home *** CD-ROM | disk | FTP | other *** search
| Borland Delphi Compiled Unit | 1999-08-11 | 8.0 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Borland Delphi Compiled Unit
(other/borlandDelphiCompiledUnit).
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 1%
| dexvert
| Borland Delphi Compiled Unit (other/borlandDelphiCompiledUnit)
| magic
| Unsupported |
| 1%
| dexvert
| Kylix 3 Compiled Unit (other/kylix3CompiledUnit)
| ext
| Unsupported |
| 100%
| file
| data
| default
| |
| 100%
| TrID
| Delphi 5 Compiled Unit
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 8b 14 1f f2 33 20 00 00 | ff ff ff ff 2d a3 a6 49 |....3 ..|....-..I|
|00000010| 00 96 01 0a 3c 70 09 70 | 73 61 70 69 2e 70 61 73 |....<p.p|sapi.pas|
|00000020| 87 9d 0a 27 00 64 07 57 | 69 6e 64 6f 77 73 2d a3 |...'.d.W|indows-.|
|00000030| a6 49 66 07 4c 50 44 57 | 4f 52 44 18 6f f3 9a 66 |.If.LPDW|ORD.o..f|
|00000040| 05 44 57 4f 52 44 dd b3 | 1a f9 66 04 42 4f 4f 4c |.DWORD..|..f.BOOL|
|00000050| 8f 23 cf 4a 66 07 54 48 | 61 6e 64 6c 65 dd b3 1a |.#.Jf.TH|andle...|
|00000060| f9 66 07 48 4d 4f 44 55 | 4c 45 dd b3 1a f9 67 0b |.f.HMODU|LE....g.|
|00000070| 4c 6f 61 64 4c 69 62 72 | 61 72 79 f8 c2 98 8b 67 |LoadLibr|ary....g|
|00000080| 0e 47 65 74 50 72 6f 63 | 41 64 64 72 65 73 73 2c |.GetProc|Address,|
|00000090| 63 a2 e4 63 64 07 53 79 | 73 49 6e 69 74 2d a3 a6 |c..cd.Sy|sInit-..|
|000000a0| 49 63 64 06 53 79 73 74 | 65 6d 2d a3 a6 49 66 09 |Icd.Syst|em-..If.|
|000000b0| 50 41 6e 73 69 43 68 61 | 72 f0 bb b5 6a 66 09 50 |PAnsiCha|r...jf.P|
|000000c0| 57 69 64 65 43 68 61 72 | 58 e6 99 d2 66 07 50 6f |WideChar|X...f.Po|
|000000d0| 69 6e 74 65 72 c5 9e 28 | 58 66 05 50 43 68 61 72 |inter..(|Xf.PChar|
|000000e0| f0 bb b5 6a 66 07 42 6f | 6f 6c 65 61 6e 4e 88 63 |...jf.Bo|oleanN.c|
|000000f0| c7 66 06 53 74 72 69 6e | 67 9a 38 ff f1 66 0a 41 |.f.Strin|g.8..f.A|
|00000100| 6e 73 69 53 74 72 69 6e | 67 9a 38 ff f1 67 05 46 |nsiStrin|g.8..g.F|
|00000110| 61 6c 73 65 a6 31 d8 6f | 67 04 45 78 69 74 00 00 |alse.1.o|g.Exit..|
|00000120| 00 00 67 04 54 72 75 65 | a7 31 d8 6f 67 0e 40 48 |..g.True|.1.og.@H|
|00000130| 61 6e 64 6c 65 46 69 6e | 61 6c 6c 79 58 2c 54 64 |andleFin|allyX,Td|
|00000140| 63 2a 08 50 50 6f 69 6e | 74 65 72 88 71 87 90 14 |c*.PPoin|ter.q...|
|00000150| 1a 2a 0e 54 45 6e 75 6d | 50 72 6f 63 65 73 73 65 |.*.TEnum|Processe|
|00000160| 73 88 ac 95 82 6e 1c 2a | 13 54 45 6e 75 6d 50 72 |s....n.*|.TEnumPr|
|00000170| 6f 63 65 73 73 4d 6f 64 | 75 6c 65 73 88 81 41 4f |ocessMod|ules..AO|
|00000180| 1b 1e 2a 13 54 47 65 74 | 4d 6f 64 75 6c 65 42 61 |..*.TGet|ModuleBa|
|00000190| 73 65 4e 61 6d 65 41 88 | be c3 bf 9c 20 2a 13 54 |seNameA.|.... *.T|
|000001a0| 47 65 74 4d 6f 64 75 6c | 65 42 61 73 65 4e 61 6d |GetModul|eBaseNam|
|000001b0| 65 57 88 fc e7 07 c2 22 | 2a 12 54 47 65 74 4d 6f |eW....."|*.TGetMo|
|000001c0| 64 75 6c 65 42 61 73 65 | 4e 61 6d 65 80 be c3 bf |duleBase|Name....|
|000001d0| 9c 20 2a 15 54 47 65 74 | 4d 6f 64 75 6c 65 46 69 |. *.TGet|ModuleFi|
|000001e0| 6c 65 4e 61 6d 65 45 78 | 41 88 e0 b5 19 36 24 2a |leNameEx|A....6$*|
|000001f0| 15 54 47 65 74 4d 6f 64 | 75 6c 65 46 69 6c 65 4e |.TGetMod|uleFileN|
|00000200| 61 6d 65 45 78 57 88 1e | da 61 5b 26 2a 14 54 47 |ameExW..|.a[&*.TG|
|00000210| 65 74 4d 6f 64 75 6c 65 | 46 69 6c 65 4e 61 6d 65 |etModule|FileName|
|00000220| 45 78 80 e0 b5 19 36 24 | 2a 0b 5f 4d 4f 44 55 4c |Ex....6$|*._MODUL|
|00000230| 45 49 4e 46 4f 88 09 65 | 02 7d 28 2a 0a 4d 4f 44 |EINFO..e|.}(*.MOD|
|00000240| 55 4c 45 49 4e 46 4f 80 | 09 65 02 7d 28 2a 0c 4c |ULEINFO.|.e.}(*.L|
|00000250| 50 4d 4f 44 55 4c 45 49 | 4e 46 4f 88 32 92 b0 e0 |PMODULEI|NFO.2...|
|00000260| 2a 2a 0b 54 4d 6f 64 75 | 6c 65 49 6e 66 6f 80 09 |**.TModu|leInfo..|
|00000270| 65 02 7d 28 2a 0b 50 4d | 6f 64 75 6c 65 49 6e 66 |e.}(*.PM|oduleInf|
|00000280| 6f 80 32 92 b0 e0 2a 2a | 15 54 47 65 74 4d 6f 64 |o.2...**|.TGetMod|
|00000290| 75 6c 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 88 7b |uleInfor|mation.{|
|000002a0| 81 77 d5 2c 2a 10 54 45 | 6d 70 74 79 57 6f 72 6b |.w.,*.TE|mptyWork|
|000002b0| 69 6e 67 53 65 74 88 d2 | ed 33 6a 2e 2a 10 54 51 |ingSet..|.3j.*.TQ|
|000002c0| 75 65 72 79 57 6f 72 6b | 69 6e 67 53 65 74 88 99 |ueryWork|ingSet..|
|000002d0| ee 58 ec 30 2a 1c 54 49 | 6e 69 74 69 61 6c 69 7a |.X.0*.TI|nitializ|
|000002e0| 65 50 72 6f 63 65 73 73 | 46 6f 72 57 73 57 61 74 |eProcess|ForWsWat|
|000002f0| 63 68 88 3f af f8 3a 32 | 2a 1b 5f 50 53 41 50 49 |ch.?..:2|*._PSAPI|
|00000300| 5f 57 53 5f 57 41 54 43 | 48 5f 49 4e 46 4f 52 4d |_WS_WATC|H_INFORM|
|00000310| 41 54 49 4f 4e 88 d9 6d | ed 6c 34 2a 1a 50 53 41 |ATION..m|.l4*.PSA|
|00000320| 50 49 5f 57 53 5f 57 41 | 54 43 48 5f 49 4e 46 4f |PI_WS_WA|TCH_INFO|
|00000330| 52 4d 41 54 49 4f 4e 80 | d9 6d ed 6c 34 2a 1b 50 |RMATION.|.m.l4*.P|
|00000340| 50 53 41 50 49 5f 57 53 | 5f 57 41 54 43 48 5f 49 |PSAPI_WS|_WATCH_I|
|00000350| 4e 46 4f 52 4d 41 54 49 | 4f 4e 88 85 78 a2 72 36 |NFORMATI|ON..x.r6|
|00000360| 2a 18 54 50 53 41 50 49 | 57 73 57 61 74 63 68 49 |*.TPSAPI|WsWatchI|
|00000370| 6e 66 6f 72 6d 61 74 69 | 6f 6e 80 d9 6d ed 6c 34 |nformati|on..m.l4|
|00000380| 2a 18 50 50 53 41 50 49 | 57 73 57 61 74 63 68 49 |*.PPSAPI|WsWatchI|
|00000390| 6e 66 6f 72 6d 61 74 69 | 6f 6e 80 85 78 a2 72 36 |nformati|on..x.r6|
