home *** CD-ROM | disk | FTP | other *** search
| Borland Delphi Compiled Unit | 1998-10-22 | 8.1 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Borland Delphi Compiled Unit
(other/borlandDelphiCompiledUnit).
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 1%
| dexvert
| Borland Delphi Compiled Unit (other/borlandDelphiCompiledUnit)
| magic
| Unsupported |
| 1%
| dexvert
| Kylix 3 Compiled Unit (other/kylix3CompiledUnit)
| ext
| Unsupported |
| 100%
| file
| data
| default
| |
| 100%
| gt2
| Borland Delphi 4 Unit
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| d8 a6 68 47 3a 20 00 00 | ff ff ff ff be 5a 6b 98 |..hG: ..|.....Zk.|
|00000010| 00 96 01 0a 3c 70 09 70 | 73 61 70 69 2e 70 61 73 |....<p.p|sapi.pas|
|00000020| 94 7d 54 25 00 64 07 57 | 69 6e 64 6f 77 73 be 5a |.}T%.d.W|indows.Z|
|00000030| 6b 98 66 07 4c 50 44 57 | 4f 52 44 18 6f f3 9a 66 |k.f.LPDW|ORD.o..f|
|00000040| 05 44 57 4f 52 44 dd b3 | 1a f9 66 04 42 4f 4f 4c |.DWORD..|..f.BOOL|
|00000050| 8f 23 cf 4a 66 07 54 48 | 61 6e 64 6c 65 dd b3 1a |.#.Jf.TH|andle...|
|00000060| f9 66 07 48 4d 4f 44 55 | 4c 45 dd b3 1a f9 67 0b |.f.HMODU|LE....g.|
|00000070| 4c 6f 61 64 4c 69 62 72 | 61 72 79 f8 c2 98 8b 67 |LoadLibr|ary....g|
|00000080| 0e 47 65 74 50 72 6f 63 | 41 64 64 72 65 73 73 2c |.GetProc|Address,|
|00000090| 63 a2 e4 63 64 07 53 79 | 73 49 6e 69 74 be 5a 6b |c..cd.Sy|sInit.Zk|
|000000a0| 98 63 64 06 53 79 73 74 | 65 6d be 5a 6b 98 66 09 |.cd.Syst|em.Zk.f.|
|000000b0| 50 41 6e 73 69 43 68 61 | 72 f0 bb b5 6a 66 09 50 |PAnsiCha|r...jf.P|
|000000c0| 57 69 64 65 43 68 61 72 | 58 e6 99 d2 66 07 50 6f |WideChar|X...f.Po|
|000000d0| 69 6e 74 65 72 c5 9e 28 | 58 66 05 50 43 68 61 72 |inter..(|Xf.PChar|
|000000e0| f0 bb b5 6a 66 07 42 6f | 6f 6c 65 61 6e 4e 88 63 |...jf.Bo|oleanN.c|
|000000f0| c7 66 06 53 74 72 69 6e | 67 9a 38 ff f1 66 0a 41 |.f.Strin|g.8..f.A|
|00000100| 6e 73 69 53 74 72 69 6e | 67 9a 38 ff f1 67 05 46 |nsiStrin|g.8..g.F|
|00000110| 61 6c 73 65 a6 31 d8 6f | 67 04 45 78 69 74 00 00 |alse.1.o|g.Exit..|
|00000120| 00 00 67 04 54 72 75 65 | a7 31 d8 6f 67 0e 40 48 |..g.True|.1.og.@H|
|00000130| 61 6e 64 6c 65 46 69 6e | 61 6c 6c 79 58 2c 54 64 |andleFin|allyX,Td|
|00000140| 63 2a 08 50 50 6f 69 6e | 74 65 72 88 71 87 90 14 |c*.PPoin|ter.q...|
|00000150| 1a 2a 0e 54 45 6e 75 6d | 50 72 6f 63 65 73 73 65 |.*.TEnum|Processe|
|00000160| 73 88 ac 95 82 6e 1c 2a | 13 54 45 6e 75 6d 50 72 |s....n.*|.TEnumPr|
|00000170| 6f 63 65 73 73 4d 6f 64 | 75 6c 65 73 88 81 41 4f |ocessMod|ules..AO|
|00000180| 1b 1e 2a 13 54 47 65 74 | 4d 6f 64 75 6c 65 42 61 |..*.TGet|ModuleBa|
|00000190| 73 65 4e 61 6d 65 41 88 | be c3 bf 9c 20 2a 13 54 |seNameA.|.... *.T|
|000001a0| 47 65 74 4d 6f 64 75 6c | 65 42 61 73 65 4e 61 6d |GetModul|eBaseNam|
|000001b0| 65 57 88 fc e7 07 c2 22 | 2a 12 54 47 65 74 4d 6f |eW....."|*.TGetMo|
|000001c0| 64 75 6c 65 42 61 73 65 | 4e 61 6d 65 80 be c3 bf |duleBase|Name....|
|000001d0| 9c 20 2a 15 54 47 65 74 | 4d 6f 64 75 6c 65 46 69 |. *.TGet|ModuleFi|
|000001e0| 6c 65 4e 61 6d 65 45 78 | 41 88 e0 b5 19 36 24 2a |leNameEx|A....6$*|
|000001f0| 15 54 47 65 74 4d 6f 64 | 75 6c 65 46 69 6c 65 4e |.TGetMod|uleFileN|
|00000200| 61 6d 65 45 78 57 88 1e | da 61 5b 26 2a 14 54 47 |ameExW..|.a[&*.TG|
|00000210| 65 74 4d 6f 64 75 6c 65 | 46 69 6c 65 4e 61 6d 65 |etModule|FileName|
|00000220| 45 78 80 e0 b5 19 36 24 | 2a 0b 5f 4d 4f 44 55 4c |Ex....6$|*._MODUL|
|00000230| 45 49 4e 46 4f 88 aa 85 | dd c9 28 2a 0a 4d 4f 44 |EINFO...|..(*.MOD|
|00000240| 55 4c 45 49 4e 46 4f 80 | aa 85 dd c9 28 2a 0c 4c |ULEINFO.|....(*.L|
|00000250| 50 4d 4f 44 55 4c 45 49 | 4e 46 4f 88 d3 b2 8b 2d |PMODULEI|NFO....-|
|00000260| 2a 2a 0b 54 4d 6f 64 75 | 6c 65 49 6e 66 6f 80 aa |**.TModu|leInfo..|
|00000270| 85 dd c9 28 2a 0b 50 4d | 6f 64 75 6c 65 49 6e 66 |...(*.PM|oduleInf|
|00000280| 6f 80 d3 b2 8b 2d 2a 2a | 15 54 47 65 74 4d 6f 64 |o....-**|.TGetMod|
|00000290| 75 6c 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 88 34 |uleInfor|mation.4|
|000002a0| b1 dd 56 2c 2a 10 54 45 | 6d 70 74 79 57 6f 72 6b |..V,*.TE|mptyWork|
|000002b0| 69 6e 67 53 65 74 88 d2 | ed 33 6a 2e 2a 10 54 51 |ingSet..|.3j.*.TQ|
|000002c0| 75 65 72 79 57 6f 72 6b | 69 6e 67 53 65 74 88 99 |ueryWork|ingSet..|
|000002d0| ee 58 ec 30 2a 1c 54 49 | 6e 69 74 69 61 6c 69 7a |.X.0*.TI|nitializ|
|000002e0| 65 50 72 6f 63 65 73 73 | 46 6f 72 57 73 57 61 74 |eProcess|ForWsWat|
|000002f0| 63 68 88 3f af f8 3a 32 | 2a 1b 5f 50 53 41 50 49 |ch.?..:2|*._PSAPI|
|00000300| 5f 57 53 5f 57 41 54 43 | 48 5f 49 4e 46 4f 52 4d |_WS_WATC|H_INFORM|
|00000310| 41 54 49 4f 4e 88 3f 55 | 4d 73 34 2a 1a 50 53 41 |ATION.?U|Ms4*.PSA|
|00000320| 50 49 5f 57 53 5f 57 41 | 54 43 48 5f 49 4e 46 4f |PI_WS_WA|TCH_INFO|
|00000330| 52 4d 41 54 49 4f 4e 80 | 3f 55 4d 73 34 2a 1b 50 |RMATION.|?UMs4*.P|
|00000340| 50 53 41 50 49 5f 57 53 | 5f 57 41 54 43 48 5f 49 |PSAPI_WS|_WATCH_I|
|00000350| 4e 46 4f 52 4d 41 54 49 | 4f 4e 88 eb 5f 02 79 36 |NFORMATI|ON.._.y6|
|00000360| 2a 18 54 50 53 41 50 49 | 57 73 57 61 74 63 68 49 |*.TPSAPI|WsWatchI|
|00000370| 6e 66 6f 72 6d 61 74 69 | 6f 6e 80 3f 55 4d 73 34 |nformati|on.?UMs4|
|00000380| 2a 18 50 50 53 41 50 49 | 57 73 57 61 74 63 68 49 |*.PPSAPI|WsWatchI|
|00000390| 6e 66 6f 72 6d 61 74 69 | 6f 6e 80 eb 5f 02 79 36 |nformati|on.._.y6|
