 | .&.....#....TGetModuleFileNameEx |
4c00 | 00 01 1a 1a 05 00 00 00 00 0c 0a 00 00 1d 00 00 00 01 14 24 00 00 00 0b 5f 4d 4f 44 55 4c 45 49 | ...................$...._MODULEI |
4c20 | 4e 46 4f 00 01 1d 11 05 00 00 00 00 12 0a 00 00 1c 00 00 00 01 14 28 00 00 00 0a 4d 4f 44 55 4c | NFO...................(....MODUL |
4c40 | 45 49 4e 46 4f 00 01 23 10 05 00 00 00 00 18 0a 00 00 1e 00 00 00 01 14 29 00 00 00 0c 4c 50 4d | EINFO..#................)....LPM |
4c60 | 4f 44 55 4c 45 49 4e 46 4f 00 01 25 12 05 00 00 00 00 1e 0a 00 00 1d 00 00 00 01 14 2a 00 00 00 | ODULEINFO..%................*... |
4c80 | 0b 54 4d 6f 64 75 6c 65 49 6e 66 6f 00 01 26 11 05 00 00 00 00 24 0a 00 00 1d 00 00 00 01 14 2b | .TModuleInfo..&......$.........+ |
4ca0 | 00 00 00 0b 50 4d 6f 64 75 6c 65 49 6e 66 6f 00 01 27 11 05 00 00 00 00 2a 0a 00 00 27 00 00 00 | ....PModuleInfo..'......*...'... |
4cc0 | 01 14 2c 00 00 00 15 54 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 29 1b | ..,....TGetModuleInformation..). |
4ce0 | 05 00 00 00 00 30 0a 00 00 22 00 00 00 01 14 31 00 00 00 10 54 45 6d 70 74 79 57 6f 72 6b 69 6e | .....0...".....1....TEmptyWorkin |
4d00 | 67 53 65 74 00 01 2b 16 05 00 00 00 00 36 0a 00 00 22 00 00 00 01 14 33 00 00 00 10 54 51 75 65 | gSet..+......6...".....3....TQue |
4d20 | 72 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 2c 16 05 00 00 00 00 3c 0a 00 00 2e 00 00 00 01 14 37 | ryWorkingSet..,......<.........7 |
4d40 | 00 00 00 1c 54 49 6e 69 74 69 61 6c 69 7a 65 50 72 6f 63 65 73 73 46 6f 72 57 73 57 61 74 63 68 | ....TInitializeProcessForWsWatch |
4d60 | 00 01 2d 22 05 00 00 00 00 42 0a 00 00 2d 00 00 00 01 14 39 00 00 00 1b 5f 50 53 41 50 49 5f 57 | ..-".....B...-.....9...._PSAPI_W |
4d80 | 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 00 01 30 21 05 00 00 00 00 48 0a 00 00 | S_WATCH_INFORMATION..0!.....H... |
4da0 | 2c 00 00 00 01 14 3c 00 00 00 1a 50 53 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d | ,.....<....PSAPI_WS_WATCH_INFORM |
4dc0 | 41 54 49 4f 4e 00 01 35 20 05 00 00 00 00 4e 0a 00 00 2d 00 00 00 01 14 3d 00 00 00 1b 50 50 53 | ATION..5......N...-.....=....PPS |
4de0 | 41 50 49 5f 57 53 5f 57 41 54 43 48 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 00 01 37 21 05 00 00 00 | API_WS_WATCH_INFORMATION..7!.... |
4e00 | 00 54 0a 00 00 2a 00 00 00 01 14 3e 00 00 00 18 54 50 53 41 50 49 57 73 57 61 74 63 68 49 6e 66 | .T...*.....>....TPSAPIWsWatchInf |
4e20 | 6f 72 6d 61 74 69 6f 6e 00 01 38 1e 05 00 00 00 00 5a 0a 00 00 2a 00 00 00 01 14 3f 00 00 00 18 | ormation..8......Z...*.....?.... |
4e40 | 50 50 53 41 50 49 57 73 57 61 74 63 68 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 39 1e 05 00 00 00 | PPSAPIWsWatchInformation..9..... |
4e60 | 00 60 0a 00 00 1f 00 00 00 01 14 40 00 00 00 0d 54 47 65 74 57 73 43 68 61 6e 67 65 73 00 01 3b | .`.........@....TGetWsChanges..; |
4e80 | 13 05 00 00 00 00 66 0a 00 00 25 00 00 00 01 14 44 00 00 00 13 54 47 65 74 4d 61 70 70 65 64 46 | ......f...%.....D....TGetMappedF |
4ea0 | 69 6c 65 4e 61 6d 65 41 00 01 3e 19 05 00 00 00 00 6c 0a 00 00 25 00 00 00 01 14 49 00 00 00 13 | ileNameA..>......l...%.....I.... |