|000003a0| 2a 0d 54 47 65 74 57 73 | 43 68 61 6e 67 65 73 88 |*.TGetWs|Changes.|
|000003b0| 59 e5 b1 15 38 2a 13 54 | 47 65 74 4d 61 70 70 65 |Y...8*.T|GetMappe|
|000003c0| 64 46 69 6c 65 4e 61 6d | 65 41 88 1c b0 4f 07 3a |dFileNam|eA...O.:|
|000003d0| 2a 13 54 47 65 74 4d 61 | 70 70 65 64 46 69 6c 65 |*.TGetMa|ppedFile|
|000003e0| 4e 61 6d 65 57 88 5a d4 | 97 2c 3c 2a 12 54 47 65 |NameW.Z.|.,<*.TGe|
|000003f0| 74 4d 61 70 70 65 64 46 | 69 6c 65 4e 61 6d 65 80 |tMappedF|ileName.|
|00000400| 1c b0 4f 07 3a 2a 19 54 | 47 65 74 44 65 76 69 63 |..O.:*.T|GetDevic|
|00000410| 65 44 72 69 76 65 72 42 | 61 73 65 4e 61 6d 65 41 |eDriverB|aseNameA|
|00000420| 88 10 f6 e2 45 3e 2a 19 | 54 47 65 74 44 65 76 69 |....E>*.|TGetDevi|
|00000430| 63 65 44 72 69 76 65 72 | 42 61 73 65 4e 61 6d 65 |ceDriver|BaseName|
|00000440| 57 88 4e 1a 2b 6b 40 2a | 18 54 47 65 74 44 65 76 |W.N.+k@*|.TGetDev|
|00000450| 69 63 65 44 72 69 76 65 | 72 42 61 73 65 4e 61 6d |iceDrive|rBaseNam|
|00000460| 65 80 10 f6 e2 45 3e 2a | 19 54 47 65 74 44 65 76 |e....E>*|.TGetDev|
|00000470| 69 63 65 44 72 69 76 65 | 72 46 69 6c 65 4e 61 6d |iceDrive|rFileNam|
|00000480| 65 41 88 f5 67 a1 7e 42 | 2a 19 54 47 65 74 44 65 |eA..g.~B|*.TGetDe|
|00000490| 76 69 63 65 44 72 69 76 | 65 72 46 69 6c 65 4e 61 |viceDriv|erFileNa|
|000004a0| 6d 65 57 88 33 8c e9 a3 | 44 2a 18 54 47 65 74 44 |meW.3...|D*.TGetD|
|000004b0| 65 76 69 63 65 44 72 69 | 76 65 72 46 69 6c 65 4e |eviceDri|verFileN|
|000004c0| 61 6d 65 80 f5 67 a1 7e | 42 2a 12 54 45 6e 75 6d |ame..g.~|B*.TEnum|
|000004d0| 44 65 76 69 63 65 44 72 | 69 76 65 72 73 88 19 59 |DeviceDr|ivers..Y|
|000004e0| 49 dc 46 2a 18 5f 50 52 | 4f 43 45 53 53 5f 4d 45 |I.F*._PR|OCESS_ME|
|000004f0| 4d 4f 52 59 5f 43 4f 55 | 4e 54 45 52 53 88 4c fd |MORY_COU|NTERS.L.|
|00000500| 25 7d 48 2a 17 50 52 4f | 43 45 53 53 5f 4d 45 4d |%}H*.PRO|CESS_MEM|
|00000510| 4f 52 59 5f 43 4f 55 4e | 54 45 52 53 80 4c fd 25 |ORY_COUN|TERS.L.%|
|00000520| 7d 48 2a 18 50 50 52 4f | 43 45 53 53 5f 4d 45 4d |}H*.PPRO|CESS_MEM|
|00000530| 4f 52 59 5f 43 4f 55 4e | 54 45 52 53 88 80 bc de |ORY_COUN|TERS....|
|00000540| 4f 4a 2a 16 54 50 72 6f | 63 65 73 73 4d 65 6d 6f |OJ*.TPro|cessMemo|
|00000550| 72 79 43 6f 75 6e 74 65 | 72 73 80 4c fd 25 7d 48 |ryCounte|rs.L.%}H|
|00000560| 2a 16 50 50 72 6f 63 65 | 73 73 4d 65 6d 6f 72 79 |*.PProce|ssMemory|
|00000570| 43 6f 75 6e 74 65 72 73 | 88 02 d4 5b 09 4c 2a 15 |Counters|...[.L*.|
|00000580| 54 47 65 74 50 72 6f 63 | 65 73 73 4d 65 6d 6f 72 |TGetProc|essMemor|
|00000590| 79 49 6e 66 6f 88 ad b5 | 0e d7 4e 20 02 2e 31 66 |yInfo...|..N ..1f|
|000005a0| 50 00 20 06 68 50 53 41 | 50 49 66 08 e5 02 20 0e |P. .hPSA|PIf... .|
|000005b0| 5f 45 6e 75 6d 50 72 6f | 63 65 73 73 65 73 64 1c |_EnumPro|cessesd.|
|000005c0| e9 02 20 13 5f 45 6e 75 | 6d 50 72 6f 63 65 73 73 |.. ._Enu|mProcess|
|000005d0| 4d 6f 64 75 6c 65 73 64 | 1e ed 02 20 13 5f 47 65 |Modulesd|... ._Ge|
|000005e0| 74 4d 6f 64 75 6c 65 42 | 61 73 65 4e 61 6d 65 41 |tModuleB|aseNameA|
|000005f0| 64 20 f1 02 20 15 5f 47 | 65 74 4d 6f 64 75 6c 65 |d .. ._G|etModule|
|00000600| 46 69 6c 65 4e 61 6d 65 | 45 78 41 64 24 f5 02 20 |FileName|ExAd$.. |
|00000610| 13 5f 47 65 74 4d 6f 64 | 75 6c 65 42 61 73 65 4e |._GetMod|uleBaseN|
|00000620| 61 6d 65 57 64 22 f9 02 | 20 15 5f 47 65 74 4d 6f |ameWd"..| ._GetMo|
|00000630| 64 75 6c 65 46 69 6c 65 | 4e 61 6d 65 45 78 57 64 |duleFile|NameExWd|
|00000640| 26 fd 02 20 12 5f 47 65 | 74 4d 6f 64 75 6c 65 42 |&.. ._Ge|tModuleB|
|00000650| 61 73 65 4e 61 6d 65 64 | 20 01 03 20 14 5f 47 65 |aseNamed| .. ._Ge|
|00000660| 74 4d 6f 64 75 6c 65 46 | 69 6c 65 4e 61 6d 65 45 |tModuleF|ileNameE|
|00000670| 78 64 24 05 03 20 15 5f | 47 65 74 4d 6f 64 75 6c |xd$.. ._|GetModul|
|00000680| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 64 2c 09 03 |eInforma|tiond,..|
|00000690| 20 10 5f 45 6d 70 74 79 | 57 6f 72 6b 69 6e 67 53 | ._Empty|WorkingS|
|000006a0| 65 74 64 2e 0d 03 20 10 | 5f 51 75 65 72 79 57 6f |etd... .|_QueryWo|
|000006b0| 72 6b 69 6e 67 53 65 74 | 64 30 11 03 20 1c 5f 49 |rkingSet|d0.. ._I|
|000006c0| 6e 69 74 69 61 6c 69 7a | 65 50 72 6f 63 65 73 73 |nitializ|eProcess|
|000006d0| 46 6f 72 57 73 57 61 74 | 63 68 64 32 15 03 20 13 |ForWsWat|chd2.. .|
|000006e0| 5f 47 65 74 4d 61 70 70 | 65 64 46 69 6c 65 4e 61 |_GetMapp|edFileNa|
|000006f0| 6d 65 41 64 3a 19 03 20 | 19 5f 47 65 74 44 65 76 |meAd:.. |._GetDev|
|00000700| 69 63 65 44 72 69 76 65 | 72 42 61 73 65 4e 61 6d |iceDrive|rBaseNam|
|00000710| 65 41 64 3e 1d 03 20 19 | 5f 47 65 74 44 65 76 69 |eAd>.. .|_GetDevi|
|00000720| 63 65 44 72 69 76 65 72 | 46 69 6c 65 4e 61 6d 65 |ceDriver|FileName|
|00000730| 41 64 42 21 03 20 13 5f | 47 65 74 4d 61 70 70 65 |AdB!. ._|GetMappe|
|00000740| 64 46 69 6c 65 4e 61 6d | 65 57 64 3c 25 03 20 19 |dFileNam|eWd<%. .|
|00000750| 5f 47 65 74 44 65 76 69 | 63 65 44 72 69 76 65 72 |_GetDevi|ceDriver|
|00000760| 42 61 73 65 4e 61 6d 65 | 57 64 40 29 03 20 19 5f |BaseName|Wd@). ._|
|00000770| 47 65 74 44 65 76 69 63 | 65 44 72 69 76 65 72 46 |GetDevic|eDriverF|
|00000780| 69 6c 65 4e 61 6d 65 57 | 64 44 2d 03 20 12 5f 47 |ileNameW|dD-. ._G|
|00000790| 65 74 4d 61 70 70 65 64 | 46 69 6c 65 4e 61 6d 65 |etMapped|FileName|
|000007a0| 64 3a 31 03 20 18 5f 47 | 65 74 44 65 76 69 63 65 |d:1. ._G|etDevice|
|000007b0| 44 72 69 76 65 72 42 61 | 73 65 4e 61 6d 65 64 3e |DriverBa|seNamed>|
