psapi.dll

v10.0.19041.3636 32-bit Windows NT Analyzed
Description
Process Status Helper
Authors
© Microsoft Corporation. All rights reserved.
File size
17.7 KB
Uploaded
2025-12-01 08:03
Views
167
SHA-256
f901c48de42ecc015eaa99f61444cffa

Exported functions 27

EmptyWorkingSet #1 · 0x1590
EnumDeviceDrivers #2 · 0x1380
EnumPageFilesA #3 · 0x15b0
EnumPageFilesW #4 · 0x15d0
EnumProcessModules #5 · 0x13a0
EnumProcessModulesEx #6 · 0x15f0
EnumProcesses #7 · 0x13c0
GetDeviceDriverBaseNameA #8 · 0x1610
GetDeviceDriverBaseNameW #9 · 0x13e0
GetDeviceDriverFileNameA #10 · 0x1630
GetDeviceDriverFileNameW #11 · 0x1650
GetMappedFileNameA #12 · 0x1670
GetMappedFileNameW #13 · 0x1690
GetModuleBaseNameA #14 · 0x16b0
GetModuleBaseNameW #15 · 0x1400
GetModuleFileNameExA #16 · 0x16d0
GetModuleFileNameExW #17 · 0x1420
GetModuleInformation #18 · 0x1440
GetPerformanceInfo #19 · 0x1460
GetProcessImageFileNameA #20 · 0x16f0
GetProcessImageFileNameW #21 · 0x14c0
GetProcessMemoryInfo #22 · 0x1480
GetWsChanges #23 · 0x1730
GetWsChangesEx #24 · 0x1710
InitializeProcessForWsWatch #25 · 0x1750
QueryWorkingSet #26 · 0x14a0
QueryWorkingSetEx #27 · 0x1770

Imported DLLs & functions 33

DisableThreadLibraryCalls 0x4fb83000
GetCurrentProcessId 0x4fb83008
GetCurrentThreadId 0x4fb8300c
QueryPerformanceCounter 0x4fb83014
K32EnumPageFilesA 0x4fb8301c
K32GetDeviceDriverBaseNameA 0x4fb83020
K32GetDeviceDriverFileNameA 0x4fb83028
K32GetMappedFileNameA 0x4fb83024
K32GetProcessImageFileNameA 0x4fb8302c
K32EmptyWorkingSet 0x4fb8306c
K32EnumDeviceDrivers 0x4fb83054
K32EnumPageFilesW 0x4fb83048
K32EnumProcesses 0x4fb83050
K32EnumProcessModules 0x4fb83044
K32EnumProcessModulesEx 0x4fb83070
K32GetDeviceDriverBaseNameW 0x4fb83060
K32GetDeviceDriverFileNameW 0x4fb83058
K32GetMappedFileNameW 0x4fb83034
K32GetModuleBaseNameW 0x4fb83068
K32GetModuleFileNameExW 0x4fb8307c
K32GetModuleInformation 0x4fb8305c
K32GetPerformanceInfo 0x4fb8304c
K32GetProcessImageFileNameW 0x4fb83078
K32GetProcessMemoryInfo 0x4fb83064
K32GetWsChanges 0x4fb8303c
K32GetWsChangesEx 0x4fb83080
K32InitializeProcessForWsWatch 0x4fb83040
K32QueryWorkingSet 0x4fb83038
K32QueryWorkingSetEx 0x4fb83074
K32GetModuleBaseNameA 0x4fb8308c
K32GetModuleFileNameExA 0x4fb83088
GetSystemTimeAsFileTime 0x4fb83098
GetTickCount 0x4fb83094