|000003a0| 2a 0d 54 47 65 74 57 73 | 43 68 61 6e 67 65 73 88 |*.TGetWs|Changes.|
|000003b0| 4f 7e 0f b5 38 2a 13 54 | 47 65 74 4d 61 70 70 65 |O~..8*.T|GetMappe|
|000003c0| 64 46 69 6c 65 4e 61 6d | 65 41 88 1c b0 4f 07 3a |dFileNam|eA...O.:|
|000003d0| 2a 13 54 47 65 74 4d 61 | 70 70 65 64 46 69 6c 65 |*.TGetMa|ppedFile|
|000003e0| 4e 61 6d 65 57 88 5a d4 | 97 2c 3c 2a 12 54 47 65 |NameW.Z.|.,<*.TGe|
|000003f0| 74 4d 61 70 70 65 64 46 | 69 6c 65 4e 61 6d 65 80 |tMappedF|ileName.|
|00000400| 1c b0 4f 07 3a 2a 19 54 | 47 65 74 44 65 76 69 63 |..O.:*.T|GetDevic|
|00000410| 65 44 72 69 76 65 72 42 | 61 73 65 4e 61 6d 65 41 |eDriverB|aseNameA|
|00000420| 88 10 f6 e2 45 3e 2a 19 | 54 47 65 74 44 65 76 69 |....E>*.|TGetDevi|
|00000430| 63 65 44 72 69 76 65 72 | 42 61 73 65 4e 61 6d 65 |ceDriver|BaseName|
|00000440| 57 88 4e 1a 2b 6b 40 2a | 18 54 47 65 74 44 65 76 |W.N.+k@*|.TGetDev|
|00000450| 69 63 65 44 72 69 76 65 | 72 42 61 73 65 4e 61 6d |iceDrive|rBaseNam|
|00000460| 65 80 10 f6 e2 45 3e 2a | 19 54 47 65 74 44 65 76 |e....E>*|.TGetDev|
|00000470| 69 63 65 44 72 69 76 65 | 72 46 69 6c 65 4e 61 6d |iceDrive|rFileNam|
|00000480| 65 41 88 f5 67 a1 7e 42 | 2a 19 54 47 65 74 44 65 |eA..g.~B|*.TGetDe|
|00000490| 76 69 63 65 44 72 69 76 | 65 72 46 69 6c 65 4e 61 |viceDriv|erFileNa|
|000004a0| 6d 65 57 88 33 8c e9 a3 | 44 2a 18 54 47 65 74 44 |meW.3...|D*.TGetD|
|000004b0| 65 76 69 63 65 44 72 69 | 76 65 72 46 69 6c 65 4e |eviceDri|verFileN|
|000004c0| 61 6d 65 80 f5 67 a1 7e | 42 2a 12 54 45 6e 75 6d |ame..g.~|B*.TEnum|
|000004d0| 44 65 76 69 63 65 44 72 | 69 76 65 72 73 88 19 59 |DeviceDr|ivers..Y|
|000004e0| 49 dc 46 2a 18 5f 50 52 | 4f 43 45 53 53 5f 4d 45 |I.F*._PR|OCESS_ME|
|000004f0| 4d 4f 52 59 5f 43 4f 55 | 4e 54 45 52 53 88 27 13 |MORY_COU|NTERS.'.|
|00000500| dc d1 48 2a 17 50 52 4f | 43 45 53 53 5f 4d 45 4d |..H*.PRO|CESS_MEM|
|00000510| 4f 52 59 5f 43 4f 55 4e | 54 45 52 53 80 27 13 dc |ORY_COUN|TERS.'..|
|00000520| d1 48 2a 18 50 50 52 4f | 43 45 53 53 5f 4d 45 4d |.H*.PPRO|CESS_MEM|
|00000530| 4f 52 59 5f 43 4f 55 4e | 54 45 52 53 88 5b d2 94 |ORY_COUN|TERS.[..|
|00000540| a4 4a 2a 16 54 50 72 6f | 63 65 73 73 4d 65 6d 6f |.J*.TPro|cessMemo|
|00000550| 72 79 43 6f 75 6e 74 65 | 72 73 80 27 13 dc d1 48 |ryCounte|rs.'...H|
|00000560| 2a 16 50 50 72 6f 63 65 | 73 73 4d 65 6d 6f 72 79 |*.PProce|ssMemory|
|00000570| 43 6f 75 6e 74 65 72 73 | 88 dd e9 11 5e 4c 2a 15 |Counters|....^L*.|
|00000580| 54 47 65 74 50 72 6f 63 | 65 73 73 4d 65 6d 6f 72 |TGetProc|essMemor|
|00000590| 79 49 6e 66 6f 88 10 d8 | d6 1c 4e 20 02 2e 31 66 |yInfo...|..N ..1f|
|000005a0| 50 00 20 06 68 50 53 41 | 50 49 66 08 dd 02 20 0e |P. .hPSA|PIf... .|
|000005b0| 5f 45 6e 75 6d 50 72 6f | 63 65 73 73 65 73 64 1c |_EnumPro|cessesd.|
|000005c0| e1 02 20 13 5f 45 6e 75 | 6d 50 72 6f 63 65 73 73 |.. ._Enu|mProcess|
|000005d0| 4d 6f 64 75 6c 65 73 64 | 1e e5 02 20 13 5f 47 65 |Modulesd|... ._Ge|
|000005e0| 74 4d 6f 64 75 6c 65 42 | 61 73 65 4e 61 6d 65 41 |tModuleB|aseNameA|
|000005f0| 64 20 e9 02 20 15 5f 47 | 65 74 4d 6f 64 75 6c 65 |d .. ._G|etModule|
|00000600| 46 69 6c 65 4e 61 6d 65 | 45 78 41 64 24 ed 02 20 |FileName|ExAd$.. |
|00000610| 13 5f 47 65 74 4d 6f 64 | 75 6c 65 42 61 73 65 4e |._GetMod|uleBaseN|
|00000620| 61 6d 65 57 64 22 f1 02 | 20 15 5f 47 65 74 4d 6f |ameWd"..| ._GetMo|
|00000630| 64 75 6c 65 46 69 6c 65 | 4e 61 6d 65 45 78 57 64 |duleFile|NameExWd|
|00000640| 26 f5 02 20 12 5f 47 65 | 74 4d 6f 64 75 6c 65 42 |&.. ._Ge|tModuleB|
|00000650| 61 73 65 4e 61 6d 65 64 | 20 f9 02 20 14 5f 47 65 |aseNamed| .. ._Ge|
|00000660| 74 4d 6f 64 75 6c 65 46 | 69 6c 65 4e 61 6d 65 45 |tModuleF|ileNameE|
|00000670| 78 64 24 fd 02 20 15 5f | 47 65 74 4d 6f 64 75 6c |xd$.. ._|GetModul|
|00000680| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 64 2c 01 03 |eInforma|tiond,..|
|00000690| 20 10 5f 45 6d 70 74 79 | 57 6f 72 6b 69 6e 67 53 | ._Empty|WorkingS|
|000006a0| 65 74 64 2e 05 03 20 10 | 5f 51 75 65 72 79 57 6f |etd... .|_QueryWo|
|000006b0| 72 6b 69 6e 67 53 65 74 | 64 30 09 03 20 1c 5f 49 |rkingSet|d0.. ._I|
|000006c0| 6e 69 74 69 61 6c 69 7a | 65 50 72 6f 63 65 73 73 |nitializ|eProcess|
|000006d0| 46 6f 72 57 73 57 61 74 | 63 68 64 32 0d 03 20 13 |ForWsWat|chd2.. .|
|000006e0| 5f 47 65 74 4d 61 70 70 | 65 64 46 69 6c 65 4e 61 |_GetMapp|edFileNa|
|000006f0| 6d 65 41 64 3a 11 03 20 | 19 5f 47 65 74 44 65 76 |meAd:.. |._GetDev|
|00000700| 69 63 65 44 72 69 76 65 | 72 42 61 73 65 4e 61 6d |iceDrive|rBaseNam|
|00000710| 65 41 64 3e 15 03 20 19 | 5f 47 65 74 44 65 76 69 |eAd>.. .|_GetDevi|
|00000720| 63 65 44 72 69 76 65 72 | 46 69 6c 65 4e 61 6d 65 |ceDriver|FileName|
|00000730| 41 64 42 19 03 20 13 5f | 47 65 74 4d 61 70 70 65 |AdB.. ._|GetMappe|
|00000740| 64 46 69 6c 65 4e 61 6d | 65 57 64 3c 1d 03 20 19 |dFileNam|eWd<.. .|
|00000750| 5f 47 65 74 44 65 76 69 | 63 65 44 72 69 76 65 72 |_GetDevi|ceDriver|
|00000760| 42 61 73 65 4e 61 6d 65 | 57 64 40 21 03 20 19 5f |BaseName|Wd@!. ._|
|00000770| 47 65 74 44 65 76 69 63 | 65 44 72 69 76 65 72 46 |GetDevic|eDriverF|
|00000780| 69 6c 65 4e 61 6d 65 57 | 64 44 25 03 20 12 5f 47 |ileNameW|dD%. ._G|
|00000790| 65 74 4d 61 70 70 65 64 | 46 69 6c 65 4e 61 6d 65 |etMapped|FileName|
|000007a0| 64 3a 29 03 20 18 5f 47 | 65 74 44 65 76 69 63 65 |d:). ._G|etDevice|
|000007b0| 44 72 69 76 65 72 42 61 | 73 65 4e 61 6d 65 64 3e |DriverBa|seNamed>|