4ec0 | 54 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 40 19 05 00 00 00 00 72 0a 00 00 | TGetMappedFileNameW..@......r... |
4ee0 | 24 00 00 00 01 14 4e 00 00 00 12 54 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 00 01 42 | $.....N....TGetMappedFileName..B |
4f00 | 18 05 00 00 00 00 78 0a 00 00 2b 00 00 00 01 14 4f 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 | ......x...+.....O....TGetDeviceD |
4f20 | 72 69 76 65 72 42 61 73 65 4e 61 6d 65 41 00 01 43 1f 05 00 00 00 00 7e 0a 00 00 2b 00 00 00 01 | riverBaseNameA..C......~...+.... |
4f40 | 14 53 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 | .S....TGetDeviceDriverBaseNameW. |
4f60 | 01 45 1f 05 00 00 00 00 84 0a 00 00 2a 00 00 00 01 14 57 00 00 00 18 54 47 65 74 44 65 76 69 63 | .E..........*.....W....TGetDevic |
4f80 | 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 00 01 47 1e 05 00 00 00 00 8a 0a 00 00 2b 00 00 00 | eDriverBaseName..G..........+... |
4fa0 | 01 14 58 00 00 00 19 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 41 | ..X....TGetDeviceDriverFileNameA |
4fc0 | 00 01 48 1f 05 00 00 00 00 90 0a 00 00 2b 00 00 00 01 14 5c 00 00 00 19 54 47 65 74 44 65 76 69 | ..H..........+.....\....TGetDevi |
4fe0 | 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 57 00 01 4a 1f 05 00 00 00 00 96 0a 00 00 2a 00 | ceDriverFileNameW..J..........*. |
5000 | 00 00 01 14 60 00 00 00 18 54 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d | ....`....TGetDeviceDriverFileNam |
5020 | 65 00 01 4c 1e 05 00 00 00 00 9c 0a 00 00 24 00 00 00 01 14 61 00 00 00 12 54 45 6e 75 6d 44 65 | e..L..........$.....a....TEnumDe |
5040 | 76 69 63 65 44 72 69 76 65 72 73 00 01 4e 18 05 00 00 00 00 a2 0a 00 00 2a 00 00 00 01 14 65 00 | viceDrivers..N..........*.....e. |
5060 | 00 00 18 5f 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 00 01 52 1e 05 | ..._PROCESS_MEMORY_COUNTERS..R.. |
5080 | 00 00 00 00 a8 0a 00 00 29 00 00 00 01 14 70 00 00 00 17 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 | ........).....p....PROCESS_MEMOR |
50a0 | 59 5f 43 4f 55 4e 54 45 52 53 00 01 5f 1d 05 00 00 00 00 ae 0a 00 00 2a 00 00 00 01 14 71 00 00 | Y_COUNTERS.._..........*.....q.. |
50c0 | 00 18 50 50 52 4f 43 45 53 53 5f 4d 45 4d 4f 52 59 5f 43 4f 55 4e 54 45 52 53 00 01 61 1e 05 00 | ..PPROCESS_MEMORY_COUNTERS..a... |
50e0 | 00 00 00 b4 0a 00 00 28 00 00 00 01 14 72 00 00 00 16 54 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 | .......(.....r....TProcessMemory |
5100 | 43 6f 75 6e 74 65 72 73 00 01 62 1c 05 00 00 00 00 ba 0a 00 00 28 00 00 00 01 14 73 00 00 00 16 | Counters..b..........(.....s.... |
5120 | 50 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 43 6f 75 6e 74 65 72 73 00 01 63 1c 05 00 00 00 00 c0 | PProcessMemoryCounters..c....... |
5140 | 0a 00 00 27 00 00 00 01 14 74 00 00 00 15 54 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 | ...'.....t....TGetProcessMemoryI |
5160 | 6e 66 6f 00 01 65 1b 05 00 00 00 00 c6 0a 00 00 21 00 00 00 01 15 78 00 00 00 0d 45 6e 75 6d 50 | nfo..e..........!.....x....EnumP |
