ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 38 | !<arch>./...............15161608 |
0020 | 36 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 34 20 20 20 20 20 | 69..0.....0.....0.......504..... |
0040 | 20 20 60 0a 00 00 00 0c 00 00 02 3c 00 00 05 28 00 00 08 86 00 00 08 86 00 00 0b a0 00 00 0b a0 | ..`........<...(................ |
0060 | 00 00 0e ba 00 00 0e ba 00 00 11 d4 00 00 11 d4 00 00 14 e6 00 00 14 e6 5f 5f 43 5f 5f 55 73 65 | ........................__C__Use |
0080 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
00a0 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 | ib_libwinapi_windowsapp_api_ms_w |
00c0 | 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 | in_core_psapi_l1_1_0_a_iname._he |
00e0 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
0100 | 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 | _x86_64_lib_libwinapi_windowsapp |
0120 | 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 00 | _api_ms_win_core_psapi_l1_1_0_a. |
0140 | 4b 33 32 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 5f 5f 69 6d 70 5f 4b 33 | K32GetProcessMemoryInfo.__imp_K3 |
0160 | 32 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 4b 33 32 47 65 74 4d 6f 64 75 | 2GetProcessMemoryInfo.K32GetModu |
0180 | 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4b 33 32 47 65 74 4d 6f 64 75 6c 65 | leInformation.__imp_K32GetModule |
01a0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4b 33 32 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 | Information.K32GetModuleFileName |
01c0 | 45 78 57 00 5f 5f 69 6d 70 5f 4b 33 32 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 | ExW.__imp_K32GetModuleFileNameEx |
01e0 | 57 00 4b 33 32 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4b 33 | W.K32GetModuleBaseNameW.__imp_K3 |
0200 | 32 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 4b 33 32 45 6e 75 6d 50 72 6f 63 65 | 2GetModuleBaseNameW.K32EnumProce |
0220 | 73 73 65 73 00 5f 5f 69 6d 70 5f 4b 33 32 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 64 73 76 64 | sses.__imp_K32EnumProcesses.dsvd |
0240 | 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 38 36 39 20 20 30 20 20 20 20 20 30 20 | bt.o/.......1516160869..0.....0. |
0260 | 20 20 20 20 31 30 30 36 36 36 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 | ....100666..687.......`.d....... |
0280 | 38 01 00 00 0f 00 00 00 00 00 05 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 8............text............... |
02a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ..................P`.data....... |
02c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 | ........................@.P..bss |
02e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0300 | 80 00 50 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 04 01 00 00 00 00 00 00 | ..P..idata$4.................... |
0320 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ........@.0..idata$5............ |
0340 | 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ................@.0..idata$7.... |
0360 | 00 00 00 00 24 00 00 00 14 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 | ....$...................@.0..... |
0380 | 00 00 00 00 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 63 6f 72 65 2d 70 73 61 70 | ............api-ms-win-core-psap |
03a0 | 69 2d 6c 31 2d 31 2d 30 2e 64 6c 6c 00 00 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 | i-l1-1-0.dll.....file........... |
03c0 | 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 | g.fake...............text....... |
03e0 | 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 | .........................data... |
0400 | 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 | .............................bss |
0420 | 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0440 | 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 | .idata$4........................ |
0460 | 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 | .....idata$5.................... |
0480 | 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 21 00 00 00 00 00 | .........idata$7..........!..... |
04a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 69 00 | ..............................i. |
04c0 | 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 | ..__C__Users_Peter_Code_winapi_r |
04e0 | 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 | s_x86_64_lib_libwinapi_windowsap |
0500 | 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 | p_api_ms_win_core_psapi_l1_1_0_a |
0520 | 5f 69 6e 61 6d 65 00 0a 64 73 76 64 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 38 | _iname..dsvdbh.o/.......15161608 |
0540 | 36 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 38 30 32 20 20 20 20 20 | 69..0.....0.....100666..802..... |
0560 | 20 20 60 0a 64 86 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d.......6............text... |
0580 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 | ..............................P` |
05a0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
05c0 | 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.P..bss.................... |
05e0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 | ..............P..idata$2........ |
0600 | 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 | ....................@.0..idata$5 |
0620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0640 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .idata$4........................ |
0660 | 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0......................... |
0680 | 0c 00 00 00 03 00 0c 00 00 00 0f 00 00 00 03 00 10 00 00 00 0d 00 00 00 03 00 2e 66 69 6c 65 00 | ...........................file. |
06a0 | 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e | ..........g.fake..............hn |
06c0 | 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 | ame.............fthunk.......... |
06e0 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 | ...text......................... |
0700 | 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 | .......data..................... |
