psapi.dll
v5.0.2134.1
32-bit
Windows NT
Analyzed
Exported functions 19
EmptyWorkingSet
#1 · 0x1cde
EnumDeviceDrivers
#2 · 0x1226
EnumProcessModules
#3 · 0x1981
EnumProcesses
#4 · 0x3106
GetDeviceDriverBaseNameA
#5 · 0x1106
GetDeviceDriverBaseNameW
#6 · 0x1789
GetDeviceDriverFileNameA
#7 · 0x1728
GetDeviceDriverFileNameW
#8 · 0x16d8
GetMappedFileNameA
#9 · 0x185e
GetMappedFileNameW
#10 · 0x17e1
GetModuleBaseNameA
#11 · 0x1bd4
GetModuleBaseNameW
#12 · 0x1b7e
GetModuleFileNameExA
#13 · 0x1b1d
GetModuleFileNameExW
#14 · 0x1ac7
GetModuleInformation
#15 · 0x1c35
GetProcessMemoryInfo
#16 · 0x3233
GetWsChanges
#17 · 0x3351
InitializeProcessForWsWatch
#18 · 0x3317
QueryWorkingSet
#19 · 0x1d42
No function matches your filter.
Imported DLLs & functions 45
KERNEL32.DLL
25
CloseHandle
0x687e1090
CreateFileA
0x687e1080
DisableThreadLibraryCalls
0x687e107c
FreeLibrary
0x687e1068
GetLastError
0x687e105c
GetProcAddress
0x687e106c
GetProcessHeap
0x687e1088
GetProcessWorkingSetSize
0x687e1098
GetSystemInfo
0x687e10a8
HeapAlloc
0x687e108c
InterlockedExchange
0x687e1070
LoadLibraryA
0x687e1064
LocalAlloc
0x687e1054
LocalFree
0x687e10a4
lstrcpyA
0x687e1094
lstrlenA
0x687e109c
MapViewOfFile
0x687e1078
MultiByteToWideChar
0x687e1058
OpenFileMappingA
0x687e1074
RaiseException
0x687e1060
ReadProcessMemory
0x687e10ac
SetLastError
0x687e10a0
SetProcessWorkingSetSize
0x687e10b4
UnmapViewOfFile
0x687e1084
WideCharToMultiByte
0x687e10b0
NTDLL.DLL
20
_chkstk
0x687e1018
_stricmp
0x687e1000
atoi
0x687e100c
DbgPrint
0x687e101c
NtAllocateVirtualMemory
0x687e1028
NtCreateProfile
0x687e1020
NtQueryInformationProcess
0x687e1038
NtQuerySystemInformation
0x687e104c
NtQueryVirtualMemory
0x687e1048
NtSetInformationProcess
0x687e1040
NtSetIntervalProfile
0x687e1030
NtStartProfile
0x687e1034
NtStopProfile
0x687e1010
NtWriteFile
0x687e103c
RtlAdjustPrivilege
0x687e102c
RtlMultiByteToUnicodeN
0x687e1024
RtlNtStatusToDosError
0x687e1044
RtlUnicodeToOemN
0x687e1014
RtlUnwind
0x687e1004
sprintf
0x687e1008
No function matches your filter.