|000007c0| 2d 03 20 18 5f 47 65 74 | 44 65 76 69 63 65 44 72 |-. ._Get|DeviceDr|
|000007d0| 69 76 65 72 46 69 6c 65 | 4e 61 6d 65 64 42 31 03 |iverFile|NamedB1.|
|000007e0| 20 12 5f 45 6e 75 6d 44 | 65 76 69 63 65 44 72 69 | ._EnumD|eviceDri|
|000007f0| 76 65 72 73 64 46 35 03 | 20 15 5f 47 65 74 50 72 |versdF5.| ._GetPr|
|00000800| 6f 63 65 73 73 4d 65 6d | 6f 72 79 49 6e 66 6f 64 |ocessMem|oryInfod|
|00000810| 4e 39 03 28 10 43 68 65 | 63 6b 50 53 41 50 49 4c |N9.(.Che|ckPSAPIL|
|00000820| 6f 61 64 65 64 00 00 b1 | 0d 04 14 20 06 52 65 73 |oaded...|... .Res|
|00000830| 75 6c 74 16 14 00 63 28 | 0d 45 6e 75 6d 50 72 6f |ult...c(|.EnumPro|
|00000840| 63 65 73 73 65 73 80 20 | 8c fe 0f 00 46 04 06 21 |cesses. |....F..!|
|00000850| 0b 6c 70 69 64 50 72 6f | 63 65 73 73 16 02 06 21 |.lpidPro|cess...!|
|00000860| 02 63 62 16 04 08 22 08 | 63 62 4e 65 65 64 65 64 |.cb...".|cbNeeded|
|00000870| 16 04 0a 20 06 52 65 73 | 75 6c 74 16 06 00 63 28 |... .Res|ult...c(|
|00000880| 12 45 6e 75 6d 50 72 6f | 63 65 73 73 4d 6f 64 75 |.EnumPro|cessModu|
|00000890| 6c 65 73 80 c0 7e 5d 45 | 00 5a 04 06 21 08 68 50 |les..~]E|.Z..!.hP|
|000008a0| 72 6f 63 65 73 73 16 08 | 06 21 09 6c 70 68 4d 6f |rocess..|.!.lphMo|
|000008b0| 64 75 6c 65 16 02 08 21 | 02 63 62 16 04 0a 22 0a |dule...!|.cb...".|
|000008c0| 6c 70 63 62 4e 65 65 64 | 65 64 26 04 10 20 06 52 |lpcbNeed|ed&.. .R|
|000008d0| 65 73 75 6c 74 16 06 00 | 63 28 12 47 65 74 4d 6f |esult...|c(.GetMo|
|000008e0| 64 75 6c 65 42 61 73 65 | 4e 61 6d 65 41 80 47 f6 |duleBase|NameA.G.|
|000008f0| bb 70 00 5a 04 04 21 08 | 68 50 72 6f 63 65 73 73 |.p.Z..!.|hProcess|
|00000900| 16 08 06 21 07 68 4d 6f | 64 75 6c 65 16 0a 08 21 |...!.hMo|dule...!|
|00000910| 0a 6c 70 42 61 73 65 4e | 61 6d 65 16 0c 0a 21 05 |.lpBaseN|ame...!.|
|00000920| 6e 53 69 7a 65 26 04 10 | 20 06 52 65 73 75 6c 74 |nSize&..| .Result|
|00000930| 16 04 00 63 28 12 47 65 | 74 4d 6f 64 75 6c 65 42 |...c(.Ge|tModuleB|
|00000940| 61 73 65 4e 61 6d 65 57 | 80 6f 1a 04 96 00 5a 04 |aseNameW|.o....Z.|
|00000950| 04 21 08 68 50 72 6f 63 | 65 73 73 16 08 06 21 07 |.!.hProc|ess...!.|
|00000960| 68 4d 6f 64 75 6c 65 16 | 0a 08 21 0a 6c 70 42 61 |hModule.|..!.lpBa|
|00000970| 73 65 4e 61 6d 65 16 0e | 0a 21 05 6e 53 69 7a 65 |seName..|.!.nSize|
|00000980| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000990| 11 47 65 74 4d 6f 64 75 | 6c 65 42 61 73 65 4e 61 |.GetModu|leBaseNa|
|000009a0| 6d 65 80 47 f6 bb 70 00 | 5a 04 04 21 08 68 50 72 |me.G..p.|Z..!.hPr|
|000009b0| 6f 63 65 73 73 16 08 06 | 21 07 68 4d 6f 64 75 6c |ocess...|!.hModul|
|000009c0| 65 16 0a 08 21 0a 6c 70 | 42 61 73 65 4e 61 6d 65 |e...!.lp|BaseName|
|000009d0| 16 12 0a 21 05 6e 53 69 | 7a 65 26 04 10 20 06 52 |...!.nSi|ze&.. .R|
|000009e0| 65 73 75 6c 74 16 04 00 | 63 28 14 47 65 74 4d 6f |esult...|c(.GetMo|
|000009f0| 64 75 6c 65 46 69 6c 65 | 4e 61 6d 65 45 78 41 80 |duleFile|NameExA.|
|00000a00| 47 f6 bb 70 00 5a 04 04 | 21 08 68 50 72 6f 63 65 |G..p.Z..|!.hProce|
|00000a10| 73 73 16 08 06 21 07 68 | 4d 6f 64 75 6c 65 16 0a |ss...!.h|Module..|
|00000a20| 08 21 0a 6c 70 46 69 6c | 65 6e 61 6d 65 16 0c 0a |.!.lpFil|ename...|
|00000a30| 21 05 6e 53 69 7a 65 26 | 04 10 20 06 52 65 73 75 |!.nSize&|.. .Resu|
|00000a40| 6c 74 16 04 00 63 28 14 | 47 65 74 4d 6f 64 75 6c |lt...c(.|GetModul|
|00000a50| 65 46 69 6c 65 4e 61 6d | 65 45 78 57 80 6f 1a 04 |eFileNam|eExW.o..|
|00000a60| 96 00 5a 04 04 21 08 68 | 50 72 6f 63 65 73 73 16 |..Z..!.h|Process.|
|00000a70| 08 06 21 07 68 4d 6f 64 | 75 6c 65 16 0a 08 21 0a |..!.hMod|ule...!.|
|00000a80| 6c 70 46 69 6c 65 6e 61 | 6d 65 16 0e 0a 21 05 6e |lpFilena|me...!.n|
|00000a90| 53 69 7a 65 26 04 10 20 | 06 52 65 73 75 6c 74 16 |Size&.. |.Result.|
|00000aa0| 04 00 63 28 13 47 65 74 | 4d 6f 64 75 6c 65 46 69 |..c(.Get|ModuleFi|
|00000ab0| 6c 65 4e 61 6d 65 45 78 | 80 47 f6 bb 70 00 5a 04 |leNameEx|.G..p.Z.|
|00000ac0| 04 21 08 68 50 72 6f 63 | 65 73 73 16 08 06 21 07 |.!.hProc|ess...!.|
|00000ad0| 68 4d 6f 64 75 6c 65 16 | 0a 08 21 0a 6c 70 46 69 |hModule.|..!.lpFi|
|00000ae0| 6c 65 6e 61 6d 65 16 12 | 0a 21 05 6e 53 69 7a 65 |lename..|.!.nSize|
|00000af0| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000b00| 14 47 65 74 4d 6f 64 75 | 6c 65 49 6e 66 6f 72 6d |.GetModu|leInform|
|00000b10| 61 74 69 6f 6e 80 04 c4 | 25 f1 00 5a 04 06 21 08 |ation...|%..Z..!.|
|00000b20| 68 50 72 6f 63 65 73 73 | 16 08 06 21 07 68 4d 6f |hProcess|...!.hMo|
|00000b30| 64 75 6c 65 16 0a 08 21 | 09 6c 70 6d 6f 64 69 6e |dule...!|.lpmodin|
|00000b40| 66 6f 16 2a 0a 21 02 63 | 62 26 04 10 20 06 52 65 |fo.*.!.c|b&.. .Re|
|00000b50| 73 75 6c 74 16 06 00 63 | 28 0f 45 6d 70 74 79 57 |sult...c|(.EmptyW|
|00000b60| 6f 72 6b 69 6e 67 53 65 | 74 80 9e c5 17 ec 00 32 |orkingSe|t......2|
|00000b70| 04 06 21 08 68 50 72 6f | 63 65 73 73 16 08 06 20 |..!.hPro|cess... |
|00000b80| 06 52 65 73 75 6c 74 16 | 06 00 63 28 0f 51 75 65 |.Result.|..c(.Que|
|00000b90| 72 79 57 6f 72 6b 69 6e | 67 53 65 74 80 06 dc 19 |ryWorkin|gSet....|
|00000ba0| e5 00 46 04 06 21 08 68 | 50 72 6f 63 65 73 73 16 |..F..!.h|Process.|
|00000bb0| 08 06 21 02 70 76 16 10 | 08 21 02 63 62 16 04 0a |..!.pv..|.!.cb...|
|00000bc0| 20 06 52 65 73 75 6c 74 | 16 06 00 63 28 1b 49 6e | .Result|...c(.In|
|00000bd0| 69 74 69 61 6c 69 7a 65 | 50 72 6f 63 65 73 73 46 |itialize|ProcessF|