5180 | 72 6f 63 65 73 73 65 73 00 01 69 0a 05 00 00 00 00 01 00 cc 0a 00 00 26 00 00 00 01 15 7c 00 00 | rocesses..i............&.....|.. |
51a0 | 00 12 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 73 00 01 6b 0a 05 00 00 00 00 01 00 d2 | ..EnumProcessModules..k......... |
51c0 | 0a 00 00 25 00 00 00 01 15 81 00 00 00 11 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 | ...%..........GetModuleBaseName. |
51e0 | 01 6e 0a 05 00 00 00 00 01 00 d8 0a 00 00 26 00 00 00 01 15 86 00 00 00 12 47 65 74 4d 6f 64 75 | .n............&..........GetModu |
5200 | 6c 65 42 61 73 65 4e 61 6d 65 41 00 01 71 0a 05 00 00 00 00 01 00 de 0a 00 00 26 00 00 00 01 15 | leBaseNameA..q............&..... |
5220 | 8b 00 00 00 12 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 74 0a 05 00 00 00 00 | .....GetModuleBaseNameW..t...... |
5240 | 01 00 e4 0a 00 00 27 00 00 00 01 15 90 00 00 00 13 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 | ......'..........GetModuleFileNa |
5260 | 6d 65 45 78 00 01 77 0a 05 00 00 00 00 01 00 ea 0a 00 00 28 00 00 00 01 15 95 00 00 00 14 47 65 | meEx..w............(..........Ge |
5280 | 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 41 00 01 7a 0a 05 00 00 00 00 01 00 f0 0a 00 | tModuleFileNameExA..z........... |
52a0 | 00 28 00 00 00 01 15 9a 00 00 00 14 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 | .(..........GetModuleFileNameExW |
52c0 | 00 01 7d 0a 05 00 00 00 00 01 00 f6 0a 00 00 28 00 00 00 01 15 9f 00 00 00 14 47 65 74 4d 6f 64 | ..}............(..........GetMod |
52e0 | 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 01 80 0a 05 00 00 00 00 01 00 fc 0a 00 00 23 00 00 | uleInformation...............#.. |
5300 | 00 01 15 a4 00 00 00 0f 45 6d 70 74 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 83 0a 05 00 00 00 00 | ........EmptyWorkingSet......... |
5320 | 01 00 02 0b 00 00 23 00 00 00 01 15 a6 00 00 00 0f 51 75 65 72 79 57 6f 72 6b 69 6e 67 53 65 74 | ......#..........QueryWorkingSet |
5340 | 00 01 85 0a 05 00 00 00 00 01 00 08 0b 00 00 2f 00 00 00 01 15 aa 00 00 00 1b 49 6e 69 74 69 61 | .............../..........Initia |
5360 | 6c 69 7a 65 50 72 6f 63 65 73 73 46 6f 72 57 73 57 61 74 63 68 00 01 87 0a 05 00 00 00 00 01 00 | lizeProcessForWsWatch........... |
5380 | 0e 0b 00 00 25 00 00 00 01 15 ac 00 00 00 11 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 | ....%..........GetMappedFileName |
53a0 | 00 01 89 0a 05 00 00 00 00 01 00 14 0b 00 00 26 00 00 00 01 15 b1 00 00 00 12 47 65 74 4d 61 70 | ...............&..........GetMap |
53c0 | 70 65 64 46 69 6c 65 4e 61 6d 65 41 00 01 8c 0a 05 00 00 00 00 01 00 1a 0b 00 00 26 00 00 00 01 | pedFileNameA...............&.... |
53e0 | 15 b6 00 00 00 12 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 8f 0a 05 00 00 00 | ......GetMappedFileNameW........ |
5400 | 00 01 00 20 0b 00 00 2b 00 00 00 01 15 bb 00 00 00 17 47 65 74 44 65 76 69 63 65 44 72 69 76 65 | .......+..........GetDeviceDrive |
5420 | 72 42 61 73 65 4e 61 6d 65 00 01 92 0a 05 00 00 00 00 01 00 26 0b 00 00 2c 00 00 00 01 15 bf 00 | rBaseName...........&...,....... |