|000007c0| 35 03 20 18 5f 47 65 74 | 44 65 76 69 63 65 44 72 |5. ._Get|DeviceDr|
|000007d0| 69 76 65 72 46 69 6c 65 | 4e 61 6d 65 64 42 39 03 |iverFile|NamedB9.|
|000007e0| 20 12 5f 45 6e 75 6d 44 | 65 76 69 63 65 44 72 69 | ._EnumD|eviceDri|
|000007f0| 76 65 72 73 64 46 3d 03 | 20 15 5f 47 65 74 50 72 |versdF=.| ._GetPr|
|00000800| 6f 63 65 73 73 4d 65 6d | 6f 72 79 49 6e 66 6f 64 |ocessMem|oryInfod|
|00000810| 4e 41 03 28 10 43 68 65 | 63 6b 50 53 41 50 49 4c |NA.(.Che|ckPSAPIL|
|00000820| 6f 61 64 65 64 00 00 b1 | 0d 04 14 20 06 52 65 73 |oaded...|... .Res|
|00000830| 75 6c 74 16 14 00 63 28 | 0d 45 6e 75 6d 50 72 6f |ult...c(|.EnumPro|
|00000840| 63 65 73 73 65 73 80 20 | 8c fe 0f 00 46 04 06 21 |cesses. |....F..!|
|00000850| 0b 6c 70 69 64 50 72 6f | 63 65 73 73 16 02 06 21 |.lpidPro|cess...!|
|00000860| 02 63 62 16 04 08 22 08 | 63 62 4e 65 65 64 65 64 |.cb...".|cbNeeded|
|00000870| 16 04 0a 20 06 52 65 73 | 75 6c 74 16 06 00 63 28 |... .Res|ult...c(|
|00000880| 12 45 6e 75 6d 50 72 6f | 63 65 73 73 4d 6f 64 75 |.EnumPro|cessModu|
|00000890| 6c 65 73 80 c0 7e 5d 45 | 00 5a 04 06 21 08 68 50 |les..~]E|.Z..!.hP|
|000008a0| 72 6f 63 65 73 73 16 08 | 06 21 09 6c 70 68 4d 6f |rocess..|.!.lphMo|
|000008b0| 64 75 6c 65 16 02 08 21 | 02 63 62 16 04 0a 22 0a |dule...!|.cb...".|
|000008c0| 6c 70 63 62 4e 65 65 64 | 65 64 26 04 10 20 06 52 |lpcbNeed|ed&.. .R|
|000008d0| 65 73 75 6c 74 16 06 00 | 63 28 12 47 65 74 4d 6f |esult...|c(.GetMo|
|000008e0| 64 75 6c 65 42 61 73 65 | 4e 61 6d 65 41 80 47 f6 |duleBase|NameA.G.|
|000008f0| bb 70 00 5a 04 04 21 08 | 68 50 72 6f 63 65 73 73 |.p.Z..!.|hProcess|
|00000900| 16 08 06 21 07 68 4d 6f | 64 75 6c 65 16 0a 08 21 |...!.hMo|dule...!|
|00000910| 0a 6c 70 42 61 73 65 4e | 61 6d 65 16 0c 0a 21 05 |.lpBaseN|ame...!.|
|00000920| 6e 53 69 7a 65 26 04 10 | 20 06 52 65 73 75 6c 74 |nSize&..| .Result|
|00000930| 16 04 00 63 28 12 47 65 | 74 4d 6f 64 75 6c 65 42 |...c(.Ge|tModuleB|
|00000940| 61 73 65 4e 61 6d 65 57 | 80 6f 1a 04 96 00 5a 04 |aseNameW|.o....Z.|
|00000950| 04 21 08 68 50 72 6f 63 | 65 73 73 16 08 06 21 07 |.!.hProc|ess...!.|
|00000960| 68 4d 6f 64 75 6c 65 16 | 0a 08 21 0a 6c 70 42 61 |hModule.|..!.lpBa|
|00000970| 73 65 4e 61 6d 65 16 0e | 0a 21 05 6e 53 69 7a 65 |seName..|.!.nSize|
|00000980| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000990| 11 47 65 74 4d 6f 64 75 | 6c 65 42 61 73 65 4e 61 |.GetModu|leBaseNa|
|000009a0| 6d 65 80 47 f6 bb 70 00 | 5a 04 04 21 08 68 50 72 |me.G..p.|Z..!.hPr|
|000009b0| 6f 63 65 73 73 16 08 06 | 21 07 68 4d 6f 64 75 6c |ocess...|!.hModul|
|000009c0| 65 16 0a 08 21 0a 6c 70 | 42 61 73 65 4e 61 6d 65 |e...!.lp|BaseName|
|000009d0| 16 12 0a 21 05 6e 53 69 | 7a 65 26 04 10 20 06 52 |...!.nSi|ze&.. .R|
|000009e0| 65 73 75 6c 74 16 04 00 | 63 28 14 47 65 74 4d 6f |esult...|c(.GetMo|
|000009f0| 64 75 6c 65 46 69 6c 65 | 4e 61 6d 65 45 78 41 80 |duleFile|NameExA.|
|00000a00| 47 f6 bb 70 00 5a 04 04 | 21 08 68 50 72 6f 63 65 |G..p.Z..|!.hProce|
|00000a10| 73 73 16 08 06 21 07 68 | 4d 6f 64 75 6c 65 16 0a |ss...!.h|Module..|
|00000a20| 08 21 0a 6c 70 46 69 6c | 65 6e 61 6d 65 16 0c 0a |.!.lpFil|ename...|
|00000a30| 21 05 6e 53 69 7a 65 26 | 04 10 20 06 52 65 73 75 |!.nSize&|.. .Resu|
|00000a40| 6c 74 16 04 00 63 28 14 | 47 65 74 4d 6f 64 75 6c |lt...c(.|GetModul|
|00000a50| 65 46 69 6c 65 4e 61 6d | 65 45 78 57 80 6f 1a 04 |eFileNam|eExW.o..|
|00000a60| 96 00 5a 04 04 21 08 68 | 50 72 6f 63 65 73 73 16 |..Z..!.h|Process.|
|00000a70| 08 06 21 07 68 4d 6f 64 | 75 6c 65 16 0a 08 21 0a |..!.hMod|ule...!.|
|00000a80| 6c 70 46 69 6c 65 6e 61 | 6d 65 16 0e 0a 21 05 6e |lpFilena|me...!.n|
|00000a90| 53 69 7a 65 26 04 10 20 | 06 52 65 73 75 6c 74 16 |Size&.. |.Result.|
|00000aa0| 04 00 63 28 13 47 65 74 | 4d 6f 64 75 6c 65 46 69 |..c(.Get|ModuleFi|
|00000ab0| 6c 65 4e 61 6d 65 45 78 | 80 47 f6 bb 70 00 5a 04 |leNameEx|.G..p.Z.|
|00000ac0| 04 21 08 68 50 72 6f 63 | 65 73 73 16 08 06 21 07 |.!.hProc|ess...!.|
|00000ad0| 68 4d 6f 64 75 6c 65 16 | 0a 08 21 0a 6c 70 46 69 |hModule.|..!.lpFi|
|00000ae0| 6c 65 6e 61 6d 65 16 12 | 0a 21 05 6e 53 69 7a 65 |lename..|.!.nSize|
|00000af0| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000b00| 14 47 65 74 4d 6f 64 75 | 6c 65 49 6e 66 6f 72 6d |.GetModu|leInform|
|00000b10| 61 74 69 6f 6e 80 4b 94 | bf 6f 00 5a 04 06 21 08 |ation.K.|.o.Z..!.|
|00000b20| 68 50 72 6f 63 65 73 73 | 16 08 06 21 07 68 4d 6f |hProcess|...!.hMo|
|00000b30| 64 75 6c 65 16 0a 08 21 | 09 6c 70 6d 6f 64 69 6e |dule...!|.lpmodin|
|00000b40| 66 6f 16 2a 0a 21 02 63 | 62 26 04 10 20 06 52 65 |fo.*.!.c|b&.. .Re|
|00000b50| 73 75 6c 74 16 06 00 63 | 28 0f 45 6d 70 74 79 57 |sult...c|(.EmptyW|
|00000b60| 6f 72 6b 69 6e 67 53 65 | 74 80 9e c5 17 ec 00 32 |orkingSe|t......2|
|00000b70| 04 06 21 08 68 50 72 6f | 63 65 73 73 16 08 06 20 |..!.hPro|cess... |
|00000b80| 06 52 65 73 75 6c 74 16 | 06 00 63 28 0f 51 75 65 |.Result.|..c(.Que|
|00000b90| 72 79 57 6f 72 6b 69 6e | 67 53 65 74 80 06 dc 19 |ryWorkin|gSet....|
|00000ba0| e5 00 46 04 06 21 08 68 | 50 72 6f 63 65 73 73 16 |..F..!.h|Process.|
|00000bb0| 08 06 21 02 70 76 16 10 | 08 21 02 63 62 16 04 0a |..!.pv..|.!.cb...|
|00000bc0| 20 06 52 65 73 75 6c 74 | 16 06 00 63 28 1b 49 6e | .Result|...c(.In|
|00000bd0| 69 74 69 61 6c 69 7a 65 | 50 72 6f 63 65 73 73 46 |itialize|ProcessF|