|00000be0| 6f 72 57 73 57 61 74 63 | 68 80 9e c5 17 ec 00 32 |orWsWatc|h......2|
|00000bf0| 04 06 21 08 68 50 72 6f | 63 65 73 73 16 08 06 20 |..!.hPro|cess... |
|00000c00| 06 52 65 73 75 6c 74 16 | 06 00 63 28 12 47 65 74 |.Result.|..c(.Get|
|00000c10| 4d 61 70 70 65 64 46 69 | 6c 65 4e 61 6d 65 41 80 |MappedFi|leNameA.|
|00000c20| 8f a9 87 da 00 5a 04 04 | 21 08 68 50 72 6f 63 65 |.....Z..|!.hProce|
|00000c30| 73 73 16 08 06 21 03 6c | 70 76 16 10 08 21 0a 6c |ss...!.l|pv...!.l|
|00000c40| 70 46 69 6c 65 6e 61 6d | 65 16 0c 0a 21 05 6e 53 |pFilenam|e...!.nS|
|00000c50| 69 7a 65 26 04 10 20 06 | 52 65 73 75 6c 74 16 04 |ize&.. .|Result..|
|00000c60| 00 63 28 12 47 65 74 4d | 61 70 70 65 64 46 69 6c |.c(.GetM|appedFil|
|00000c70| 65 4e 61 6d 65 57 80 b7 | cd cf ff 00 5a 04 04 21 |eNameW..|....Z..!|
|00000c80| 08 68 50 72 6f 63 65 73 | 73 16 08 06 21 03 6c 70 |.hProces|s...!.lp|
|00000c90| 76 16 10 08 21 0a 6c 70 | 46 69 6c 65 6e 61 6d 65 |v...!.lp|Filename|
|00000ca0| 16 0e 0a 21 05 6e 53 69 | 7a 65 26 04 10 20 06 52 |...!.nSi|ze&.. .R|
|00000cb0| 65 73 75 6c 74 16 04 00 | 63 28 11 47 65 74 4d 61 |esult...|c(.GetMa|
|00000cc0| 70 70 65 64 46 69 6c 65 | 4e 61 6d 65 80 8f a9 87 |ppedFile|Name....|
|00000cd0| da 00 5a 04 04 21 08 68 | 50 72 6f 63 65 73 73 16 |..Z..!.h|Process.|
|00000ce0| 08 06 21 03 6c 70 76 16 | 10 08 21 0a 6c 70 46 69 |..!.lpv.|..!.lpFi|
|00000cf0| 6c 65 6e 61 6d 65 16 12 | 0a 21 05 6e 53 69 7a 65 |lename..|.!.nSize|
|00000d00| 26 04 10 20 06 52 65 73 | 75 6c 74 16 04 00 63 28 |&.. .Res|ult...c(|
|00000d10| 18 47 65 74 44 65 76 69 | 63 65 44 72 69 76 65 72 |.GetDevi|ceDriver|
|00000d20| 42 61 73 65 4e 61 6d 65 | 41 80 97 de 92 39 00 46 |BaseName|A....9.F|
|00000d30| 04 04 21 09 49 6d 61 67 | 65 42 61 73 65 16 10 06 |..!.Imag|eBase...|
|00000d40| 21 0a 6c 70 42 61 73 65 | 4e 61 6d 65 16 0c 08 21 |!.lpBase|Name...!|
|00000d50| 05 6e 53 69 7a 65 16 04 | 0a 20 06 52 65 73 75 6c |.nSize..|. .Resul|
|00000d60| 74 16 04 00 63 28 18 47 | 65 74 44 65 76 69 63 65 |t...c(.G|etDevice|
|00000d70| 44 72 69 76 65 72 42 61 | 73 65 4e 61 6d 65 57 80 |DriverBa|seNameW.|
|00000d80| bf 02 db 5e 00 46 04 04 | 21 09 49 6d 61 67 65 42 |...^.F..|!.ImageB|
|00000d90| 61 73 65 16 10 06 21 0a | 6c 70 42 61 73 65 4e 61 |ase...!.|lpBaseNa|
|00000da0| 6d 65 16 0e 08 21 05 6e | 53 69 7a 65 16 04 0a 20 |me...!.n|Size... |
|00000db0| 06 52 65 73 75 6c 74 16 | 04 00 63 28 17 47 65 74 |.Result.|..c(.Get|
|00000dc0| 44 65 76 69 63 65 44 72 | 69 76 65 72 42 61 73 65 |DeviceDr|iverBase|
|00000dd0| 4e 61 6d 65 80 97 de 92 | 39 00 46 04 04 21 09 49 |Name....|9.F..!.I|
|00000de0| 6d 61 67 65 42 61 73 65 | 16 10 06 21 0a 6c 70 42 |mageBase|...!.lpB|
|00000df0| 61 73 65 4e 61 6d 65 16 | 12 08 21 05 6e 53 69 7a |aseName.|..!.nSiz|
|00000e00| 65 16 04 0a 20 06 52 65 | 73 75 6c 74 16 04 00 63 |e... .Re|sult...c|
|00000e10| 28 18 47 65 74 44 65 76 | 69 63 65 44 72 69 76 65 |(.GetDev|iceDrive|
|00000e20| 72 46 69 6c 65 4e 61 6d | 65 41 80 97 de 92 39 00 |rFileNam|eA....9.|
|00000e30| 46 04 04 21 09 49 6d 61 | 67 65 42 61 73 65 16 10 |F..!.Ima|geBase..|
|00000e40| 06 21 0a 6c 70 46 69 6c | 65 4e 61 6d 65 16 0c 08 |.!.lpFil|eName...|
|00000e50| 21 05 6e 53 69 7a 65 16 | 04 0a 20 06 52 65 73 75 |!.nSize.|.. .Resu|
|00000e60| 6c 74 16 04 00 63 28 18 | 47 65 74 44 65 76 69 63 |lt...c(.|GetDevic|
|00000e70| 65 44 72 69 76 65 72 46 | 69 6c 65 4e 61 6d 65 57 |eDriverF|ileNameW|
|00000e80| 80 bf 02 db 5e 00 46 04 | 04 21 09 49 6d 61 67 65 |....^.F.|.!.Image|
|00000e90| 42 61 73 65 16 10 06 21 | 0a 6c 70 46 69 6c 65 4e |Base...!|.lpFileN|
|00000ea0| 61 6d 65 16 0e 08 21 05 | 6e 53 69 7a 65 16 04 0a |ame...!.|nSize...|
|00000eb0| 20 06 52 65 73 75 6c 74 | 16 04 00 63 28 17 47 65 | .Result|...c(.Ge|
|00000ec0| 74 44 65 76 69 63 65 44 | 72 69 76 65 72 46 69 6c |tDeviceD|riverFil|
|00000ed0| 65 4e 61 6d 65 80 97 de | 92 39 00 46 04 04 21 09 |eName...|.9.F..!.|
|00000ee0| 49 6d 61 67 65 42 61 73 | 65 16 10 06 21 0a 6c 70 |ImageBas|e...!.lp|
|00000ef0| 46 69 6c 65 4e 61 6d 65 | 16 12 08 21 05 6e 53 69 |FileName|...!.nSi|
|00000f00| 7a 65 16 04 0a 20 06 52 | 65 73 75 6c 74 16 04 00 |ze... .R|esult...|
|00000f10| 63 28 11 45 6e 75 6d 44 | 65 76 69 63 65 44 72 69 |c(.EnumD|eviceDri|
|00000f20| 76 65 72 73 80 95 6f b3 | 71 00 46 04 06 21 0b 6c |vers..o.|q.F..!.l|
|00000f30| 70 49 6d 61 67 65 42 61 | 73 65 16 1a 06 21 02 63 |pImageBa|se...!.c|
|00000f40| 62 16 04 08 22 0a 6c 70 | 63 62 4e 65 65 64 65 64 |b...".lp|cbNeeded|
|00000f50| 16 04 0a 20 06 52 65 73 | 75 6c 74 16 06 00 63 28 |... .Res|ult...c(|
|00000f60| 14 47 65 74 50 72 6f 63 | 65 73 73 4d 65 6d 6f 72 |.GetProc|essMemor|
|00000f70| 79 49 6e 66 6f 80 ac e5 | aa 5b 00 46 04 06 21 07 |yInfo...|.[.F..!.|
|00000f80| 50 72 6f 63 65 73 73 16 | 08 06 21 0e 70 70 73 6d |Process.|..!.ppsm|
|00000f90| 65 6d 43 6f 75 6e 74 65 | 72 73 16 4a 08 21 02 63 |emCounte|rs.J.!.c|
|00000fa0| 62 16 04 0a 20 06 52 65 | 73 75 6c 74 16 06 00 63 |b... .Re|sult...c|
|00000fb0| 28 0c 46 69 6e 61 6c 69 | 7a 61 74 69 6f 6e 80 58 |(.Finali|zation.X|
|00000fc0| 2c 54 64 00 5c 21 20 52 | 63 28 05 50 73 61 70 69 |,Td.\! R|c(.Psapi|
|00000fd0| 80 00 00 00 00 00 10 21 | 10 52 63 45 00 08 2c 10 |.......!|.RcE..,.|
|00000fe0| 48 00 08 2e 04 06 83 6a | 21 0b 6c 70 69 64 50 72 |H......j|!.lpidPr|