5440 | 00 00 18 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 41 00 01 95 0a 05 | ...GetDeviceDriverBaseNameA..... |
5460 | 00 00 00 00 01 00 2c 0b 00 00 2c 00 00 00 01 15 c3 00 00 00 18 47 65 74 44 65 76 69 63 65 44 72 | ......,...,..........GetDeviceDr |
5480 | 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 01 98 0a 05 00 00 00 00 01 00 32 0b 00 00 2b 00 00 00 | iverBaseNameW...........2...+... |
54a0 | 01 15 c7 00 00 00 17 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 00 01 | .......GetDeviceDriverFileName.. |
54c0 | 9b 0a 05 00 00 00 00 01 00 38 0b 00 00 2c 00 00 00 01 15 cb 00 00 00 18 47 65 74 44 65 76 69 63 | .........8...,..........GetDevic |
54e0 | 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 41 00 01 9e 0a 05 00 00 00 00 01 00 3e 0b 00 00 2c | eDriverFileNameA...........>..., |
5500 | 00 00 00 01 15 cf 00 00 00 18 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d | ..........GetDeviceDriverFileNam |
5520 | 65 57 00 01 a1 0a 05 00 00 00 00 01 00 44 0b 00 00 25 00 00 00 01 15 d3 00 00 00 11 45 6e 75 6d | eW...........D...%..........Enum |
5540 | 44 65 76 69 63 65 44 72 69 76 65 72 73 00 01 a4 0a 05 00 00 00 00 01 00 4a 0b 00 00 28 00 00 00 | DeviceDrivers...........J...(... |
5560 | 01 15 d7 00 00 00 14 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 01 a7 0a 05 | .......GetProcessMemoryInfo..... |
5580 | 00 00 00 00 01 00 50 0b 00 00 00 00 00 00 01 fb 01 00 00 00 01 12 00 00 00 00 00 01 03 00 00 00 | ......P......................... |
55a0 | 00 01 fd 04 00 00 00 01 5b 00 00 00 00 04 00 00 00 01 f8 02 00 00 00 72 00 00 00 01 2b 32 00 00 | ........[..............r....+2.. |
55c0 | 00 61 0f 00 00 00 00 00 00 00 00 00 00 65 0f 00 00 00 02 08 00 00 10 09 00 00 00 00 00 00 00 00 | .a...........e.................. |
55e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 5f 50 53 41 50 49 5f 69 6e 69 74 | ....................._PSAPI_init |
5600 | ff ff 01 6e 0f 00 00 70 0f 00 00 00 01 ac 01 00 00 00 00 00 00 00 02 0b 49 4e 49 54 24 5f 50 53 | ...n...p................INIT$_PS |
5620 | 41 50 49 0b 5f 50 53 41 50 49 5f 69 6e 69 74 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 | API._PSAPI_init.....[........... |
5640 | 00 00 00 00 00 00 00 02 f9 04 00 00 00 02 fa 00 00 00 00 00 00 00 00 02 fb 6e 00 00 00 01 2b 33 | .........................n....+3 |
5660 | 00 00 00 76 0f 00 00 00 00 00 00 00 00 00 00 7a 0f 00 00 00 08 08 00 00 00 08 00 00 00 00 00 00 | ...v...........z................ |
5680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 02 83 0f 00 00 85 0f 00 | ................................ |
56a0 | 00 00 01 c6 0a 05 00 00 00 00 00 00 01 1f 50 53 41 50 49 5f 43 48 45 43 4b 50 53 41 50 49 4c 4f | ..............PSAPI_CHECKPSAPILO |
56c0 | 41 44 45 44 24 24 42 4f 4f 4c 45 41 4e 04 00 00 00 02 5b 00 00 00 00 04 00 00 00 02 f8 00 00 00 | ADED$$BOOLEAN.....[............. |
56e0 | 00 00 00 00 00 02 f9 04 00 00 00 02 fa 00 00 00 00 00 00 00 00 02 fb 00 00 00 00 01 f9 04 00 00 | ................................ |
5700 | 00 01 fa 1a 00 00 00 1f 00 00 00 01 15 db 00 00 00 0b 24 50 53 41 50 49 5f 69 6e 69 74 00 01 ac | ..................$PSAPI_init... |
