Generated by JEB on 2019/08/01

PE: C:\Windows\System32\psapi.dll Base=0x180000000 SHA-256=10B640AEEB310263D5418F65EC05E6127F2C224C0AC837E71816D03DB207C510
PDB: psapi.pdb GUID={2E9BA855-9547-1EEE-13567C48956A05AC} Age=1

105 located named symbols:
0x18000293C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180004008: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180002148: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001320: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800021C8: "__cdecl _imp_K32GetWsChanges" __imp_K32GetWsChanges
0x1800021A0: api-ms-win-core-psapi-ansi-l1-1-0_NULL_THUNK_DATA
0x1800022A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001050: GetDeviceDriverBaseNameWStub
0x180002218: "__cdecl _imp_K32EnumProcessModulesEx" __imp_K32EnumProcessModulesEx
0x1800029A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800021F8: "__cdecl _imp_K32EnumDeviceDrivers" __imp_K32EnumDeviceDrivers
0x180002120: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180002248: api-ms-win-core-psapi-l1-1-0_NULL_THUNK_DATA
0x180002220: "__cdecl _imp_K32QueryWorkingSetEx" __imp_K32QueryWorkingSetEx
0x180001070: GetProcessImageFileNameWStub
0x180001370: GetDeviceDriverBaseNameAStub
0x180002240: "__cdecl _imp_K32GetWsChangesEx" __imp_K32GetWsChangesEx
0x180002950: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-l1-1-0
0x1800013F0: GetPerformanceInfoStub
0x180001020: EnumDeviceDriversStub
0x1800021D0: "__cdecl _imp_K32InitializeProcessForWsWatch" __imp_K32InitializeProcessForWsWatch
0x180002128: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180002140: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180001330: EmptyWorkingSetStub
0x180002290: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180002138: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180001400: GetProcessImageFileNameAStub
0x180001040: EnumProcessesStub
0x180002150: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180001450: QueryWorkingSetExStub
0x180002964: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800021D8: "__cdecl _imp_K32GetPerformanceInfo" __imp_K32GetPerformanceInfo
0x180001430: GetWsChangesStub
0x180002190: "__cdecl _imp_K32GetMappedFileNameA" __imp_K32GetMappedFileNameA
0x180002258: "__cdecl _imp_K32GetModuleBaseNameA" __imp_K32GetModuleBaseNameA
0x180002210: "__cdecl _imp_K32GetModuleBaseNameW" __imp_K32GetModuleBaseNameW
0x180001080: "__cdecl DllMainCRTStartupForGS" _DllMainCRTStartupForGS
0x1800021B8: "__cdecl _imp_K32GetMappedFileNameW" __imp_K32GetMappedFileNameW
0x1800021F0: "__cdecl _imp_K32GetDeviceDriverBaseNameW" __imp_K32GetDeviceDriverBaseNameW
0x180002180: "__cdecl _imp_K32GetDeviceDriverBaseNameA" __imp_K32GetDeviceDriverBaseNameA
0x1800022A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180002158: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002278: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180002270: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000298C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180001390: GetDeviceDriverFileNameWStub
0x180001460: QueryWorkingSetStub
0x1800010B0: "__cdecl _security_check_cookie" __security_check_cookie
0x180002160: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180001060: GetModuleFileNameExWStub
0x180002268: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800021E0: "__cdecl _imp_K32EnumProcesses" __imp_K32EnumProcesses
0x180002238: "__cdecl _imp_K32EmptyWorkingSet" __imp_K32EmptyWorkingSet
0x180001340: EnumPageFilesAStub
0x180001440: InitializeProcessForWsWatchStub
0x1800013E0: GetModuleInformationStub
0x180002170: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800022B0: "__cdecl _guard_fids_table" __guard_fids_table
0x180002010: "__cdecl load_config_used" _load_config_used
0x1800013B0: GetMappedFileNameWStub
0x1800013C0: GetModuleBaseNameAStub
0x1800021E8: "__cdecl _imp_K32GetModuleInformation" __imp_K32GetModuleInformation
0x180002130: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180002288: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180002168: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180002280: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800021C0: "__cdecl _imp_K32QueryWorkingSet" __imp_K32QueryWorkingSet
0x180001300: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180002198: "__cdecl _imp_K32GetDeviceDriverFileNameA" __imp_K32GetDeviceDriverFileNameA
0x180002200: "__cdecl _imp_K32GetDeviceDriverFileNameW" __imp_K32GetDeviceDriverFileNameW
0x180001360: EnumProcessModulesExStub
0x180002298: ntdll_NULL_THUNK_DATA
0x1800013A0: GetMappedFileNameAStub
0x180001030: EnumProcessModulesStub
0x1800021A8: "__cdecl _imp_K32EnumPageFilesW" __imp_K32EnumPageFilesW
0x180002188: "__cdecl _imp_K32EnumPageFilesA" __imp_K32EnumPageFilesA
0x180004000: "__cdecl _security_cookie" __security_cookie
0x1800029DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-ansi-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-ansi-l1-1-0
0x180001010: GetModuleBaseNameWStub
0x1800029B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002208: "__cdecl _imp_K32GetProcessMemoryInfo" __imp_K32GetProcessMemoryInfo
0x1800021B0: "__cdecl _imp_K32EnumProcessModules" __imp_K32EnumProcessModules
0x180002230: "__cdecl _imp_K32GetProcessImageFileNameW" __imp_K32GetProcessImageFileNameW
0x180002118: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180002178: "__cdecl _imp_K32GetProcessImageFileNameA" __imp_K32GetProcessImageFileNameA
0x1800010D4: "__cdecl _security_init_cookie" __security_init_cookie
0x1800029C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-psapi-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-psapi-obsolete-l1-1-0
0x1800011B0: "__cdecl _report_gsfailure" __report_gsfailure
0x180001380: GetDeviceDriverFileNameAStub
0x180001420: GetWsChangesExStub
0x180001410: GetProcessMemoryInfoStub
0x180002260: api-ms-win-core-psapi-obsolete-l1-1-0_NULL_THUNK_DATA
0x180002978: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800013D0: GetModuleFileNameExAStub
0x180002228: "__cdecl _imp_K32GetModuleFileNameExW" __imp_K32GetModuleFileNameExW
0x180002250: "__cdecl _imp_K32GetModuleFileNameExA" __imp_K32GetModuleFileNameExA
0x1800029F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001350: EnumPageFilesWStub

[JEB Decompiler by PNF Software]