|00000ff0| 6f 63 65 73 73 06 02 00 | 21 02 63 62 06 04 00 22 |ocess...|!.cb..."|
|00001000| 08 63 62 4e 65 65 64 65 | 64 06 04 00 63 48 00 08 |.cbNeede|d...cH..|
|00001010| 30 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |0...j!.h|Process.|
|00001020| 08 00 21 09 6c 70 68 4d | 6f 64 75 6c 65 06 02 00 |..!.lphM|odule...|
|00001030| 21 02 63 62 06 04 00 22 | 0a 6c 70 63 62 4e 65 65 |!.cb..."|.lpcbNee|
|00001040| 64 65 64 06 04 00 63 48 | 00 08 32 04 04 83 6a 21 |ded...cH|..2...j!|
|00001050| 08 68 50 72 6f 63 65 73 | 73 06 08 00 21 07 68 4d |.hProces|s...!.hM|
|00001060| 6f 64 75 6c 65 06 0a 00 | 21 0a 6c 70 42 61 73 65 |odule...|!.lpBase|
|00001070| 4e 61 6d 65 06 0c 00 21 | 05 6e 53 69 7a 65 06 04 |Name...!|.nSize..|
|00001080| 00 63 48 00 08 34 04 04 | 83 6a 21 08 68 50 72 6f |.cH..4..|.j!.hPro|
|00001090| 63 65 73 73 06 08 00 21 | 07 68 4d 6f 64 75 6c 65 |cess...!|.hModule|
|000010a0| 06 0a 00 21 0a 6c 70 42 | 61 73 65 4e 61 6d 65 06 |...!.lpB|aseName.|
|000010b0| 0e 00 21 05 6e 53 69 7a | 65 06 04 00 63 48 00 08 |..!.nSiz|e...cH..|
|000010c0| 38 04 04 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |8...j!.h|Process.|
|000010d0| 08 00 21 07 68 4d 6f 64 | 75 6c 65 06 0a 00 21 0a |..!.hMod|ule...!.|
|000010e0| 6c 70 46 69 6c 65 6e 61 | 6d 65 06 0c 00 21 05 6e |lpFilena|me...!.n|
|000010f0| 53 69 7a 65 06 04 00 63 | 48 00 08 3a 04 04 83 6a |Size...c|H..:...j|
|00001100| 21 08 68 50 72 6f 63 65 | 73 73 06 08 00 21 07 68 |!.hProce|ss...!.h|
|00001110| 4d 6f 64 75 6c 65 06 0a | 00 21 0a 6c 70 46 69 6c |Module..|.!.lpFil|
|00001120| 65 6e 61 6d 65 06 0e 00 | 21 05 6e 53 69 7a 65 06 |ename...|!.nSize.|
|00001130| 04 00 63 4d 00 18 3e 00 | 2c 0b 6c 70 42 61 73 65 |..cM..>.|,.lpBase|
|00001140| 4f 66 44 6c 6c 04 10 00 | 2c 0b 53 69 7a 65 4f 66 |OfDll...|,.SizeOf|
|00001150| 49 6d 61 67 65 04 04 08 | 2c 0a 45 6e 74 72 79 50 |Image...|,.EntryP|
|00001160| 6f 69 6e 74 04 10 10 63 | 45 00 08 42 28 48 00 08 |oint...c|E..B(H..|
|00001170| 48 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |H...j!.h|Process.|
|00001180| 08 00 21 07 68 4d 6f 64 | 75 6c 65 06 0a 00 21 09 |..!.hMod|ule...!.|
|00001190| 6c 70 6d 6f 64 69 6e 66 | 6f 06 2a 00 21 02 63 62 |lpmodinf|o.*.!.cb|
|000011a0| 06 04 00 63 48 00 08 4a | 04 06 83 6a 21 08 68 50 |...cH..J|...j!.hP|
|000011b0| 72 6f 63 65 73 73 06 08 | 00 63 48 00 08 4c 04 06 |rocess..|.cH..L..|
|000011c0| 83 6a 21 08 68 50 72 6f | 63 65 73 73 06 08 00 21 |.j!.hPro|cess...!|
|000011d0| 02 70 76 06 10 00 21 02 | 63 62 06 04 00 63 48 00 |.pv...!.|cb...cH.|
|000011e0| 08 4e 04 06 83 6a 21 08 | 68 50 72 6f 63 65 73 73 |.N...j!.|hProcess|
|000011f0| 06 08 00 63 4d 00 10 50 | 00 2c 0a 46 61 75 6c 74 |...cM..P|.,.Fault|
|00001200| 69 6e 67 50 63 04 10 00 | 2c 0a 46 61 75 6c 74 69 |ingPc...|,.Faulti|
|00001210| 6e 67 56 61 04 10 08 63 | 45 00 08 54 34 48 00 08 |ngVa...c|E..T4H..|
|00001220| 5a 04 06 83 6a 21 08 68 | 50 72 6f 63 65 73 73 06 |Z...j!.h|Process.|
|00001230| 08 00 21 0b 6c 70 57 61 | 74 63 68 49 6e 66 6f 06 |..!.lpWa|tchInfo.|
|00001240| 36 00 21 02 63 62 06 04 | 00 63 48 00 08 5c 04 04 |6.!.cb..|.cH..\..|
|00001250| 83 6a 21 08 68 50 72 6f | 63 65 73 73 06 08 00 21 |.j!.hPro|cess...!|
|00001260| 03 6c 70 76 06 10 00 21 | 0a 6c 70 46 69 6c 65 6e |.lpv...!|.lpFilen|
|00001270| 61 6d 65 06 0c 00 21 05 | 6e 53 69 7a 65 06 04 00 |ame...!.|nSize...|
|00001280| 63 48 00 08 5e 04 04 83 | 6a 21 08 68 50 72 6f 63 |cH..^...|j!.hProc|
|00001290| 65 73 73 06 08 00 21 03 | 6c 70 76 06 10 00 21 0a |ess...!.|lpv...!.|
|000012a0| 6c 70 46 69 6c 65 6e 61 | 6d 65 06 0e 00 21 05 6e |lpFilena|me...!.n|
|000012b0| 53 69 7a 65 06 04 00 63 | 48 00 08 62 04 04 83 6a |Size...c|H..b...j|
|000012c0| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|000012d0| 6c 70 42 61 73 65 4e 61 | 6d 65 06 0c 00 21 05 6e |lpBaseNa|me...!.n|
|000012e0| 53 69 7a 65 06 04 00 63 | 48 00 08 64 04 04 83 6a |Size...c|H..d...j|
|000012f0| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001300| 6c 70 42 61 73 65 4e 61 | 6d 65 06 0e 00 21 05 6e |lpBaseNa|me...!.n|
|00001310| 53 69 7a 65 06 04 00 63 | 48 00 08 68 04 04 83 6a |Size...c|H..h...j|
|00001320| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001330| 6c 70 46 69 6c 65 4e 61 | 6d 65 06 0c 00 21 05 6e |lpFileNa|me...!.n|
|00001340| 53 69 7a 65 06 04 00 63 | 48 00 08 6a 04 04 83 6a |Size...c|H..j...j|
|00001350| 21 09 49 6d 61 67 65 42 | 61 73 65 06 10 00 21 0a |!.ImageB|ase...!.|
|00001360| 6c 70 46 69 6c 65 4e 61 | 6d 65 06 0e 00 21 05 6e |lpFileNa|me...!.n|
|00001370| 53 69 7a 65 06 04 00 63 | 48 00 08 6e 04 06 83 6a |Size...c|H..n...j|
|00001380| 21 0b 6c 70 49 6d 61 67 | 65 42 61 73 65 06 1a 00 |!.lpImag|eBase...|
|00001390| 21 02 63 62 06 04 00 22 | 0a 6c 70 63 62 4e 65 65 |!.cb..."|.lpcbNee|
|000013a0| 64 65 64 06 04 00 63 4d | 00 50 70 00 2c 02 63 62 |ded...cM|.Pp.,.cb|
|000013b0| 04 04 00 2c 0e 50 61 67 | 65 46 61 75 6c 74 43 6f |...,.Pag|eFaultCo|
|000013c0| 75 6e 74 04 04 08 2c 12 | 50 65 61 6b 57 6f 72 6b |unt...,.|PeakWork|
|000013d0| 69 6e 67 53 65 74 53 69 | 7a 65 04 04 10 2c 0e 57 |ingSetSi|ze...,.W|
|000013e0| 6f 72 6b 69 6e 67 53 65 | 74 53 69 7a 65 04 04 18 |orkingSe|tSize...|
|000013f0| 2c 17 51 75 6f 74 61 50 | 65 61 6b 50 61 67 65 64 |,.QuotaP|eakPaged|
|00001400| 50 6f 6f 6c 55 73 61 67 | 65 04 04 20 2c 13 51 75 |PoolUsag|e.. ,.Qu|