5720 | 01 05 00 00 00 00 01 00 8b 0f 00 00 23 00 00 00 01 16 dc 00 00 00 06 68 50 53 41 50 49 00 01 ad | ............#..........hPSAPI... |
5740 | 03 05 00 00 00 00 00 00 01 91 0f 00 00 00 00 00 00 9a 0f 00 00 2b 00 00 00 01 16 dd 00 00 00 0e | .....................+.......... |
5760 | 5f 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 01 ae 03 05 00 00 00 00 00 00 01 9c 0f 00 00 00 00 | _EnumProcesses.................. |
5780 | 00 00 a2 0f 00 00 30 00 00 00 01 16 de 00 00 00 13 5f 45 6e 75 6d 50 72 6f 63 65 73 73 4d 6f 64 | ......0.........._EnumProcessMod |
57a0 | 75 6c 65 73 00 01 af 03 05 00 00 00 00 00 00 01 a4 0f 00 00 00 00 00 00 aa 0f 00 00 2f 00 00 00 | ules......................../... |
57c0 | 01 16 df 00 00 00 12 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 00 01 b0 0e 05 00 00 | ......._GetModuleBaseName....... |
57e0 | 00 00 00 00 01 ac 0f 00 00 00 00 00 00 b2 0f 00 00 31 00 00 00 01 16 e0 00 00 00 14 5f 47 65 74 | .................1.........._Get |
5800 | 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 00 01 b1 0e 05 00 00 00 00 00 00 01 b4 0f 00 00 | ModuleFileNameEx................ |
5820 | 00 00 00 00 ba 0f 00 00 30 00 00 00 01 16 e1 00 00 00 13 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 | ........0.........._GetModuleBas |
5840 | 65 4e 61 6d 65 41 00 01 b2 0e 05 00 00 00 00 00 00 01 bc 0f 00 00 00 00 00 00 c2 0f 00 00 32 00 | eNameA........................2. |
5860 | 00 00 01 16 e2 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 41 00 01 | ........._GetModuleFileNameExA.. |
5880 | b3 0e 05 00 00 00 00 00 00 01 c4 0f 00 00 00 00 00 00 ca 0f 00 00 30 00 00 00 01 16 e3 00 00 00 | ......................0......... |
58a0 | 13 5f 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 01 b4 0e 05 00 00 00 00 00 00 01 | ._GetModuleBaseNameW............ |
58c0 | cc 0f 00 00 00 00 00 00 d2 0f 00 00 32 00 00 00 01 16 e4 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c | ............2.........._GetModul |
58e0 | 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 01 b5 0e 05 00 00 00 00 00 00 01 d4 0f 00 00 00 00 00 00 | eFileNameExW.................... |
5900 | da 0f 00 00 32 00 00 00 01 16 e5 00 00 00 15 5f 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 | ....2.........._GetModuleInforma |
5920 | 74 69 6f 6e 00 01 b6 03 05 00 00 00 00 00 00 01 dc 0f 00 00 00 00 00 00 e2 0f 00 00 2d 00 00 00 | tion........................-... |
5940 | 01 16 e6 00 00 00 10 5f 45 6d 70 74 79 57 6f 72 6b 69 6e 67 53 65 74 00 01 b7 03 05 00 00 00 00 | ......._EmptyWorkingSet......... |
5960 | 00 00 01 e4 0f 00 00 00 00 00 00 ea 0f 00 00 2d 00 00 00 01 16 e7 00 00 00 10 5f 51 75 65 72 79 | ...............-.........._Query |
5980 | 57 6f 72 6b 69 6e 67 53 65 74 00 01 b8 03 05 00 00 00 00 00 00 01 ec 0f 00 00 00 00 00 00 f2 0f | WorkingSet...................... |
59a0 | 00 00 39 00 00 00 01 16 e8 00 00 00 1c 5f 49 6e 69 74 69 61 6c 69 7a 65 50 72 6f 63 65 73 73 46 | ..9.........._InitializeProcessF |
59c0 | 6f 72 57 73 57 61 74 63 68 00 01 b9 03 05 00 00 00 00 00 00 01 f4 0f 00 00 00 00 00 00 fa 0f 00 | orWsWatch....................... |