0720 | 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 | ...........bss.................. |
0740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 | ...............idata$2.......... |
0760 | 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | ...................idata$4...... |
0780 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$5.................... |
07a0 | 00 00 04 00 00 00 02 00 00 00 00 00 67 00 00 00 00 00 00 00 00 00 00 00 02 00 cc 00 00 00 5f 68 | ............g................._h |
07c0 | 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 | ead_C__Users_Peter_Code_winapi_r |
07e0 | 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 | s_x86_64_lib_libwinapi_windowsap |
0800 | 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 | p_api_ms_win_core_psapi_l1_1_0_a |
0820 | 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | .__C__Users_Peter_Code_winapi_rs |
0840 | 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 | _x86_64_lib_libwinapi_windowsapp |
0860 | 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 5f | _api_ms_win_core_psapi_l1_1_0_a_ |
0880 | 69 6e 61 6d 65 00 64 73 76 64 62 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 36 39 | iname.dsvdbs00004.o/..1516160869 |
08a0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 33 20 20 20 20 20 20 20 | ..0.....0.....100666..733....... |
08c0 | 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
08e0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...d.............0`.d |
0900 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
0920 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
0940 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
0960 | 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...n.............0..idata$5.. |
0980 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...x.............0..i |
09a0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 | data$4............@............. |
09c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 | ....0..idata$6............H..... |
09e0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
0a00 | 00 00 00 00 00 00 00 00 00 00 04 00 4b 33 32 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 | ............K32GetProcessMemoryI |
0a20 | 6e 66 6f 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | nfo............................. |
0a40 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
0a60 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
0a80 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
0aa0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
0ac0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
0ae0 | 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 | ....................:........... |
0b00 | 02 00 9d 00 00 00 4b 33 32 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 5f 5f | ......K32GetProcessMemoryInfo.__ |
0b20 | 69 6d 70 5f 4b 33 32 47 65 74 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 49 6e 66 6f 00 5f 68 65 61 | imp_K32GetProcessMemoryInfo._hea |
0b40 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
0b60 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f | x86_64_lib_libwinapi_windowsapp_ |
0b80 | 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 00 0a | api_ms_win_core_psapi_l1_1_0_a.. |
0ba0 | 64 73 76 64 62 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 36 39 20 20 30 20 20 20 | dsvdbs00003.o/..1516160869..0... |
0bc0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..733.......`.d... |
0be0 | 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
0c00 | 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...d.............0`.data... |
0c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0c40 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
0c60 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
0c80 | 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | n.............0..idata$5........ |
0ca0 | 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...x.............0..idata$4 |
0cc0 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@.................0. |
0ce0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
0d00 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
0d20 | 00 00 00 00 03 00 4b 33 32 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 | ......K32GetModuleInformation... |
0d40 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
0d60 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
0d80 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
0da0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
0dc0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
0de0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 | ................................ |
0e00 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 | ..............:................. |
0e20 | 4b 33 32 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4b 33 | K32GetModuleInformation.__imp_K3 |
0e40 | 32 47 65 74 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 | 2GetModuleInformation._head_C__U |
0e60 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
0e80 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 | _lib_libwinapi_windowsapp_api_ms |
0ea0 | 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 73 76 64 62 73 | _win_core_psapi_l1_1_0_a..dsvdbs |
0ec0 | 30 30 30 30 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 36 39 20 20 30 20 20 20 20 20 30 20 20 20 | 00002.o/..1516160869..0.....0... |
0ee0 | 20 20 31 30 30 36 36 36 20 20 37 33 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 | ..100666..733.......`.d......... |
0f00 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
0f20 | 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..d.............0`.data......... |
0f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
0f60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
0f80 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 | 0..idata$7............4...n..... |
0fa0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