|00001410| 6f 74 61 50 61 67 65 64 | 50 6f 6f 6c 55 73 61 67 |otaPaged|PoolUsag|
|00001420| 65 04 04 28 2c 1a 51 75 | 6f 74 61 50 65 61 6b 4e |e..(,.Qu|otaPeakN|
|00001430| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 55 73 61 67 65 |onPagedP|oolUsage|
|00001440| 04 04 30 2c 16 51 75 6f | 74 61 4e 6f 6e 50 61 67 |..0,.Quo|taNonPag|
|00001450| 65 64 50 6f 6f 6c 55 73 | 61 67 65 04 04 38 2c 0d |edPoolUs|age..8,.|
|00001460| 50 61 67 65 66 69 6c 65 | 55 73 61 67 65 04 04 40 |Pagefile|Usage..@|
|00001470| 2c 11 50 65 61 6b 50 61 | 67 65 66 69 6c 65 55 73 |,.PeakPa|gefileUs|
|00001480| 61 67 65 04 04 48 63 45 | 00 08 74 48 45 00 08 78 |age..HcE|..tHE..x|
|00001490| 48 48 00 08 7a 04 06 83 | 6a 21 07 50 72 6f 63 65 |HH..z...|j!.Proce|
|000014a0| 73 73 06 08 00 21 0e 70 | 70 73 6d 65 6d 43 6f 75 |ss...!.p|psmemCou|
|000014b0| 6e 74 65 72 73 06 4a 00 | 21 02 63 62 06 04 00 63 |nters.J.|!.cb...c|
|000014c0| 44 00 08 00 50 ff 00 00 | 00 80 ff ff ff ff ff ff |D...P...|........|
|000014d0| ff ff 7f 00 00 00 00 10 | 40 00 00 00 6c 85 1c 53 |........|@...l..S|
|000014e0| bb 00 00 00 00 83 3b 00 | 0f 85 b7 01 00 00 68 cc |......;.|......h.|
|000014f0| 01 00 00 e8 00 00 00 00 | 89 03 83 3b 20 73 08 33 |........|...; s.3|
|00001500| c0 89 03 33 c0 5b c3 68 | d8 01 00 00 8b 03 50 e8 |...3.[.h|......P.|
|00001510| 00 00 00 00 a3 00 00 00 | 00 68 e8 01 00 00 8b 03 |........|.h......|
|00001520| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 fc 01 00 00 |P.......|...h....|
|00001530| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 68 10 02 |..P.....|.....h..|
|00001540| 00 00 8b 03 50 e8 00 00 | 00 00 a3 00 00 00 00 68 |....P...|.......h|
|00001550| 28 02 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |(.....P.|........|
|00001560| 00 68 3c 02 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.h<.....|P.......|
|00001570| 00 00 00 68 fc 01 00 00 | 8b 03 50 e8 00 00 00 00 |...h....|..P.....|
|00001580| a3 00 00 00 00 68 10 02 | 00 00 8b 03 50 e8 00 00 |.....h..|....P...|
|00001590| 00 00 a3 00 00 00 00 68 | 54 02 00 00 8b 03 50 e8 |.......h|T.....P.|
|000015a0| 00 00 00 00 a3 00 00 00 | 00 68 6c 02 00 00 8b 03 |........|.hl.....|
|000015b0| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 7c 02 00 00 |P.......|...h|...|
|000015c0| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 68 8c 02 |..P.....|.....h..|
|000015d0| 00 00 8b 03 50 e8 00 00 | 00 00 a3 00 00 00 00 68 |....P...|.......h|
|000015e0| a8 02 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |......P.|........|
|000015f0| 00 68 bc 02 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.h......|P.......|
|00001600| 00 00 00 68 d8 02 00 00 | 8b 03 50 e8 00 00 00 00 |...h....|..P.....|
|00001610| a3 00 00 00 00 68 f4 02 | 00 00 8b 03 50 e8 00 00 |.....h..|....P...|
|00001620| 00 00 a3 00 00 00 00 68 | 08 03 00 00 8b 03 50 e8 |.......h|......P.|
|00001630| 00 00 00 00 a3 00 00 00 | 00 68 24 03 00 00 8b 03 |........|.h$.....|
|00001640| 50 e8 00 00 00 00 a3 00 | 00 00 00 68 a8 02 00 00 |P.......|...h....|
|00001650| 8b 03 50 e8 00 00 00 00 | a3 00 00 00 00 68 bc 02 |..P.....|.....h..|
|00001660| 00 00 8b 03 50 e8 00 00 | 00 00 a3 00 00 00 00 68 |....P...|.......h|
|00001670| d8 02 00 00 8b 03 50 e8 | 00 00 00 00 a3 00 00 00 |......P.|........|
|00001680| 00 68 40 03 00 00 8b 03 | 50 e8 00 00 00 00 a3 00 |.h@.....|P.......|
|00001690| 00 00 00 68 54 03 00 00 | 8b 03 50 e8 00 00 00 00 |...hT...|..P.....|
|000016a0| a3 00 00 00 00 b0 01 5b | c3 00 00 50 53 41 50 49 |.......[|...PSAPI|
|000016b0| 2e 64 6c 6c 00 00 00 45 | 6e 75 6d 50 72 6f 63 65 |.dll...E|numProce|
|000016c0| 73 73 65 73 00 00 00 45 | 6e 75 6d 50 72 6f 63 65 |sses...E|numProce|
|000016d0| 73 73 4d 6f 64 75 6c 65 | 73 00 00 47 65 74 4d 6f |ssModule|s..GetMo|
|000016e0| 64 75 6c 65 42 61 73 65 | 4e 61 6d 65 41 00 00 47 |duleBase|NameA..G|
|000016f0| 65 74 4d 6f 64 75 6c 65 | 46 69 6c 65 4e 61 6d 65 |etModule|FileName|
|00001700| 45 78 41 00 00 00 00 47 | 65 74 4d 6f 64 75 6c 65 |ExA....G|etModule|
|00001710| 42 61 73 65 4e 61 6d 65 | 57 00 00 47 65 74 4d 6f |BaseName|W..GetMo|
|00001720| 64 75 6c 65 46 69 6c 65 | 4e 61 6d 65 45 78 57 00 |duleFile|NameExW.|
|00001730| 00 00 00 47 65 74 4d 6f | 64 75 6c 65 49 6e 66 6f |...GetMo|duleInfo|
|00001740| 72 6d 61 74 69 6f 6e 00 | 00 00 00 45 6d 70 74 79 |rmation.|...Empty|
|00001750| 57 6f 72 6b 69 6e 67 53 | 65 74 00 51 75 65 72 79 |WorkingS|et.Query|
|00001760| 57 6f 72 6b 69 6e 67 53 | 65 74 00 49 6e 69 74 69 |WorkingS|et.Initi|
|00001770| 61 6c 69 7a 65 50 72 6f | 63 65 73 73 46 6f 72 57 |alizePro|cessForW|
|00001780| 73 57 61 74 63 68 00 47 | 65 74 4d 61 70 70 65 64 |sWatch.G|etMapped|
|00001790| 46 69 6c 65 4e 61 6d 65 | 41 00 00 47 65 74 44 65 |FileName|A..GetDe|
|000017a0| 76 69 63 65 44 72 69 76 | 65 72 42 61 73 65 4e 61 |viceDriv|erBaseNa|
|000017b0| 6d 65 41 00 00 00 00 47 | 65 74 44 65 76 69 63 65 |meA....G|etDevice|
|000017c0| 44 72 69 76 65 72 46 69 | 6c 65 4e 61 6d 65 41 00 |DriverFi|leNameA.|
|000017d0| 00 00 00 47 65 74 4d 61 | 70 70 65 64 46 69 6c 65 |...GetMa|ppedFile|
|000017e0| 4e 61 6d 65 57 00 00 47 | 65 74 44 65 76 69 63 65 |NameW..G|etDevice|
|000017f0| 44 72 69 76 65 72 42 61 | 73 65 4e 61 6d 65 57 00 |DriverBa|seNameW.|
|00001800| 00 00 00 47 65 74 44 65 | 76 69 63 65 44 72 69 76 |...GetDe|viceDriv|
|00001810| 65 72 46 69 6c 65 4e 61 | 6d 65 57 00 00 00 00 45 |erFileNa|meW....E|
