1 !<arch> 2 / 1402958954 0 0 0 1720 ` 3 8 |DD@@"P"P%%''**-Z-Z0022558Z8Z;*;*==@@CCFHFHIIKKN~N~Q0Q0SS__lib32_libpsapi_a_iname__head_lib32_libpsapi_a_QueryWorkingSetEx@12__imp__QueryWorkingSetEx@12_QueryWorkingSet@12__imp__QueryWorkingSet@12_InitializeProcessForWsWatch@4__imp__InitializeProcessForWsWatch@4_GetWsChangesEx@12__imp__GetWsChangesEx@12_GetWsChanges@12__imp__GetWsChanges@12_GetProcessMemoryInfo@12__imp__GetProcessMemoryInfo@12_GetProcessImageFileNameW@12__imp__GetProcessImageFileNameW@12_GetProcessImageFileNameA@12__imp__GetProcessImageFileNameA@12_GetPerformanceInfo@8__imp__GetPerformanceInfo@8_GetModuleInformation@16__imp__GetModuleInformation@16_GetModuleFileNameExW@16__imp__GetModuleFileNameExW@16_GetModuleFileNameExA@16__imp__GetModuleFileNameExA@16_GetModuleBaseNameW@16__imp__GetModuleBaseNameW@16_GetModuleBaseNameA@16__imp__GetModuleBaseNameA@16_GetMappedFileNameW@16__imp__GetMappedFileNameW@16_GetMappedFileNameA@16__imp__GetMappedFileNameA@16_GetDeviceDriverFileNameW@12__imp__GetDeviceDriverFileNameW@12_GetDeviceDriverFileNameA@12__imp__GetDeviceDriverFileNameA@12_GetDeviceDriverBaseNameW@12__imp__GetDeviceDriverBaseNameW@12_GetDeviceDriverBaseNameA@12__imp__GetDeviceDriverBaseNameA@12_EnumProcesses@12__imp__EnumProcesses@12_EnumProcessModulesEx@20__imp__EnumProcessModulesEx@20_EnumProcessModules@16__imp__EnumProcessModules@16_EnumPageFilesW@8__imp__EnumPageFilesW@8_EnumPageFilesA@8__imp__EnumPageFilesA@8_EnumDeviceDrivers@12__imp__EnumDeviceDrivers@12_EmptyWorkingSet@4__imp__EmptyWorkingSet@4daobt.o/ 1402958954 28587 5000 100640 579 ` 8 L.text 0`.data@0.bss0.idata$4@0.idata$5@0.idata$7@0PSAPI.DLL.filegfake.text.data.bss.idata$4.idata$5.idata$7 11 __lib32_libpsapi_a_iname 12 daobh.o/ 1402958954 28587 5000 100640 651 ` 13 L6.text 0`.data@0.bss0.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$55__head_lib32_libpsapi_a__lib32_libpsapi_a_iname 17 daobs00026.o/ 1402958954 28587 5000 100640 638 ` 18 L| 19 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %QueryWorkingSetEx .text.data.bss.idata$7.idata$5.idata$4.idata$66N_QueryWorkingSetEx@12__imp__QueryWorkingSetEx@12__head_lib32_libpsapi_adaobs00025.o/ 1402958954 28587 5000 100640 634 ` 20 L| 21 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %QueryWorkingSet .text.data.bss.idata$7.idata$5.idata$4.idata$62J_QueryWorkingSet@12__imp__QueryWorkingSet@12__head_lib32_libpsapi_adaobs00024.o/ 1402958954 28587 5000 100640 668 ` 22 L 23 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %InitializeProcessForWsWatch .text.data.bss.idata$7.idata$5.idata$4.idata$6#H`_InitializeProcessForWsWatch@4__imp__InitializeProcessForWsWatch@4__head_lib32_libpsapi_adaobs00023.o/ 1402958954 28587 5000 100640 632 ` 24 L| 25 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %GetWsChangesEx .text.data.bss.idata$7.idata$5.idata$4.idata$60H_GetWsChangesEx@12__imp__GetWsChangesEx@12__head_lib32_libpsapi_adaobs00022.o/ 1402958954 28587 5000 100640 624 ` 26 Lx 27 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %GetWsChanges .text.data.bss.idata$7.idata$5.idata$4.idata$6,D_GetWsChanges@12__imp__GetWsChanges@12__head_lib32_libpsapi_adaobs00021.o/ 1402958954 28587 5000 100640 648 ` 28 L 29 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetProcessMemoryInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_GetProcessMemoryInfo@12__imp__GetProcessMemoryInfo@12__head_lib32_libpsapi_adaobs00020.o/ 1402958954 28587 5000 100640 660 ` 30 L 31 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetProcessImageFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetProcessImageFileNameW@12__imp__GetProcessImageFileNameW@12__head_lib32_libpsapi_adaobs00019.o/ 1402958954 28587 5000 100640 660 ` 32 L 33 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetProcessImageFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetProcessImageFileNameA@12__imp__GetProcessImageFileNameA@12__head_lib32_libpsapi_adaobs00018.o/ 1402958954 28587 5000 100640 642 ` 34 L 35 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetPerformanceInfo .text.data.bss.idata$7.idata$5.idata$4.idata$66N_GetPerformanceInfo@8__imp__GetPerformanceInfo@8__head_lib32_libpsapi_adaobs00017.o/ 1402958954 28587 5000 100640 648 ` 36 L 37 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetModuleInformation .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_GetModuleInformation@16__imp__GetModuleInformation@16__head_lib32_libpsapi_adaobs00016.o/ 1402958954 28587 5000 100640 648 ` 38 L 39 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetModuleFileNameExW .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_GetModuleFileNameExW@16__imp__GetModuleFileNameExW@16__head_lib32_libpsapi_adaobs00015.o/ 1402958954 28587 5000 100640 648 ` 40 L 41 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetModuleFileNameExA .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_GetModuleFileNameExA@16__imp__GetModuleFileNameExA@16__head_lib32_libpsapi_adaobs00014.o/ 1402958954 28587 5000 100640 644 ` 42 L 43 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetModuleBaseNameW .text.data.bss.idata$7.idata$5.idata$4.idata$68P_GetModuleBaseNameW@16__imp__GetModuleBaseNameW@16__head_lib32_libpsapi_adaobs00013.o/ 1402958954 28587 5000 100640 644 ` 44 L 45 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ % GetModuleBaseNameA .text.data.bss.idata$7.idata$5.idata$4.idata$68P_GetModuleBaseNameA@16__imp__GetModuleBaseNameA@16__head_lib32_libpsapi_adaobs00012.o/ 1402958954 28587 5000 100640 644 ` 47 L 48 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetMappedFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$68P_GetMappedFileNameW@16__imp__GetMappedFileNameW@16__head_lib32_libpsapi_adaobs00011.o/ 1402958954 28587 5000 100640 644 ` 50 L 51 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetMappedFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$68P_GetMappedFileNameA@16__imp__GetMappedFileNameA@16__head_lib32_libpsapi_adaobs00010.o/ 1402958954 28587 5000 100640 660 ` 53 L 54 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ % 55 GetDeviceDriverFileNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetDeviceDriverFileNameW@12__imp__GetDeviceDriverFileNameW@12__head_lib32_libpsapi_adaobs00009.o/ 1402958954 28587 5000 100640 660 ` 56 L 57 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ % GetDeviceDriverFileNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetDeviceDriverFileNameA@12__imp__GetDeviceDriverFileNameA@12__head_lib32_libpsapi_adaobs00008.o/ 1402958954 28587 5000 100640 660 ` 58 L 59 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetDeviceDriverBaseNameW .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetDeviceDriverBaseNameW@12__imp__GetDeviceDriverBaseNameW@12__head_lib32_libpsapi_adaobs00007.o/ 1402958954 28587 5000 100640 660 ` 60 L 61 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetDeviceDriverBaseNameA .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_GetDeviceDriverBaseNameA@12__imp__GetDeviceDriverBaseNameA@12__head_lib32_libpsapi_adaobs00006.o/ 1402958954 28587 5000 100640 626 ` 62 Lx 63 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %EnumProcesses .text.data.bss.idata$7.idata$5.idata$4.idata$6.F_EnumProcesses@12__imp__EnumProcesses@12__head_lib32_libpsapi_adaobs00005.o/ 1402958954 28587 5000 100640 648 ` 64 L 65 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EnumProcessModulesEx .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_EnumProcessModulesEx@20__imp__EnumProcessModulesEx@20__head_lib32_libpsapi_adaobs00004.o/ 1402958954 28587 5000 100640 644 ` 66 L 67 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EnumProcessModules .text.data.bss.idata$7.idata$5.idata$4.idata$68P_EnumProcessModules@16__imp__EnumProcessModules@16__head_lib32_libpsapi_adaobs00003.o/ 1402958954 28587 5000 100640 630 ` 68 L| 69 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EnumPageFilesW .text.data.bss.idata$7.idata$5.idata$4.idata$6.F_EnumPageFilesW@8__imp__EnumPageFilesW@8__head_lib32_libpsapi_adaobs00002.o/ 1402958954 28587 5000 100640 630 ` 70 L| 71 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EnumPageFilesA .text.data.bss.idata$7.idata$5.idata$4.idata$6.F_EnumPageFilesA@8__imp__EnumPageFilesA@8__head_lib32_libpsapi_adaobs00001.o/ 1402958954 28587 5000 100640 638 ` 72 L| 73 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EnumDeviceDrivers .text.data.bss.idata$7.idata$5.idata$4.idata$66N_EnumDeviceDrivers@12__imp__EnumDeviceDrivers@12__head_lib32_libpsapi_adaobs00000.o/ 1402958954 28587 5000 100640 632 ` 74 L| 75 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EmptyWorkingSet .text.data.bss.idata$7.idata$5.idata$4.idata$60H_EmptyWorkingSet@4__imp__EmptyWorkingSet@4__head_lib32_libpsapi_a