|00000be0| 6f 72 57 73 57 61 74 63 | 68 80 9e c5 17 ec 00 32 |orWsWatc|h......2|
|00000bf0| 04 06 21 08 68 50 72 6f | 63 65 73 73 16 08 06 20 |..!.hPro|cess... |
|00000c00| 06 52 65 73 75 6c 74 16 | 06 00 63 28 12 47 65 74 |.Result.|..c(.Get|
|00000c10| 4d 61 70 70 65 64 46 69 | 6c 65 4e 61 6d 65 41 80 |MappedFi|leNameA.|
|00000c20| 8f a9 87 da 00 5a 04 04 | 21 08 68 50 72 6f 63 65 |.....Z..|!.hProce|
|00000c30| 73 73 16 08 06 21 03 6c | 70 76 16 10 08 21 0a 6c |ss...!.l|pv...!.l|
|00000c40| 70 46 69 6c 65 6e 61 6d | 65 16 0c 0a 21 05 6e 53 |pFilenam|e...!.nS|
|00000c50| 69 7a 65 26 04 10 20 06 | 52 65 73 75 6c 74 16 04 |ize&.. .|Result..|
|00000c60| 00 63 28 12 47 65 74 4d | 61 70 70 65 64 46 69 6c |.c(.GetM|appedFil|
|00000c70| 65 4e 61 6d 65 57 80 b7 | cd cf ff 00 5a 04 04 21 |eNameW..|....Z..!|
|00000c80| 08 68 50 72 6f 63 65 73 | 73 16 08 06 21 03 6c 70 |.hProces|s...!.lp|
|00000c90| 76 16 10 08 21 0a 6c 70 | 46 69 6c 65 6e 61 6d 65 |v...!.lp|Filename|
|00000ca0| 16 0e 0a 21 05 6e 53 69 | 7a 65 26 04 10 20 06 52 |...!.nSi|ze&.. .R|
|00000cb0| 65 73 75 6c 74 16 04 00 | 63 28 11 47 65 74 4d 61 |esult...|c(.GetMa|
|00000cc0| 70 70 65 64 46 69 6c 65 | 4e 61 6d 65 80 8f a9 87 |ppedFile|Name....|
|00000cd0| da 00 5a 04 04 21 08 68 | 50 72 6f 63 65 73 73 16 |..Z..!.h|Process.|
|00000ce0| 08 06 21 03 6c 70 76 16 | 10 08 21 0a 6c 70 46 69 |..!.lpv.|..!.lpFi|
|00000cf0| 6c 65 6e 61 6d 65 16 12 | 0a 21 05 6e 53 69 7a 65 |lename..|.!.nSize|
|00000d00| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000d10| 18 47 65 74 44 65 76 69 | 63 65 44 72 69 76 65 72 |.GetDevi|ceDriver|
|00000d20| 42 61 73 65 4e 61 6d 65 | 41 80 97 de 92 39 00 46 |BaseName|A....9.F|
|00000d30| 04 04 21 09 49 6d 61 67 | 65 42 61 73 65 16 10 06 |..!.Imag|eBase...|
|00000d40| 21 0a 6c 70 42 61 73 65 | 4e 61 6d 65 16 0c 08 21 |!.lpBase|Name...!|
|00000d50| 05 6e 53 69 7a 65 16 04 | 0a 20 06 52 65 73 75 6c |.nSize..|. .Resul|
|00000d60| 74 16 04 00 63 28 18 47 | 65 74 44 65 76 69 63 65 |t...c(.G|etDevice|
|00000d70| 44 72 69 76 65 72 42 61 | 73 65 4e 61 6d 65 57 80 |DriverBa|seNameW.|
|00000d80| bf 02 db 5e 00 46 04 04 | 21 09 49 6d 61 67 65 42 |...^.F..|!.ImageB|
|00000d90| 61 73 65 16 10 06 21 0a | 6c 70 42 61 73 65 4e 61 |ase...!.|lpBaseNa|
|00000da0| 6d 65 16 0e 08 21 05 6e | 53 69 7a 65 16 04 0a 20 |me...!.n|Size... |
|00000db0| 06 52 65 73 75 6c 74 16 | 04 00 63 28 17 47 65 74 |.Result.|..c(.Get|
|00000dc0| 44 65 76 69 63 65 44 72 | 69 76 65 72 42 61 73 65 |DeviceDr|iverBase|
|00000dd0| 4e 61 6d 65 80 97 de 92 | 39 00 46 04 04 21 09 49 |Name....|9.F..!.I|
|00000de0| 6d 61 67 65 42 61 73 65 | 16 10 06 21 0a 6c 70 42 |mageBase|...!.lpB|
|00000df0| 61 73 65 4e 61 6d 65 16 | 12 08 21 05 6e 53 69 7a |aseName.|..!.nSiz|
|00000e00| 65 16 04 0a 20 06 52 65 | 73 75 6c 74 16 04 00 63 |e... .Re|sult...c|
|00000e10| 28 18 47 65 74 44 65 76 | 69 63 65 44 72 69 76 65 |(.GetDev|iceDrive|
|00000e20| 72 46 69 6c 65 4e 61 6d | 65 41 80 97 de 92 39 00 |rFileNam|eA....9.|
|00000e30| 46 04 04 21 09 49 6d 61 | 67 65 42 61 73 65 16 10 |F..!.Ima|geBase..|
|00000e40| 06 21 0a 6c 70 46 69 6c | 65 4e 61 6d 65 16 0c 08 |.!.lpFil|eName...|
|00000e50| 21 05 6e 53 69 7a 65 16 | 04 0a 20 06 52 65 73 75 |!.nSize.|.. .Resu|
|00000e60| 6c 74 16 04 00 63 28 18 | 47 65 74 44 65 76 69 63 |lt...c(.|GetDevic|
|00000e70| 65 44 72 69 76 65 72 46 | 69 6c 65 4e 61 6d 65 57 |eDriverF|ileNameW|
|00000e80| 80 bf 02 db 5e 00 46 04 | 04 21 09 49 6d 61 67 65 |....^.F.|.!.Image|
|00000e90| 42 61 73 65 16 10 06 21 | 0a 6c 70 46 69 6c 65 4e |Base...!|.lpFileN|
|00000ea0| 61 6d 65 16 0e 08 21 05 | 6e 53 69 7a 65 16 04 0a |ame...!.|nSize...|
|00000eb0| 20 06 52 65 73 75 6c 74 | 16 04 00 63 28 17 47 65 | .Result|...c(.Ge|
|00000ec0| 74 44 65 76 69 63 65 44 | 72 69 76 65 72 46 69 6c |tDeviceD|riverFil|
|00000ed0| 65 4e 61 6d 65 80 97 de | 92 39 00 46 04 04 21 09 |eName...|.9.F..!.|
|00000ee0| 49 6d 61 67 65 42 61 73 | 65 16 10 06 21 0a 6c 70 |ImageBas|e...!.lp|
|00000ef0| 46 69 6c 65 4e 61 6d 65 | 16 12 08 21 05 6e 53 69 |FileName|...!.nSi|
|00000f00| 7a 65 16 04 0a 20 06 52 | 65 73 75 6c 74 16 04 00 |ze... .R|esult...|
|00000f10| 63 28 11 45 6e 75 6d 44 | 65 76 69 63 65 44 72 69 |c(.EnumD|eviceDri|
|00000f20| 76 65 72 73 80 95 6f b3 | 71 00 46 04 06 21 0b 6c |vers..o.|q.F..!.l|
|00000f30| 70 49 6d 61 67 65 42 61 | 73 65 16 1a 06 21 02 63 |pImageBa|se...!.c|
|00000f40| 62 16 04 08 22 0a 6c 70 | 63 62 4e 65 65 64 65 64 |b...".lp|cbNeeded|
|00000f50| 16 04 0a 20 06 52 65 73 | 75 6c 74 16 06 00 63 28 |... .Res|ult...c(|
|00000f60| 14 47 65 74 50 72 6f 63 | 65 73 73 4d 65 6d 6f 72 |.GetProc|essMemor|
|00000f70| 79 49 6e 66 6f 80 49 c3 | e2 15 00 46 04 06 21 07 |yInfo.I.|...F..!.|
|00000f80| 50 72 6f 63 65 73 73 16 | 08 06 21 0e 70 70 73 6d |Process.|..!.ppsm|
|00000f90| 65 6d 43 6f 75 6e 74 65 | 72 73 16 4a 08 21 02 63 |emCounte|rs.J.!.c|
|00000fa0| 62 16 04 0a 20 06 52 65 | 73 75 6c 74 16 06 00 63 |b... .Re|sult...c|
|00000fb0| 28 0c 46 69 6e 61 6c 69 | 7a 61 74 69 6f 6e 80 58 |(.Finali|zation.X|
|00000fc0| 2c 54 64 00 5c 21 20 52 | 63 28 05 50 73 61 70 69 |,Td.\! R|c(.Psapi|
|00000fd0| 80 00 00 00 00 00 10 21 | 10 52 63 45 00 08 2c 10 |.......!|.RcE..,.|
|00000fe0| 48 00 08 2e 04 06 83 6a | 21 0b 6c 70 69 64 50 72 |H......j|!.lpidPr|
|00000ff0| 6f 63 65 73 73 06 02 00 | 21 02 63 62 06 04 00 22 |ocess...|!.cb..."|