59e0 | 00 2f 00 00 00 01 16 e9 00 00 00 12 5f 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 00 01 | ./.........._GetMappedFileName.. |
5a00 | ba 0e 05 00 00 00 00 00 00 01 fc 0f 00 00 00 00 00 00 02 10 00 00 35 00 00 00 01 16 ea 00 00 00 | ......................5......... |
5a20 | 18 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 00 01 bb 0e 05 00 00 | ._GetDeviceDriverBaseName....... |
5a40 | 00 00 00 00 01 04 10 00 00 00 00 00 00 0a 10 00 00 35 00 00 00 01 16 eb 00 00 00 18 5f 47 65 74 | .................5.........._Get |
5a60 | 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 00 01 bc 0e 05 00 00 00 00 00 00 01 | DeviceDriverFileName............ |
5a80 | 0c 10 00 00 00 00 00 00 12 10 00 00 30 00 00 00 01 16 ec 00 00 00 13 5f 47 65 74 4d 61 70 70 65 | ............0.........._GetMappe |
5aa0 | 64 46 69 6c 65 4e 61 6d 65 41 00 01 bd 0e 05 00 00 00 00 00 00 01 14 10 00 00 00 00 00 00 1a 10 | dFileNameA...................... |
5ac0 | 00 00 36 00 00 00 01 16 ed 00 00 00 19 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 42 61 73 | ..6.........._GetDeviceDriverBas |
5ae0 | 65 4e 61 6d 65 41 00 01 be 0e 05 00 00 00 00 00 00 01 1c 10 00 00 00 00 00 00 22 10 00 00 36 00 | eNameA...................."...6. |
5b00 | 00 00 01 16 ee 00 00 00 19 5f 47 65 74 44 65 76 69 63 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d | ........._GetDeviceDriverFileNam |
5b20 | 65 41 00 01 bf 0e 05 00 00 00 00 00 00 01 24 10 00 00 00 00 00 00 2a 10 00 00 30 00 00 00 01 16 | eA............$.......*...0..... |
5b40 | ef 00 00 00 13 5f 47 65 74 4d 61 70 70 65 64 46 69 6c 65 4e 61 6d 65 57 00 01 c0 0e 05 00 00 00 | ....._GetMappedFileNameW........ |
5b60 | 00 00 00 01 2c 10 00 00 00 00 00 00 32 10 00 00 36 00 00 00 01 16 f0 00 00 00 19 5f 47 65 74 44 | ....,.......2...6.........._GetD |
5b80 | 65 76 69 63 65 44 72 69 76 65 72 42 61 73 65 4e 61 6d 65 57 00 01 c1 0e 05 00 00 00 00 00 00 01 | eviceDriverBaseNameW............ |
5ba0 | 34 10 00 00 00 00 00 00 3a 10 00 00 36 00 00 00 01 16 f1 00 00 00 19 5f 47 65 74 44 65 76 69 63 | 4.......:...6.........._GetDevic |
5bc0 | 65 44 72 69 76 65 72 46 69 6c 65 4e 61 6d 65 57 00 01 c2 0e 05 00 00 00 00 00 00 01 3c 10 00 00 | eDriverFileNameW............<... |
5be0 | 00 00 00 00 42 10 00 00 2f 00 00 00 01 16 f2 00 00 00 12 5f 45 6e 75 6d 44 65 76 69 63 65 44 72 | ....B.../.........._EnumDeviceDr |
5c00 | 69 76 65 72 73 00 01 c3 03 05 00 00 00 00 00 00 01 44 10 00 00 00 00 00 00 4a 10 00 00 32 00 00 | ivers............D.......J...2.. |
5c20 | 00 01 16 f3 00 00 00 15 5f 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 01 c4 | ........_GetProcessMemoryInfo... |
5c40 | 03 05 00 00 00 00 00 00 01 4c 10 00 00 00 00 00 00 52 10 00 00 24 00 00 00 01 15 f4 00 00 00 10 | .........L.......R...$.......... |
5c60 | 43 68 65 63 6b 50 53 41 50 49 4c 6f 61 64 65 64 00 01 c6 0a 05 00 00 00 00 01 00 54 10 00 00 00 | CheckPSAPILoaded...........T.... |
5c80 | 00 00 00 01 fb 10 00 00 00 01 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 | ..........S..................... |
5ca0 | ff | . |