rendered paste body<bochs:1> info winproc
winproc: KdVersionBlock at linear address 0x8054c038
winproc: KdVersionBlock fetched from emulated memory
winproc: OwnerTag is 0x4742444b ('KDBG'), good
.winproc: PID 0x00000004 - PPID 0x00000000 - DTB 0x00039000,0x00000000 - Filename System - PEB at 0x00000000
.winproc: PID 0x0000017c - PPID 0x00000004 - DTB 0x0398f000,0x03990000 - Filename smss.exe - PEB at 0x7ffd6000
.winproc: PID 0x000001d8 - PPID 0x0000017c - DTB 0x0436f000,0x04330000 - Filename csrss.exe - PEB at 0x7ffd5000
.winproc: PID 0x000001f4 - PPID 0x0000017c - DTB 0x04434000,0x04435000 - Filename winlogon.exe - PEB at 0x7ffd6000
.winproc: PID 0x00000258 - PPID 0x000001f4 - DTB 0x04559000,0x0449a000 - Filename services.exe - PEB at 0x7ffd7000
.winproc: PID 0x0000026c - PPID 0x000001f4 - DTB 0x0453e000,0x0453f000 - Filename lsass.exe - PEB at 0x7ffd4000
.winproc: PID 0x00000368 - PPID 0x00000258 - DTB 0x05e84000,0x05e45000 - Filename svchost.exe - PEB at 0x7ffde000
.winproc: PID 0x000004cc - PPID 0x00000258 - DTB 0x06d4c000,0x06d8d000 - Filename svchost.exe - PEB at 0x7ffde000
.winproc: PID 0x000004e4 - PPID 0x00000258 - DTB 0x07011000,0x07012000 - Filename svchost.exe - PEB at 0x7ffdb000
.winproc: PID 0x000004f0 - PPID 0x000004bc - DTB 0x070ab000,0x070ac000 - Filename explorer.exe - PEB at 0x7ffd5000
.winproc: PID 0x00000778 - PPID 0x00000258 - DTB 0x09620000,0x09661000 - Filename svchost.exe - PEB at 0x7ffd6000
.winproc: PID 0x000007b0 - PPID 0x000001f4 - DTB 0x097d6000,0x09817000 - Filename logon.scr - PEB at 0x7ffdd000
.winproc: PID 0x000000dc - PPID 0x00000258 - DTB 0x09e86000,0x09f87000 - Filename alg.exe - PEB at 0x7ffd9000
.winproc: PID 0x0000021c - PPID 0x000004e4 - DTB 0x0a47a000,0x0a5bb000 - Filename wscntfy.exe - PEB at 0x7ffde000
.winproc: PID 0x000002dc - PPID 0x000004e4 - DTB 0x0a7cf000,0x0a610000 - Filename wuauclt.exe - PEB at 0x7ffde000