|00001820| 6e 75 6d 44 65 76 69 63 | 65 44 72 69 76 65 72 73 |numDevic|eDrivers|
|00001830| 00 00 00 47 65 74 50 72 | 6f 63 65 73 73 4d 65 6d |...GetPr|ocessMem|
|00001840| 6f 72 79 49 6e 66 6f 00 | 00 00 00 53 56 57 8b f9 |oryInfo.|...SVW..|
|00001850| 8b f2 8b d8 e8 00 00 00 | 00 84 c0 74 0b 57 56 53 |........|...t.WVS|
|00001860| ff 15 00 00 00 00 eb 02 | 33 c0 5f 5e 5b c3 55 8b |........|3._^[.U.|
|00001870| ec 53 56 57 8b f9 8b f2 | 8b d8 e8 00 00 00 00 84 |.SVW....|........|
|00001880| c0 74 0f 8b 45 08 50 57 | 56 53 ff 15 00 00 00 00 |.t..E.PW|VS......|
|00001890| eb 02 33 c0 5f 5e 5b 5d | c2 04 00 55 8b ec 53 56 |..3._^[]|...U..SV|
|000018a0| 57 8b f9 8b f2 8b d8 e8 | 00 00 00 00 84 c0 74 0f |W.......|......t.|
|000018b0| 8b 45 08 50 57 56 53 ff | 15 00 00 00 00 eb 02 33 |.E.PWVS.|.......3|
|000018c0| c0 5f 5e 5b 5d c2 04 00 | 55 8b ec 53 56 57 8b f9 |._^[]...|U..SVW..|
|000018d0| 8b f2 8b d8 e8 00 00 00 | 00 84 c0 74 0f 8b 45 08 |........|...t..E.|
|000018e0| 50 57 56 53 ff 15 00 00 | 00 00 eb 02 33 c0 5f 5e |PWVS....|....3._^|
|000018f0| 5b 5d c2 04 00 55 8b ec | 53 56 57 8b f9 8b f2 8b |[]...U..|SVW.....|
|00001900| d8 e8 00 00 00 00 84 c0 | 74 0f 8b 45 08 50 57 56 |........|t..E.PWV|
|00001910| 53 ff 15 00 00 00 00 eb | 02 33 c0 5f 5e 5b 5d c2 |S.......|.3._^[].|
|00001920| 04 00 55 8b ec 53 56 57 | 8b f9 8b f2 8b d8 e8 00 |..U..SVW|........|
|00001930| 00 00 00 84 c0 74 0f 8b | 45 08 50 57 56 53 ff 15 |.....t..|E.PWVS..|
|00001940| 00 00 00 00 eb 02 33 c0 | 5f 5e 5b 5d c2 04 00 55 |......3.|_^[]...U|
|00001950| 8b ec 53 56 57 8b f9 8b | f2 8b d8 e8 00 00 00 00 |..SVW...|........|
|00001960| 84 c0 74 0f 8b 45 08 50 | 57 56 53 ff 15 00 00 00 |..t..E.P|WVS.....|
|00001970| 00 eb 02 33 c0 5f 5e 5b | 5d c2 04 00 55 8b ec 53 |...3._^[|]...U..S|
|00001980| 56 57 8b f9 8b f2 8b d8 | e8 00 00 00 00 84 c0 74 |VW......|.......t|
|00001990| 0f 8b 45 08 50 57 56 53 | ff 15 00 00 00 00 eb 02 |..E.PWVS|........|
|000019a0| 33 c0 5f 5e 5b 5d c2 04 | 00 55 8b ec 53 56 57 8b |3._^[]..|.U..SVW.|
|000019b0| f9 8b f2 8b d8 e8 00 00 | 00 00 84 c0 74 0f 8b 45 |........|....t..E|
|000019c0| 08 50 57 56 53 ff 15 00 | 00 00 00 eb 02 33 c0 5f |.PWVS...|.....3._|
|000019d0| 5e 5b 5d c2 04 00 53 8b | d8 e8 00 00 00 00 84 c0 |^[]...S.|........|
|000019e0| 74 09 53 ff 15 00 00 00 | 00 5b c3 33 c0 5b c3 53 |t.S.....|.[.3.[.S|
|000019f0| 56 57 8b f9 8b f2 8b d8 | e8 00 00 00 00 84 c0 74 |VW......|.......t|
|00001a00| 0b 57 56 53 ff 15 00 00 | 00 00 eb 02 33 c0 5f 5e |.WVS....|....3._^|
|00001a10| 5b c3 53 8b d8 e8 00 00 | 00 00 84 c0 74 09 53 ff |[.S.....|....t.S.|
|00001a20| 15 00 00 00 00 5b c3 33 | c0 5b c3 55 8b ec 53 56 |.....[.3|.[.U..SV|
|00001a30| 57 8b f9 8b f2 8b d8 e8 | 00 00 00 00 84 c0 74 0f |W.......|......t.|
|00001a40| 8b 45 08 50 57 56 53 ff | 15 00 00 00 00 eb 02 33 |.E.PWVS.|.......3|
|00001a50| c0 5f 5e 5b 5d c2 04 00 | 55 8b ec 53 56 57 8b f9 |._^[]...|U..SVW..|
|00001a60| 8b f2 8b d8 e8 00 00 00 | 00 84 c0 74 0f 8b 45 08 |........|...t..E.|
|00001a70| 50 57 56 53 ff 15 00 00 | 00 00 eb 02 33 c0 5f 5e |PWVS....|....3._^|
|00001a80| 5b 5d c2 04 00 55 8b ec | 53 56 57 8b f9 8b f2 8b |[]...U..|SVW.....|
|00001a90| d8 e8 00 00 00 00 84 c0 | 74 0f 8b 45 08 50 57 56 |........|t..E.PWV|
|00001aa0| 53 ff 15 00 00 00 00 eb | 02 33 c0 5f 5e 5b 5d c2 |S.......|.3._^[].|
|00001ab0| 04 00 53 56 57 8b f9 8b | f2 8b d8 e8 00 00 00 00 |..SVW...|........|
|00001ac0| 84 c0 74 0b 57 56 53 ff | 15 00 00 00 00 eb 02 33 |..t.WVS.|.......3|
|00001ad0| c0 5f 5e 5b c3 53 56 57 | 8b f9 8b f2 8b d8 e8 00 |._^[.SVW|........|
|00001ae0| 00 00 00 84 c0 74 0b 57 | 56 53 ff 15 00 00 00 00 |.....t.W|VS......|
|00001af0| eb 02 33 c0 5f 5e 5b c3 | 53 56 57 8b f9 8b f2 8b |..3._^[.|SVW.....|
|00001b00| d8 e8 00 00 00 00 84 c0 | 74 0b 57 56 53 ff 15 00 |........|t.WVS...|
|00001b10| 00 00 00 eb 02 33 c0 5f | 5e 5b c3 53 56 57 8b f9 |.....3._|^[.SVW..|
|00001b20| 8b f2 8b d8 e8 00 00 00 | 00 84 c0 74 0b 57 56 53 |........|...t.WVS|
|00001b30| ff 15 00 00 00 00 eb 02 | 33 c0 5f 5e 5b c3 53 56 |........|3._^[.SV|
|00001b40| 57 8b f9 8b f2 8b d8 e8 | 00 00 00 00 84 c0 74 0b |W.......|......t.|
|00001b50| 57 56 53 ff 15 00 00 00 | 00 eb 02 33 c0 5f 5e 5b |WVS.....|...3._^[|
|00001b60| c3 53 56 57 8b f9 8b f2 | 8b d8 e8 00 00 00 00 84 |.SVW....|........|
|00001b70| c0 74 0b 57 56 53 ff 15 | 00 00 00 00 eb 02 33 c0 |.t.WVS..|......3.|
|00001b80| 5f 5e 5b c3 53 56 57 8b | f9 8b f2 8b d8 e8 00 00 |_^[.SVW.|........|
|00001b90| 00 00 84 c0 74 0b 57 56 | 53 ff 15 00 00 00 00 eb |....t.WV|S.......|
|00001ba0| 02 33 c0 5f 5e 5b c3 53 | 56 57 8b f9 8b f2 8b d8 |.3._^[.S|VW......|
|00001bb0| e8 00 00 00 00 84 c0 74 | 0b 57 56 53 ff 15 00 00 |.......t|.WVS....|
|00001bc0| 00 00 eb 02 33 c0 5f 5e | 5b c3 55 8b ec 33 c0 55 |....3._^|[.U..3.U|
|00001bd0| 68 25 00 00 00 64 ff 30 | 64 89 20 ff 05 00 00 00 |h%...d.0|d. .....|
|00001be0| 00 33 c0 5a 59 59 64 89 | 10 68 2c 00 00 00 c3 e9 |.3.ZYYd.|.h,.....|
|00001bf0| 00 00 00 00 eb f8 5d c3 | 83 2d 00 00 00 00 01 c3 |......].|.-......|
|00001c00| 6d 59 02 00 05 ae 04 01 | 7e 1c 01 ae 0a 02 0e 28 |mY......|~......(|
|00001c10| 01 ae 10 02 10 0a 01 80 | 0a 01 ae 10 02 10 0a 01 |........|........|
|00001c20| 82 0a 01 ae 10 02 10 0a | 01 84 0a 01 ae 10 02 10 |........|........|
