1 !<arch> 2 / 1402958955 0 0 0 1512 ` 3 8,zz44xx$$!!$H$H'')),,/T/T224477:d:d=4=4@@BBEEHFHFKKMMPnPnS(S(__lib64_libpsapi_a_iname_head_lib64_libpsapi_aQueryWorkingSetEx__imp_QueryWorkingSetExQueryWorkingSet__imp_QueryWorkingSetInitializeProcessForWsWatch__imp_InitializeProcessForWsWatchGetWsChangesEx__imp_GetWsChangesExGetWsChanges__imp_GetWsChangesGetProcessMemoryInfo__imp_GetProcessMemoryInfoGetProcessImageFileNameW__imp_GetProcessImageFileNameWGetProcessImageFileNameA__imp_GetProcessImageFileNameAGetPerformanceInfo__imp_GetPerformanceInfoGetModuleInformation__imp_GetModuleInformationGetModuleFileNameExW__imp_GetModuleFileNameExWGetModuleFileNameExA__imp_GetModuleFileNameExAGetModuleBaseNameW__imp_GetModuleBaseNameWGetModuleBaseNameA__imp_GetModuleBaseNameAGetMappedFileNameW__imp_GetMappedFileNameWGetMappedFileNameA__imp_GetMappedFileNameAGetDeviceDriverFileNameW__imp_GetDeviceDriverFileNameWGetDeviceDriverFileNameA__imp_GetDeviceDriverFileNameAGetDeviceDriverBaseNameW__imp_GetDeviceDriverBaseNameWGetDeviceDriverBaseNameA__imp_GetDeviceDriverBaseNameAEnumProcesses__imp_EnumProcessesEnumProcessModulesEx__imp_EnumProcessModulesExEnumProcessModules__imp_EnumProcessModulesEnumPageFilesW__imp_EnumPageFilesWEnumPageFilesA__imp_EnumPageFilesAEnumDeviceDrivers__imp_EnumDeviceDriversEmptyWorkingSet__imp_EmptyWorkingSetdimgt.o/ 1402958955 28587 5000 100640 587 ` 8 d .text P`.data@P.bssP.idata$4@0.idata$5@0.idata$7@0PSAPI.DLL.filegfake.text.data.bss.idata$4.idata$5.idata$7 11 __lib64_libpsapi_a_iname 12 dimgh.o/ 1402958955 28587 5000 100640 650 ` 13 d6.text P`.data@P.bssP.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$54_head_lib64_libpsapi_a__lib64_libpsapi_a_inamedimgs00026.o/ 1402958955 28587 5000 100640 637 ` 17 d 18 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %QueryWorkingSetEx .text.data.bss.idata$7.idata$5.idata$4.idata$6.EQueryWorkingSetEx__imp_QueryWorkingSetEx_head_lib64_libpsapi_a 19 dimgs00025.o/ 1402958955 28587 5000 100640 633 ` 20 d 21 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %QueryWorkingSet .text.data.bss.idata$7.idata$5.idata$4.idata$6*AQueryWorkingSet__imp_QueryWorkingSet_head_lib64_libpsapi_a 22 dimgs00024.o/ 1402958955 28587 5000 100640 669 ` 23 d 24 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %InitializeProcessForWsWatch .text.data.bss.idata$7.idata$5.idata$4.idata$6 BYInitializeProcessForWsWatch__imp_InitializeProcessForWsWatch_head_lib64_libpsapi_a 25 dimgs00023.o/ 1402958955 28587 5000 100640 631 ` 26 d 27 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %GetWsChangesEx .text.data.bss.idata$7.idata$5.idata$4.idata$6(?GetWsChangesEx__imp_GetWsChangesEx_head_lib64_libpsapi_a 28 dimgs00022.o/ 1402958955 28587 5000 100640 623 ` 29 d 30 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H %GetWsChanges .text.data.bss.idata$7.idata$5.idata$4.idata$6$;GetWsChanges__imp_GetWsChanges_head_lib64_libpsapi_a 31 dimgs00021.o/ 1402958955 28587 5000 100640 647 ` 32 d 33 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetProcessMemoryInfo .text.data.bss.idata$7.idata$5.idata$4.idata$64KGetProcessMemoryInfo__imp_GetProcessMemoryInfo_head_lib64_libpsapi_a 34 dimgs00020.o/ 1402958955 28587 5000 100640 659 ` 35 d 36 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %GetProcessImageFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetProcessImageFileNameW__imp_GetProcessImageFileNameW_head_lib64_libpsapi_a 37 dimgs00019.o/ 1402958955 28587 5000 100640 659 ` 38 d 39 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %GetProcessImageFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetProcessImageFileNameA__imp_GetProcessImageFileNameA_head_lib64_libpsapi_a 40 dimgs00018.o/ 1402958955 28587 5000 100640 643 ` 41 d 42 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetPerformanceInfo .text.data.bss.idata$7.idata$5.idata$4.idata$60GGetPerformanceInfo__imp_GetPerformanceInfo_head_lib64_libpsapi_a 43 dimgs00017.o/ 1402958955 28587 5000 100640 647 ` 44 d 45 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetModuleInformation .text.data.bss.idata$7.idata$5.idata$4.idata$64KGetModuleInformation__imp_GetModuleInformation_head_lib64_libpsapi_a 46 dimgs00016.o/ 