0fc0 | 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..x.............0..idata$4...... |
0fe0 | 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@.................0..idata |
1000 | 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
1020 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 | ...%............................ |
1040 | 4b 33 32 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 00 00 02 00 00 00 08 00 | K32GetModuleFileNameExW......... |
1060 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
1080 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
10a0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
10c0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
10e0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
1100 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 | ................................ |
1120 | 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 4b 33 32 47 65 74 | ........:.................K32Get |
1140 | 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 5f 5f 69 6d 70 5f 4b 33 32 47 65 74 4d 6f | ModuleFileNameExW.__imp_K32GetMo |
1160 | 64 75 6c 65 46 69 6c 65 4e 61 6d 65 45 78 57 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 | duleFileNameExW._head_C__Users_P |
1180 | 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c | eter_Code_winapi_rs_x86_64_lib_l |
11a0 | 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 | ibwinapi_windowsapp_api_ms_win_c |
11c0 | 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 73 76 64 62 73 30 30 30 30 31 2e | ore_psapi_l1_1_0_a..dsvdbs00001. |
11e0 | 6f 2f 20 20 31 35 31 36 31 36 30 38 36 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516160869..0.....0.....1006 |
1200 | 36 36 20 20 37 32 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 | 66..725.......`.d............... |
1220 | 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 | .....text...............,...`... |
1240 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
1260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
1280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
12a0 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...j........... |
12c0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 | ..0..idata$5............8...t... |
12e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$4............ |
1300 | 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | @...~.............0..idata$6.... |
1320 | 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........H....................%.. |
1340 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 4b 33 32 47 65 74 | ..........................K32Get |
1360 | 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 57 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | ModuleBaseNameW................. |
1380 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
13a0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
13c0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
13e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
1400 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
1420 | 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 | ..............................6. |
1440 | 00 00 00 00 00 00 00 00 00 00 02 00 99 00 00 00 4b 33 32 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 | ................K32GetModuleBase |
1460 | 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4b 33 32 47 65 74 4d 6f 64 75 6c 65 42 61 73 65 4e 61 6d 65 | NameW.__imp_K32GetModuleBaseName |
1480 | 57 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | W._head_C__Users_Peter_Code_wina |
14a0 | 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f | pi_rs_x86_64_lib_libwinapi_windo |
14c0 | 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f 6c 31 5f 31 | wsapp_api_ms_win_core_psapi_l1_1 |
14e0 | 5f 30 5f 61 00 0a 64 73 76 64 62 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 36 39 | _0_a..dsvdbs00000.o/..1516160869 |
1500 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 | ..0.....0.....100666..711....... |
1520 | 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
1540 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...\.............0`.d |
1560 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
1580 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
15a0 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
15c0 | 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...f.............0..idata$5.. |
15e0 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...p.............0..i |
1600 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 | data$4............@...z......... |
1620 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 | ....0..idata$6............H..... |
1640 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
1660 | 00 00 00 00 00 00 00 00 00 00 00 00 4b 33 32 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 00 02 00 | ............K32EnumProcesses.... |
1680 | 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 | ................................ |
16a0 | 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
16c0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
16e0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
1700 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
1720 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 15 00 00 00 00 00 | ................................ |
1740 | 00 00 05 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 02 00 8f 00 00 00 4b 33 | ............,.................K3 |
1760 | 32 45 6e 75 6d 50 72 6f 63 65 73 73 65 73 00 5f 5f 69 6d 70 5f 4b 33 32 45 6e 75 6d 50 72 6f 63 | 2EnumProcesses.__imp_K32EnumProc |
1780 | 65 73 73 65 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | esses._head_C__Users_Peter_Code_ |
17a0 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 | winapi_rs_x86_64_lib_libwinapi_w |
17c0 | 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 70 73 61 70 69 5f | indowsapp_api_ms_win_core_psapi_ |
17e0 | 6c 31 5f 31 5f 30 5f 61 00 0a | l1_1_0_a.. |