|00001000| 08 63 62 4e 65 65 64 65 | 64 06 04 00 63 48 00 08 |.cbNeede|d...cH..|
|00001010| 30 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |0...j!.h|Process.|
|00001020| 08 00 21 09 6c 70 68 4d | 6f 64 75 6c 65 06 02 00 |..!.lphM|odule...|
|00001030| 21 02 63 62 06 04 00 22 | 0a 6c 70 63 62 4e 65 65 |!.cb..."|.lpcbNee|
|00001040| 64 65 64 06 04 00 63 48 | 00 08 32 04 04 83 6a 21 |ded...cH|..2...j!|
|00001050| 08 68 50 72 6f 63 65 73 | 73 06 08 00 21 07 68 4d |.hProces|s...!.hM|
|00001060| 6f 64 75 6c 65 06 0a 00 | 21 0a 6c 70 42 61 73 65 |odule...|!.lpBase|
|00001070| 4e 61 6d 65 06 0c 00 21 | 05 6e 53 69 7a 65 06 04 |Name...!|.nSize..|
|00001080| 00 63 48 00 08 34 04 04 | 83 6a 21 08 68 50 72 6f |.cH..4..|.j!.hPro|
|00001090| 63 65 73 73 06 08 00 21 | 07 68 4d 6f 64 75 6c 65 |cess...!|.hModule|
|000010a0| 06 0a 00 21 0a 6c 70 42 | 61 73 65 4e 61 6d 65 06 |...!.lpB|aseName.|
|000010b0| 0e 00 21 05 6e 53 69 7a | 65 06 04 00 63 48 00 08 |..!.nSiz|e...cH..|
|000010c0| 38 04 04 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |8...j!.h|Process.|
|000010d0| 08 00 21 07 68 4d 6f 64 | 75 6c 65 06 0a 00 21 0a |..!.hMod|ule...!.|
|000010e0| 6c 70 46 69 6c 65 6e 61 | 6d 65 06 0c 00 21 05 6e |lpFilena|me...!.n|
|000010f0| 53 69 7a 65 06 04 00 63 | 48 00 08 3a 04 04 83 6a |Size...c|H..:...j|
|00001100| 21 08 68 50 72 6f 63 65 | 73 73 06 08 00 21 07 68 |!.hProce|ss...!.h|
|00001110| 4d 6f 64 75 6c 65 06 0a | 00 21 0a 6c 70 46 69 6c |Module..|.!.lpFil|
|00001120| 65 6e 61 6d 65 06 0e 00 | 21 05 6e 53 69 7a 65 06 |ename...|!.nSize.|
|00001130| 04 00 63 4d 00 18 3e 00 | 2c 0b 6c 70 42 61 73 65 |..cM..>.|,.lpBase|
|00001140| 4f 66 44 6c 6c 04 10 00 | 2c 0b 53 69 7a 65 4f 66 |OfDll...|,.SizeOf|
|00001150| 49 6d 61 67 65 04 04 08 | 2c 0a 45 6e 74 72 79 50 |Image...|,.EntryP|
|00001160| 6f 69 6e 74 04 10 10 63 | 45 00 08 42 28 48 00 08 |oint...c|E..B(H..|
|00001170| 48 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |H...j!.h|Process.|
|00001180| 08 00 21 07 68 4d 6f 64 | 75 6c 65 06 0a 00 21 09 |..!.hMod|ule...!.|
|00001190| 6c 70 6d 6f 64 69 6e 66 | 6f 06 2a 00 21 02 63 62 |lpmodinf|o.*.!.cb|
|000011a0| 06 04 00 63 48 00 08 4a | 04 06 83 6a 21 08 68 50 |...cH..J|...j!.hP|
|000011b0| 72 6f 63 65 73 73 06 08 | 00 63 48 00 08 4c 04 06 |rocess..|.cH..L..|
|000011c0| 83 6a 21 08 68 50 72 6f | 63 65 73 73 06 08 00 21 |.j!.hPro|cess...!|
|000011d0| 02 70 76 06 10 00 21 02 | 63 62 06 04 00 63 48 00 |.pv...!.|cb...cH.|
|000011e0| 08 4e 04 06 83 6a 21 08 | 68 50 72 6f 63 65 73 73 |.N...j!.|hProcess|
|000011f0| 06 08 00 63 4d 00 10 50 | 00 2c 0a 46 61 75 6c 74 |...cM..P|.,.Fault|
|00001200| 69 6e 67 50 63 04 10 00 | 2c 0a 46 61 75 6c 74 69 |ingPc...|,.Faulti|
|00001210| 6e 67 56 61 04 10 08 63 | 45 00 08 54 34 48 00 08 |ngVa...c|E..T4H..|
|00001220| 5a 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |Z...j!.h|Process.|
|00001230| 08 00 21 0b 6c 70 57 61 | 74 63 68 49 6e 66 6f 06 |..!.lpWa|tchInfo.|
|00001240| 36 00 21 02 63 62 06 04 | 00 63 48 00 08 5c 04 04 |6.!.cb..|.cH..\..|
|00001250| 83 6a 21 08 68 50 72 6f | 63 65 73 73 06 08 00 21 |.j!.hPro|cess...!|
|00001260| 03 6c 70 76 06 10 00 21 | 0a 6c 70 46 69 6c 65 6e |.lpv...!|.lpFilen|
|00001270| 61 6d 65 06 0c 00 21 05 | 6e 53 69 7a 65 06 04 00 |ame...!.|nSize...|
|00001280| 63 48 00 08 5e 04 04 83 | 6a 21 08 68 50 72 6f 63 |cH..^...|j!.hProc|
|00001290| 65 73 73 06 08 00 21 03 | 6c 70 76 06 10 00 21 0a |ess...!.|lpv...!.|
|000012a0| 6c 70 46 69 6c 65 6e 61 | 6d 65 06 0e 00 21 05 6e |lpFilena|me...!.n|
|000012b0| 53 69 7a 65 06 04 00 63 | 48 00 08 62 04 04 83 6a |Size...c|H..b...j|
|000012c0| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|000012d0| 6c 70 42 61 73 65 4e 61 | 6d 65 06 0c 00 21 05 6e |lpBaseNa|me...!.n|
|000012e0| 53 69 7a 65 06 04 00 63 | 48 00 08 64 04 04 83 6a |Size...c|H..d...j|
|000012f0| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001300| 6c 70 42 61 73 65 4e 61 | 6d 65 06 0e 00 21 05 6e |lpBaseNa|me...!.n|
|00001310| 53 69 7a 65 06 04 00 63 | 48 00 08 68 04 04 83 6a |Size...c|H..h...j|
|00001320| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001330| 6c 70 46 69 6c 65 4e 61 | 6d 65 06 0c 00 21 05 6e |lpFileNa|me...!.n|
|00001340| 53 69 7a 65 06 04 00 63 | 48 00 08 6a 04 04 83 6a |Size...c|H..j...j|
|00001350| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001360| 6c 70 46 69 6c 65 4e 61 | 6d 65 06 0e 00 21 05 6e |lpFileNa|me...!.n|
|00001370| 53 69 7a 65 06 04 00 63 | 48 00 08 6e 04 06 83 6a |Size...c|H..n...j|
|00001380| 21 0b 6c 70 49 6d 61 67 | 65 42 61 73 65 06 1a 00 |!.lpImag|eBase...|
|00001390| 21 02 63 62 06 04 00 22 | 0a 6c 70 63 62 4e 65 65 |!.cb..."|.lpcbNee|
|000013a0| 64 65 64 06 04 00 63 4d | 00 50 70 00 2c 02 63 62 |ded...cM|.Pp.,.cb|
|000013b0| 04 04 00 2c 0e 50 61 67 | 65 46 61 75 6c 74 43 6f |...,.Pag|eFaultCo|
|000013c0| 75 6e 74 04 04 08 2c 12 | 50 65 61 6b 57 6f 72 6b |unt...,.|PeakWork|
|000013d0| 69 6e 67 53 65 74 53 69 | 7a 65 04 04 10 2c 0e 57 |ingSetSi|ze...,.W|
|000013e0| 6f 72 6b 69 6e 67 53 65 | 74 53 69 7a 65 04 04 18 |orkingSe|tSize...|
|000013f0| 2c 17 51 75 6f 74 61 50 | 65 61 6b 50 61 67 65 64 |,.QuotaP|eakPaged|
|00001400| 50 6f 6f 6c 55 73 61 67 | 65 04 04 20 2c 13 51 75 |PoolUsag|e.. ,.Qu|
|00001410| 6f 74 61 50 61 67 65 64 | 50 6f 6f 6c 55 73 61 67 |otaPaged|PoolUsag|