|00001c30| 0a 01 86 0a 01 ae 10 02 | 10 0a 01 88 0a 01 ae 10 |........|........|
|00001c40| 02 10 0a 01 8a 0a 01 ae | 10 02 10 0a 01 8c 0a 01 |........|........|
|00001c50| ae 10 02 10 0a 01 8e 0a | 01 ae 10 02 10 0a 01 90 |........|........|
|00001c60| 0a 01 ae 10 02 10 0a 01 | 92 0a 01 ae 10 02 10 0a |........|........|
|00001c70| 01 94 0a 01 ae 10 02 10 | 0a 01 96 0a 01 ae 10 02 |........|........|
|00001c80| 10 0a 01 98 0a 01 ae 10 | 02 10 0a 01 9a 0a 01 ae |........|........|
|00001c90| 10 02 10 0a 01 9c 0a 01 | ae 10 02 10 0a 01 9e 0a |........|........|
|00001ca0| 01 ae 10 02 10 0a 01 a0 | 0a 01 ae 10 02 10 0a 01 |........|........|
|00001cb0| a2 0a 01 ae 10 02 10 0a | 01 a4 0a 01 ae 10 02 10 |........|........|
|00001cc0| 0a 01 a6 0a 01 ae 10 02 | 10 0a 01 a8 0a 01 ae 10 |........|........|
|00001cd0| 02 10 0a 01 aa 0a 01 ae | 10 02 10 0a 01 ac a9 06 |........|........|
|00001ce0| 05 b2 14 02 ae 1a 01 80 | 18 05 bc 1a 02 ae 22 01 |........|......".|
|00001cf0| 82 1e 05 c8 1a 02 ae 22 | 01 84 1e 05 d4 1a 02 ae |......."|........|
|00001d00| 22 01 88 1e 05 e0 1a 02 | ae 22 01 8c 1e 05 ec 1a |".......|."......|
|00001d10| 02 ae 22 01 86 1e 05 f8 | 1a 02 ae 22 01 8a 1e 05 |..".....|..."....|
|00001d20| 09 02 1a 02 ae 22 01 8e | 1e 05 21 02 1a 02 ae 22 |....."..|..!...."|
|00001d30| 01 90 1e 05 39 02 08 02 | ae 16 01 92 14 05 45 02 |....9...|......E.|
|00001d40| 14 02 ae 1a 01 94 18 05 | 59 02 08 02 ae 16 01 96 |........|Y.......|
|00001d50| 14 05 65 02 1a 02 ae 22 | 01 98 1e 05 7d 02 1a 02 |..e...."|....}...|
|00001d60| ae 22 01 9e 1e 05 95 02 | 1a 02 ae 22 01 a4 1e 05 |."......|..."....|
|00001d70| ad 02 14 02 ae 1a 01 9a | 18 05 c1 02 14 02 ae 1a |........|........|
|00001d80| 01 a0 18 05 d5 02 14 02 | ae 1a 01 a6 18 05 e9 02 |........|........|
|00001d90| 14 02 ae 1a 01 9c 18 05 | fd 02 14 02 ae 1a 01 a2 |........|........|
|00001da0| 18 05 11 03 14 02 ae 1a | 01 a8 18 05 25 03 14 02 |........|....%...|
|00001db0| ae 1a 01 aa 18 05 39 03 | 14 02 ae 1a 01 ac 18 05 |......9.|........|
|00001dc0| 4d 03 0e 01 4d 03 18 01 | 7c 1a 01 4d 03 0c 02 2a |M...M...||..M...*|
|00001dd0| 10 05 51 03 04 01 7c 0c | 06 51 03 90 00 91 02 02 |..Q...|.|.Q......|
|00001de0| ad 06 00 93 a0 ce 51 03 | 00 02 00 16 2c 00 02 00 |......Q.|....,...|
|00001df0| 2c 2e 00 02 00 30 30 00 | 02 00 32 32 00 02 00 36 |,....00.|..22...6|
|00001e00| 34 00 02 00 3a 36 00 02 | 00 3e 38 00 02 00 40 3a |4...:6..|.>8...@:|
|00001e10| 00 02 00 44 3c 00 02 00 | 48 3e 00 02 00 4e 3e 02 |...D<...|H>...N>.|
|00001e20| 02 00 50 3e 04 02 00 52 | 3e 06 02 00 54 40 00 02 |..P>...R|>...T@..|
|00001e30| 00 5a 42 00 02 00 5e 44 | 00 02 00 60 46 00 02 00 |.ZB...^D|...`F...|
|00001e40| 62 48 00 02 00 66 4a 00 | 02 00 6a 4c 00 02 00 6c |bH...fJ.|..jL...l|
|00001e50| 4e 00 02 00 6e 50 00 02 | 00 74 50 02 02 00 76 50 |N...nP..|.tP...vP|
|00001e60| 04 02 00 78 52 00 02 00 | 7e 54 00 02 00 82 56 00 |...xR...|~T....V.|
|00001e70| 02 00 84 58 00 02 00 86 | 5a 00 02 00 8a 5c 00 02 |...X....|Z....\..|
|00001e80| 00 90 5e 00 02 00 94 60 | 00 02 00 98 62 00 02 00 |..^....`|....b...|
|00001e90| 9a 64 00 02 00 9e 66 00 | 02 00 a2 68 00 02 00 a4 |.d....f.|...h....|
|00001ea0| 6a 00 02 00 a8 6c 00 02 | 00 ac 6e 00 02 00 b0 70 |j....l..|..n....p|
|00001eb0| 00 02 00 b8 70 02 02 00 | ba 70 04 02 00 bc 70 06 |....p...|.p....p.|
|00001ec0| 02 00 be 70 08 02 00 c0 | 70 0a 02 00 c2 70 0c 02 |...p....|p....p..|
|00001ed0| 00 c4 70 0e 02 00 c6 70 | 10 02 00 c8 70 12 02 00 |..p....p|....p...|
|00001ee0| ca 70 14 02 00 cc 72 00 | 02 00 d2 74 00 02 00 d6 |.p....r.|...t....|
|00001ef0| 76 00 02 00 d8 78 00 02 | 00 da 7a 00 02 00 de b2 |v....x..|..z.....|
|00001f00| 00 04 02 e6 d9 03 bc 00 | 04 02 ea f9 03 c8 00 04 |........|........|
|00001f10| 02 f0 19 04 d4 00 04 02 | f6 39 04 e0 00 04 02 fc |........|.9......|
|00001f20| 59 04 ec 00 04 02 05 02 | 79 04 f8 00 04 02 11 02 |Y.......|y.......|
|00001f30| 99 04 09 02 00 04 02 1d | 02 b9 04 21 02 00 04 02 |........|...!....|
|00001f40| 29 02 d9 04 39 02 00 04 | 02 35 02 f5 04 45 02 00 |)...9...|.5...E..|
|00001f50| 04 02 3d 02 11 05 59 02 | 00 04 02 45 02 2d 05 65 |..=...Y.|...E.-.e|
|00001f60| 02 00 04 02 4d 02 4d 05 | 7d 02 00 04 02 59 02 6d |....M.M.|}....Y.m|
|00001f70| 05 95 02 00 04 02 65 02 | 8d 05 ad 02 00 04 02 71 |......e.|.......q|
|00001f80| 02 ad 05 c1 02 00 04 02 | 7d 02 cd 05 d5 02 00 04 |........|}.......|
|00001f90| 02 89 02 ed 05 e9 02 00 | 04 02 95 02 0d 06 fd 02 |........|........|
|00001fa0| 00 04 02 a1 02 2d 06 11 | 03 00 04 02 ad 02 4d 06 |.....-..|......M.|
|00001fb0| 25 03 00 04 02 b9 02 6d | 06 39 03 00 04 02 c5 02 |%......m|.9......|
|00001fc0| 8d 06 4d 03 00 02 00 a9 | 06 98 04 3e 98 04 40 98 |..M.....|...>..@.|
|00001fd0| 04 42 98 04 50 98 04 52 | 98 04 54 98 04 70 98 04 |.B..P..R|..T..p..|
|00001fe0| 72 98 04 74 98 04 b2 98 | 04 bc 98 04 c8 98 04 d4 |r..t....|........|
|00001ff0| 98 04 e0 98 04 ec 98 04 | f8 98 04 09 02 98 04 21 |........|.......!|
|00002000| 02 98 04 39 02 98 04 45 | 02 98 04 59 02 98 04 65 |...9...E|...Y...e|
|00002010| 02 98 04 7d 02 98 04 95 | 02 98 04 ad 02 98 04 c1 |...}....|........|
|00002020| 02 98 04 d5 02 98 04 e9 | 02 98 04 fd 02 98 04 11 |........|........|
|00002030| 03 98 04 25 03 98 04 39 | 03 61 |...%...9|.a |
+--------+-------------------------+-------------------------+--------+--------+