1402958955 28587 5000 100640 647 ` 47 d 48 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetModuleFileNameExW .text.data.bss.idata$7.idata$5.idata$4.idata$64KGetModuleFileNameExW__imp_GetModuleFileNameExW_head_lib64_libpsapi_a 49 dimgs00015.o/ 1402958955 28587 5000 100640 647 ` 50 d 51 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetModuleFileNameExA .text.data.bss.idata$7.idata$5.idata$4.idata$64KGetModuleFileNameExA__imp_GetModuleFileNameExA_head_lib64_libpsapi_a 52 dimgs00014.o/ 1402958955 28587 5000 100640 643 ` 53 d 54 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetModuleBaseNameW .text.data.bss.idata$7.idata$5.idata$4.idata$60GGetModuleBaseNameW__imp_GetModuleBaseNameW_head_lib64_libpsapi_a 55 dimgs00013.o/ 1402958955 28587 5000 100640 643 ` 56 d 57 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % GetModuleBaseNameA .text.data.bss.idata$7.idata$5.idata$4.idata$60GGetModuleBaseNameA__imp_GetModuleBaseNameA_head_lib64_libpsapi_a 59 dimgs00012.o/ 1402958955 28587 5000 100640 643 ` 60 d 61 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetMappedFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$60GGetMappedFileNameW__imp_GetMappedFileNameW_head_lib64_libpsapi_a 63 dimgs00011.o/ 1402958955 28587 5000 100640 643 ` 64 d 65 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %GetMappedFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$60GGetMappedFileNameA__imp_GetMappedFileNameA_head_lib64_libpsapi_a 67 dimgs00010.o/ 1402958955 28587 5000 100640 659 ` 68 d 69 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % 70 GetDeviceDriverFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetDeviceDriverFileNameW__imp_GetDeviceDriverFileNameW_head_lib64_libpsapi_a 71 dimgs00009.o/ 1402958955 28587 5000 100640 659 ` 72 d 73 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % GetDeviceDriverFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetDeviceDriverFileNameA__imp_GetDeviceDriverFileNameA_head_lib64_libpsapi_a 74 dimgs00008.o/ 1402958955 28587 5000 100640 659 ` 75 d 76 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %GetDeviceDriverBaseNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetDeviceDriverBaseNameW__imp_GetDeviceDriverBaseNameW_head_lib64_libpsapi_a 77 dimgs00007.o/ 1402958955 28587 5000 100640 659 ` 78 d 79 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %GetDeviceDriverBaseNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6<SGetDeviceDriverBaseNameA__imp_GetDeviceDriverBaseNameA_head_lib64_libpsapi_a 80 dimgs00006.o/ 1402958955 28587 5000 100640 625 ` 81 d 82 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H %EnumProcesses .text.data.bss.idata$7.idata$5.idata$4.idata$6&=EnumProcesses__imp_EnumProcesses_head_lib64_libpsapi_a 83 dimgs00005.o/ 1402958955 28587 5000 100640 647 ` 84 d 85 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EnumProcessModulesEx .text.data.bss.idata$7.idata$5.idata$4.idata$64KEnumProcessModulesEx__imp_EnumProcessModulesEx_head_lib64_libpsapi_a 86 dimgs00004.o/ 1402958955 28587 5000 100640 643 ` 87 d 88 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EnumProcessModules .text.data.bss.idata$7.idata$5.idata$4.idata$60GEnumProcessModules__imp_EnumProcessModules_head_lib64_libpsapi_a 89 dimgs00003.o/ 1402958955 28587 5000 100640 631 ` 90 d 91 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EnumPageFilesW .text.data.bss.idata$7.idata$5.idata$4.idata$6(?EnumPageFilesW__imp_EnumPageFilesW_head_lib64_libpsapi_a 92 dimgs00002.o/ 1402958955 28587 5000 100640 631 ` 93 d 94 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EnumPageFilesA .text.data.bss.idata$7.idata$5.idata$4.idata$6(?EnumPageFilesA__imp_EnumPageFilesA_head_lib64_libpsapi_a 95 dimgs00001.o/ 1402958955 28587 5000 100640 637 ` 96 d 97 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EnumDeviceDrivers .text.data.bss.idata$7.idata$5.idata$4.idata$6.EEnumDeviceDrivers__imp_EnumDeviceDrivers_head_lib64_libpsapi_a 98 dimgs00000.o/ 1402958955 28587 5000 100640 633 ` 99 d 100 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EmptyWorkingSet .text.data.bss.idata$7.idata$5.idata$4.idata$6*AEmptyWorkingSet__imp_EmptyWorkingSet_head_lib64_libpsapi_a 101