|00001420| 65 04 04 28 2c 1a 51 75 | 6f 74 61 50 65 61 6b 4e |e..(,.Qu|otaPeakN|
|00001430| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 55 73 61 67 65 |onPagedP|oolUsage|
|00001440| 04 04 30 2c 16 51 75 6f | 74 61 4e 6f 6e 50 61 67 |..0,.Quo|taNonPag|
|00001450| 65 64 50 6f 6f 6c 55 73 | 61 67 65 04 04 38 2c 0d |edPoolUs|age..8,.|
|00001460| 50 61 67 65 66 69 6c 65 | 55 73 61 67 65 04 04 40 |Pagefile|Usage..@|
|00001470| 2c 11 50 65 61 6b 50 61 | 67 65 66 69 6c 65 55 73 |,.PeakPa|gefileUs|
|00001480| 61 67 65 04 04 48 63 45 | 00 08 74 48 45 00 08 78 |age..HcE|..tHE..x|
|00001490| 48 48 00 08 7a 04 06 83 | 6a 21 07 50 72 6f 63 65 |HH..z...|j!.Proce|
|000014a0| 73 73 06 08 00 21 0e 70 | 70 73 6d 65 6d 43 6f 75 |ss...!.p|psmemCou|
|000014b0| 6e 74 65 72 73 06 4a 00 | 21 02 63 62 06 04 00 63 |nters.J.|!.cb...c|
|000014c0| 44 00 08 00 50 0f 00 00 | 00 80 0f ff ff ff 7f 10 |D...P...|........|
|000014d0| 40 00 00 00 6c 85 1c 53 | bb 00 00 00 00 83 3b 00 |@...l..S|......;.|
|000014e0| 0f 85 b7 01 00 00 68 cc | 01 00 00 e8 00 00 00 00 |......h.|........|
|000014f0| 89 03 83 3b 20 73 08 33 | c0 89 03 33 c0 5b c3 68 |...; s.3|...3.[.h|
|00001500| d8 01 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |......P.|........|
|00001510| 00 68 e8 01 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.h......|P.......|
|00001520| 00 00 00 68 fc 01 00 00 | 8b 03 50 e8 00 00 00 00 |...h....|..P.....|
|00001530| a3 00 00 00 00 68 10 02 | 00 00 8b 03 50 e8 00 00 |.....h..|....P...|
|00001540| 00 00 a3 00 00 00 00 68 | 28 02 00 00 8b 03 50 e8 |.......h|(.....P.|
|00001550| 00 00 00 00 a3 00 00 00 | 00 68 3c 02 00 00 8b 03 |........|.h<.....|
|00001560| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 fc 01 00 00 |P.......|...h....|
|00001570| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 68 10 02 |..P.....|.....h..|
|00001580| 00 00 8b 03 50 e8 00 00 | 00 00 a3 00 00 00 00 68 |....P...|.......h|
|00001590| 54 02 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |T.....P.|........|
|000015a0| 00 68 6c 02 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.hl.....|P.......|
|000015b0| 00 00 00 68 7c 02 00 00 | 8b 03 50 e8 00 00 00 00 |...h|...|..P.....|
|000015c0| a3 00 00 00 00 68 8c 02 | 00 00 8b 03 50 e8 00 00 |.....h..|....P...|
|000015d0| 00 00 a3 00 00 00 00 68 | a8 02 00 00 8b 03 50 e8 |.......h|......P.|
|000015e0| 00 00 00 00 a3 00 00 00 | 00 68 bc 02 00 00 8b 03 |........|.h......|
|000015f0| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 d8 02 00 00 |P.......|...h....|
|00001600| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 68 f4 02 |..P.....|.....h..|
|00001610| 00 00 8b 03 50 e8 00 00 | 00 00 a3 00 00 00 00 68 |....P...|.......h|
|00001620| 08 03 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |......P.|........|
|00001630| 00 68 24 03 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.h$.....|P.......|
|00001640| 00 00 00 68 a8 02 00 00 | 8b 03 50 e8 00 00 00 00 |...h....|..P.....|
|00001650| a3 00 00 00 00 68 bc 02 | 00 00 8b 03 50 e8 00 00 |.....h..|....P...|
|00001660| 00 00 a3 00 00 00 00 68 | d8 02 00 00 8b 03 50 e8 |.......h|......P.|
|00001670| 00 00 00 00 a3 00 00 00 | 00 68 40 03 00 00 8b 03 |........|.h@.....|
|00001680| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 54 03 00 00 |P.......|...hT...|
|00001690| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 b0 01 5b |..P.....|.......[|
|000016a0| c3 00 00 50 53 41 50 49 | 2e 64 6c 6c 00 00 00 45 |...PSAPI|.dll...E|
|000016b0| 6e 75 6d 50 72 6f 63 65 | 73 73 65 73 00 00 00 45 |numProce|sses...E|
|000016c0| 6e 75 6d 50 72 6f 63 65 | 73 73 4d 6f 64 75 6c 65 |numProce|ssModule|
|000016d0| 73 00 00 47 65 74 4d 6f | 64 75 6c 65 42 61 73 65 |s..GetMo|duleBase|
|000016e0| 4e 61 6d 65 41 00 00 47 | 65 74 4d 6f 64 75 6c 65 |NameA..G|etModule|
|000016f0| 46 69 6c 65 4e 61 6d 65 | 45 78 41 00 00 00 00 47 |FileName|ExA....G|
|00001700| 65 74 4d 6f 64 75 6c 65 | 42 61 73 65 4e 61 6d 65 |etModule|BaseName|
|00001710| 57 00 00 47 65 74 4d 6f | 64 75 6c 65 46 69 6c 65 |W..GetMo|duleFile|
|00001720| 4e 61 6d 65 45 78 57 00 | 00 00 00 47 65 74 4d 6f |NameExW.|...GetMo|
|00001730| 64 75 6c 65 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |duleInfo|rmation.|
|00001740| 00 00 00 45 6d 70 74 79 | 57 6f 72 6b 69 6e 67 53 |...Empty|WorkingS|
|00001750| 65 74 00 51 75 65 72 79 | 57 6f 72 6b 69 6e 67 53 |et.Query|WorkingS|
|00001760| 65 74 00 49 6e 69 74 69 | 61 6c 69 7a 65 50 72 6f |et.Initi|alizePro|
|00001770| 63 65 73 73 46 6f 72 57 | 73 57 61 74 63 68 00 47 |cessForW|sWatch.G|
|00001780| 65 74 4d 61 70 70 65 64 | 46 69 6c 65 4e 61 6d 65 |etMapped|FileName|
|00001790| 41 00 00 47 65 74 44 65 | 76 69 63 65 44 72 69 76 |A..GetDe|viceDriv|
|000017a0| 65 72 42 61 73 65 4e 61 | 6d 65 41 00 00 00 00 47 |erBaseNa|meA....G|
|000017b0| 65 74 44 65 76 69 63 65 | 44 72 69 76 65 72 46 69 |etDevice|DriverFi|
|000017c0| 6c 65 4e 61 6d 65 41 00 | 00 00 00 47 65 74 4d 61 |leNameA.|...GetMa|
|000017d0| 70 70 65 64 46 69 6c 65 | 4e 61 6d 65 57 00 00 47 |ppedFile|NameW..G|
|000017e0| 65 74 44 65 76 69 63 65 | 44 72 69 76 65 72 42 61 |etDevice|DriverBa|
|000017f0| 73 65 4e 61 6d 65 57 00 | 00 00 00 47 65 74 44 65 |seNameW.|...GetDe|
|00001800| 76 69 63 65 44 72 69 76 | 65 72 46 69 6c 65 4e 61 |viceDriv|erFileNa|
