psapi.dll

Description: Process Status Helper

Authors: Copyright (C) Microsoft Corp. 1981-1999

Version: 5.0.2134.1

Architecture: 32-bit

Operating System: Windows NT

SHA256: e87da4f1e5a4b292239d9f9a4fe3573b

File Size: 28.3 KB

Uploaded At: June 9, 2026, 6:46 a.m.

Views: 37

EmptyWorkingSet (Ordinal: 1, Address: 0x1cde)
EnumDeviceDrivers (Ordinal: 2, Address: 0x1226)
EnumProcessModules (Ordinal: 3, Address: 0x1981)
EnumProcesses (Ordinal: 4, Address: 0x3106)
GetDeviceDriverBaseNameA (Ordinal: 5, Address: 0x1106)
GetDeviceDriverBaseNameW (Ordinal: 6, Address: 0x1789)
GetDeviceDriverFileNameA (Ordinal: 7, Address: 0x1728)
GetDeviceDriverFileNameW (Ordinal: 8, Address: 0x16d8)
GetMappedFileNameA (Ordinal: 9, Address: 0x185e)
GetMappedFileNameW (Ordinal: 10, Address: 0x17e1)
GetModuleBaseNameA (Ordinal: 11, Address: 0x1bd4)
GetModuleBaseNameW (Ordinal: 12, Address: 0x1b7e)
GetModuleFileNameExA (Ordinal: 13, Address: 0x1b1d)
GetModuleFileNameExW (Ordinal: 14, Address: 0x1ac7)
GetModuleInformation (Ordinal: 15, Address: 0x1c35)
GetProcessMemoryInfo (Ordinal: 16, Address: 0x3233)
GetWsChanges (Ordinal: 17, Address: 0x3351)
InitializeProcessForWsWatch (Ordinal: 18, Address: 0x3317)
QueryWorkingSet (Ordinal: 19, Address: 0x1d42)

CloseHandle (Address: 0x687e1090)
CreateFileA (Address: 0x687e1080)
DisableThreadLibraryCalls (Address: 0x687e107c)
FreeLibrary (Address: 0x687e1068)
GetLastError (Address: 0x687e105c)
GetProcAddress (Address: 0x687e106c)
GetProcessHeap (Address: 0x687e1088)
GetProcessWorkingSetSize (Address: 0x687e1098)
GetSystemInfo (Address: 0x687e10a8)
HeapAlloc (Address: 0x687e108c)
InterlockedExchange (Address: 0x687e1070)
LoadLibraryA (Address: 0x687e1064)
LocalAlloc (Address: 0x687e1054)
LocalFree (Address: 0x687e10a4)
lstrcpyA (Address: 0x687e1094)
lstrlenA (Address: 0x687e109c)
MapViewOfFile (Address: 0x687e1078)
MultiByteToWideChar (Address: 0x687e1058)
OpenFileMappingA (Address: 0x687e1074)
RaiseException (Address: 0x687e1060)
ReadProcessMemory (Address: 0x687e10ac)
SetLastError (Address: 0x687e10a0)
SetProcessWorkingSetSize (Address: 0x687e10b4)
UnmapViewOfFile (Address: 0x687e1084)
WideCharToMultiByte (Address: 0x687e10b0)

_chkstk (Address: 0x687e1018)
_stricmp (Address: 0x687e1000)
atoi (Address: 0x687e100c)
DbgPrint (Address: 0x687e101c)
NtAllocateVirtualMemory (Address: 0x687e1028)
NtCreateProfile (Address: 0x687e1020)
NtQueryInformationProcess (Address: 0x687e1038)
NtQuerySystemInformation (Address: 0x687e104c)
NtQueryVirtualMemory (Address: 0x687e1048)
NtSetInformationProcess (Address: 0x687e1040)
NtSetIntervalProfile (Address: 0x687e1030)
NtStartProfile (Address: 0x687e1034)
NtStopProfile (Address: 0x687e1010)
NtWriteFile (Address: 0x687e103c)
RtlAdjustPrivilege (Address: 0x687e102c)
RtlMultiByteToUnicodeN (Address: 0x687e1024)
RtlNtStatusToDosError (Address: 0x687e1044)
RtlUnicodeToOemN (Address: 0x687e1014)
RtlUnwind (Address: 0x687e1004)
sprintf (Address: 0x687e1008)