|00001810| 6d 65 57 00 00 00 00 45 | 6e 75 6d 44 65 76 69 63 |meW....E|numDevic|
|00001820| 65 44 72 69 76 65 72 73 | 00 00 00 47 65 74 50 72 |eDrivers|...GetPr|
|00001830| 6f 63 65 73 73 4d 65 6d | 6f 72 79 49 6e 66 6f 00 |ocessMem|oryInfo.|
|00001840| 00 00 00 53 56 57 8b f9 | 8b f2 8b d8 e8 00 00 00 |...SVW..|........|
|00001850| 00 84 c0 74 0b 57 56 53 | ff 15 00 00 00 00 eb 02 |...t.WVS|........|
|00001860| 33 c0 5f 5e 5b c3 55 8b | ec 53 56 57 8b f9 8b f2 |3._^[.U.|.SVW....|
|00001870| 8b d8 e8 00 00 00 00 84 | c0 74 0f 8b 45 08 50 57 |........|.t..E.PW|
|00001880| 56 53 ff 15 00 00 00 00 | eb 02 33 c0 5f 5e 5b 5d |VS......|..3._^[]|
|00001890| c2 04 00 55 8b ec 53 56 | 57 8b f9 8b f2 8b d8 e8 |...U..SV|W.......|
|000018a0| 00 00 00 00 84 c0 74 0f | 8b 45 08 50 57 56 53 ff |......t.|.E.PWVS.|
|000018b0| 15 00 00 00 00 eb 02 33 | c0 5f 5e 5b 5d c2 04 00 |.......3|._^[]...|
|000018c0| 55 8b ec 53 56 57 8b f9 | 8b f2 8b d8 e8 00 00 00 |U..SVW..|........|
|000018d0| 00 84 c0 74 0f 8b 45 08 | 50 57 56 53 ff 15 00 00 |...t..E.|PWVS....|
|000018e0| 00 00 eb 02 33 c0 5f 5e | 5b 5d c2 04 00 55 8b ec |....3._^|[]...U..|
|000018f0| 53 56 57 8b f9 8b f2 8b | d8 e8 00 00 00 00 84 c0 |SVW.....|........|
|00001900| 74 0f 8b 45 08 50 57 56 | 53 ff 15 00 00 00 00 eb |t..E.PWV|S.......|
|00001910| 02 33 c0 5f 5e 5b 5d c2 | 04 00 55 8b ec 53 56 57 |.3._^[].|..U..SVW|
|00001920| 8b f9 8b f2 8b d8 e8 00 | 00 00 00 84 c0 74 0f 8b |........|.....t..|
|00001930| 45 08 50 57 56 53 ff 15 | 00 00 00 00 eb 02 33 c0 |E.PWVS..|......3.|
|00001940| 5f 5e 5b 5d c2 04 00 55 | 8b ec 53 56 57 8b f9 8b |_^[]...U|..SVW...|
|00001950| f2 8b d8 e8 00 00 00 00 | 84 c0 74 0f 8b 45 08 50 |........|..t..E.P|
|00001960| 57 56 53 ff 15 00 00 00 | 00 eb 02 33 c0 5f 5e 5b |WVS.....|...3._^[|
|00001970| 5d c2 04 00 55 8b ec 53 | 56 57 8b f9 8b f2 8b d8 |]...U..S|VW......|
|00001980| e8 00 00 00 00 84 c0 74 | 0f 8b 45 08 50 57 56 53 |.......t|..E.PWVS|
|00001990| ff 15 00 00 00 00 eb 02 | 33 c0 5f 5e 5b 5d c2 04 |........|3._^[]..|
|000019a0| 00 55 8b ec 53 56 57 8b | f9 8b f2 8b d8 e8 00 00 |.U..SVW.|........|
|000019b0| 00 00 84 c0 74 0f 8b 45 | 08 50 57 56 53 ff 15 00 |....t..E|.PWVS...|
|000019c0| 00 00 00 eb 02 33 c0 5f | 5e 5b 5d c2 04 00 53 8b |.....3._|^[]...S.|
|000019d0| d8 e8 00 00 00 00 84 c0 | 74 09 53 ff 15 00 00 00 |........|t.S.....|
|000019e0| 00 5b c3 33 c0 5b c3 53 | 56 57 8b f9 8b f2 8b d8 |.[.3.[.S|VW......|
|000019f0| e8 00 00 00 00 84 c0 74 | 0b 57 56 53 ff 15 00 00 |.......t|.WVS....|
|00001a00| 00 00 eb 02 33 c0 5f 5e | 5b c3 53 8b d8 e8 00 00 |....3._^|[.S.....|
|00001a10| 00 00 84 c0 74 09 53 ff | 15 00 00 00 00 5b c3 33 |....t.S.|.....[.3|
|00001a20| c0 5b c3 55 8b ec 53 56 | 57 8b f9 8b f2 8b d8 e8 |.[.U..SV|W.......|
|00001a30| 00 00 00 00 84 c0 74 0f | 8b 45 08 50 57 56 53 ff |......t.|.E.PWVS.|
|00001a40| 15 00 00 00 00 eb 02 33 | c0 5f 5e 5b 5d c2 04 00 |.......3|._^[]...|
|00001a50| 55 8b ec 53 56 57 8b f9 | 8b f2 8b d8 e8 00 00 00 |U..SVW..|........|
|00001a60| 00 84 c0 74 0f 8b 45 08 | 50 57 56 53 ff 15 00 00 |...t..E.|PWVS....|
|00001a70| 00 00 eb 02 33 c0 5f 5e | 5b 5d c2 04 00 55 8b ec |....3._^|[]...U..|
|00001a80| 53 56 57 8b f9 8b f2 8b | d8 e8 00 00 00 00 84 c0 |SVW.....|........|
|00001a90| 74 0f 8b 45 08 50 57 56 | 53 ff 15 00 00 00 00 eb |t..E.PWV|S.......|
|00001aa0| 02 33 c0 5f 5e 5b 5d c2 | 04 00 53 56 57 8b f9 8b |.3._^[].|..SVW...|
|00001ab0| f2 8b d8 e8 00 00 00 00 | 84 c0 74 0b 57 56 53 ff |........|..t.WVS.|
|00001ac0| 15 00 00 00 00 eb 02 33 | c0 5f 5e 5b c3 53 56 57 |.......3|._^[.SVW|
|00001ad0| 8b f9 8b f2 8b d8 e8 00 | 00 00 00 84 c0 74 0b 57 |........|.....t.W|
|00001ae0| 56 53 ff 15 00 00 00 00 | eb 02 33 c0 5f 5e 5b c3 |VS......|..3._^[.|
|00001af0| 53 56 57 8b f9 8b f2 8b | d8 e8 00 00 00 00 84 c0 |SVW.....|........|
|00001b00| 74 0b 57 56 53 ff 15 00 | 00 00 00 eb 02 33 c0 5f |t.WVS...|.....3._|
|00001b10| 5e 5b c3 53 56 57 8b f9 | 8b f2 8b d8 e8 00 00 00 |^[.SVW..|........|
|00001b20| 00 84 c0 74 0b 57 56 53 | ff 15 00 00 00 00 eb 02 |...t.WVS|........|
|00001b30| 33 c0 5f 5e 5b c3 53 56 | 57 8b f9 8b f2 8b d8 e8 |3._^[.SV|W.......|
|00001b40| 00 00 00 00 84 c0 74 0b | 57 56 53 ff 15 00 00 00 |......t.|WVS.....|
|00001b50| 00 eb 02 33 c0 5f 5e 5b | c3 53 56 57 8b f9 8b f2 |...3._^[|.SVW....|
|00001b60| 8b d8 e8 00 00 00 00 84 | c0 74 0b 57 56 53 ff 15 |........|.t.WVS..|
|00001b70| 00 00 00 00 eb 02 33 c0 | 5f 5e 5b c3 53 56 57 8b |......3.|_^[.SVW.|
|00001b80| f9 8b f2 8b d8 e8 00 00 | 00 00 84 c0 74 0b 57 56 |........|....t.WV|
|00001b90| 53 ff 15 00 00 00 00 eb | 02 33 c0 5f 5e 5b c3 53 |S.......|.3._^[.S|
|00001ba0| 56 57 8b f9 8b f2 8b d8 | e8 00 00 00 00 84 c0 74 |VW......|.......t|
|00001bb0| 0b 57 56 53 ff 15 00 00 | 00 00 eb 02 33 c0 5f 5e |.WVS....|....3._^|
|00001bc0| 5b c3 55 8b ec 33 c0 55 | 68 25 00 00 00 64 ff 30 |[.U..3.U|h%...d.0|
|00001bd0| 64 89 20 ff 05 00 00 00 | 00 33 c0 5a 59 59 64 89 |d. .....|.3.ZYYd.|
|00001be0| 10 68 2c 00 00 00 c3 e9 | 00 00 00 00 eb f8 5d c3 |.h,.....|......].|
|00001bf0| 83 2d 00 00 00 00 01 c3 | 6d 59 02 00 05 ae 04 01 |.-......|mY......|
|00001c00| 7e 1c 01 ae 0a 02 0e 28 | 01 ae 10 02 10 0a 01 80 |~......(|........|
|00001c10| 0a 01 ae 10 02 10 0a 01 | 82 0a 01 ae 10 02 10 0a |........|........|
|00001c20| 01 84 0a 01 ae 10 02 10 | 0a 01 86 0a 01 ae 10 02 |........|........|
|00001c30| 10 0a 01 88 0a 01 ae 10 | 02 10 0a 01 8a 0a 01 ae |........|........|
|00001c40| 10 02 10 0a 01 8c 0a 01 | ae 10 02 10 0a 01 8e 0a |........|........|
|00001c50| 01 ae 10 02 10 0a 01 90 | 0a 01 ae 10 02 10 0a 01 |........|........|
|00001c60| 92 0a 01 ae 10 02 10 0a | 01 94 0a 01 ae 10 02 10 |........|........|
|00001c70| 0a 01 96 0a 01 ae 10 02 | 10 0a 01 98 0a 01 ae 10 |........|........|
|00001c80| 02 10 0a 01 9a 0a 01 ae | 10 02 10 0a 01 9c 0a 01 |........|........|
|00001c90| ae 10 02 10 0a 01 9e 0a | 01 ae 10 02 10 0a 01 a0 |........|........|
|00001ca0| 0a 01 ae 10 02 10 0a 01 | a2 0a 01 ae 10 02 10 0a |........|........|
|00001cb0| 01 a4 0a 01 ae 10 02 10 | 0a 01 a6 0a 01 ae 10 02 |........|........|
|00001cc0| 10 0a 01 a8 0a 01 ae 10 | 02 10 0a 01 aa 0a 01 ae |........|........|
|00001cd0| 10 02 10 0a 01 ac a9 06 | 05 b2 14 02 ae 1a 01 80 |........|........|
|00001ce0| 18 05 bc 1a 02 ae 22 01 | 82 1e 05 c8 1a 02 ae 22 |......".|......."|
|00001cf0| 01 84 1e 05 d4 1a 02 ae | 22 01 88 1e 05 e0 1a 02 |........|".......|
|00001d00| ae 22 01 8c 1e 05 ec 1a | 02 ae 22 01 86 1e 05 f8 |."......|..".....|
|00001d10| 1a 02 ae 22 01 8a 1e 05 | 09 02 1a 02 ae 22 01 8e |..."....|....."..|
|00001d20| 1e 05 21 02 1a 02 ae 22 | 01 90 1e 05 39 02 08 02 |..!...."|....9...|
|00001d30| ae 16 01 92 14 05 45 02 | 14 02 ae 1a 01 94 18 05 |......E.|........|
|00001d40| 59 02 08 02 ae 16 01 96 | 14 05 65 02 1a 02 ae 22 |Y.......|..e...."|
|00001d50| 01 98 1e 05 7d 02 1a 02 | ae 22 01 9e 1e 05 95 02 |....}...|."......|
|00001d60| 1a 02 ae 22 01 a4 1e 05 | ad 02 14 02 ae 1a 01 9a |..."....|........|
|00001d70| 18 05 c1 02 14 02 ae 1a | 01 a0 18 05 d5 02 14 02 |........|........|
|00001d80| ae 1a 01 a6 18 05 e9 02 | 14 02 ae 1a 01 9c 18 05 |........|........|
|00001d90| fd 02 14 02 ae 1a 01 a2 | 18 05 11 03 14 02 ae 1a |........|........|
|00001da0| 01 a8 18 05 25 03 14 02 | ae 1a 01 aa 18 05 39 03 |....%...|......9.|
|00001db0| 14 02 ae 1a 01 ac 18 05 | 4d 03 0e 01 4d 03 18 01 |........|M...M...|
|00001dc0| 7c 1a 01 4d 03 0c 02 2a | 10 05 51 03 04 01 7c 0c ||..M...*|..Q...|.|
|00001dd0| 06 51 03 90 00 91 02 02 | b5 06 00 93 a0 ce 51 03 |.Q......|......Q.|
|00001de0| 00 02 00 1a 2c 00 02 00 | 30 2e 00 02 00 34 30 00 |....,...|0....40.|
|00001df0| 02 00 36 32 00 02 00 3a | 34 00 02 00 3e 36 00 02 |..62...:|4...>6..|
|00001e00| 00 42 38 00 02 00 44 3a | 00 02 00 48 3c 00 02 00 |.B8...D:|...H<...|
|00001e10| 4c 3e 00 02 00 52 3e 02 | 02 00 54 3e 04 02 00 56 |L>...R>.|..T>...V|
|00001e20| 3e 06 02 00 58 40 00 02 | 00 5e 42 00 02 00 62 44 |>...X@..|.^B...bD|
|00001e30| 00 02 00 64 46 00 02 00 | 66 48 00 02 00 6a 4a 00 |...dF...|fH...jJ.|
|00001e40| 02 00 6e 4c 00 02 00 70 | 4e 00 02 00 72 50 00 02 |..nL...p|N...rP..|
|00001e50| 00 78 50 02 02 00 7a 50 | 04 02 00 7c 52 00 02 00 |.xP...zP|...|R...|
|00001e60| 82 54 00 02 00 86 56 00 | 02 00 88 58 00 02 00 8a |.T....V.|...X....|
|00001e70| 5a 00 02 00 8e 5c 00 02 | 00 94 5e 00 02 00 98 60 |Z....\..|..^....`|
|00001e80| 00 02 00 9c 62 00 02 00 | 9e 64 00 02 00 a2 66 00 |....b...|.d....f.|
|00001e90| 02 00 a6 68 00 02 00 a8 | 6a 00 02 00 ac 6c 00 02 |...h....|j....l..|
|00001ea0| 00 b0 6e 00 02 00 b4 70 | 00 02 00 bc 70 02 02 00 |..n....p|....p...|
|00001eb0| be 70 04 02 00 c0 70 06 | 02 00 c2 70 08 02 00 c4 |.p....p.|...p....|
|00001ec0| 70 0a 02 00 c6 70 0c 02 | 00 c8 70 0e 02 00 ca 70 |p....p..|..p....p|
|00001ed0| 10 02 00 cc 70 12 02 00 | ce 70 14 02 00 d0 72 00 |....p...|.p....r.|
|00001ee0| 02 00 d6 74 00 02 00 da | 76 00 02 00 dc 78 00 02 |...t....|v....x..|
|00001ef0| 00 de 7a 00 02 00 e2 b2 | 00 04 02 ea e1 03 bc 00 |..z.....|........|
|00001f00| 04 02 ee 01 04 c8 00 04 | 02 f4 21 04 d4 00 04 02 |........|..!.....|
|00001f10| fa 41 04 e0 00 04 02 01 | 02 61 04 ec 00 04 02 0d |.A......|.a......|
|00001f20| 02 81 04 f8 00 04 02 19 | 02 a1 04 09 02 00 04 02 |........|........|
|00001f30| 25 02 c1 04 21 02 00 04 | 02 31 02 e1 04 39 02 00 |%...!...|.1...9..|
|00001f40| 04 02 3d 02 fd 04 45 02 | 00 04 02 45 02 19 05 59 |..=...E.|...E...Y|
|00001f50| 02 00 04 02 4d 02 35 05 | 65 02 00 04 02 55 02 55 |....M.5.|e....U.U|
|00001f60| 05 7d 02 00 04 02 61 02 | 75 05 95 02 00 04 02 6d |.}....a.|u......m|
|00001f70| 02 95 05 ad 02 00 04 02 | 79 02 b5 05 c1 02 00 04 |........|y.......|
|00001f80| 02 85 02 d5 05 d5 02 00 | 04 02 91 02 f5 05 e9 02 |........|........|
|00001f90| 00 04 02 9d 02 15 06 fd | 02 00 04 02 a9 02 35 06 |........|......5.|
|00001fa0| 11 03 00 04 02 b5 02 55 | 06 25 03 00 04 02 c1 02 |.......U|.%......|
|00001fb0| 75 06 39 03 00 04 02 cd | 02 95 06 4d 03 00 02 00 |u.9.....|...M....|
|00001fc0| b1 06 98 04 3e 98 04 40 | 98 04 42 98 04 50 98 04 |....>..@|..B..P..|
|00001fd0| 52 98 04 54 98 04 70 98 | 04 72 98 04 74 98 04 b2 |R..T..p.|.r..t...|
|00001fe0| 98 04 bc 98 04 c8 98 04 | d4 98 04 e0 98 04 ec 98 |........|........|
|00001ff0| 04 f8 98 04 09 02 98 04 | 21 02 98 04 39 02 98 04 |........|!...9...|
|00002000| 45 02 98 04 59 02 98 04 | 65 02 98 04 7d 02 98 04 |E...Y...|e...}...|
|00002010| 95 02 98 04 ad 02 98 04 | c1 02 98 04 d5 02 98 04 |........|........|
|00002020| e9 02 98 04 fd 02 98 04 | 11 03 98 04 25 03 98 04 |........|....%...|
|00002030| 39 03 61 | |9.a | |
+--------+-------------------------+-------------------------+--------+--------+
