============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 00 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 01 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 .¶☻.....└......F☺¶☻.....└......F 00000020 E4 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 E6 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 Σ¶☻.....└......Fµ¶☻.....└......F 00000040 E8 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 E9 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 Φ¶☻.....└......FΘ¶☻.....└......F 00000060 EB 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 EE 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 δ¶☻.....└......Fε¶☻.....└......F 00000080 EF 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 F0 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 ∩¶☻.....└......F≡¶☻.....└......F 000000A0 F2 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 F3 14 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 ≥¶☻.....└......F≤¶☻.....└......F 000000C0 A0 5F C6 24 AC 4C CF 11 B4 71 44 45 53 54 00 00 E2 17 00 1C 4F 18 00 1C 6D 18 00 1C C7 18 00 1C á_╞$¼L╧◄┤qDEST..Γ↨.∟O↑.∟m↑.∟╟↑.∟ 000000E0 51 19 00 1C 00 00 00 00 E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C 00 00 00 00 Q↓.∟....µ".∟µ".∟µ".∟µ".∟µ".∟.... 00000100 E6 22 00 1C E6 22 00 1C E6 22 00 1C 00 00 00 00 70 1F 00 1C 80 1F 00 1C 90 1F 00 1C 00 10 00 1C µ".∟µ".∟µ".∟....p▼.∟Ç▼.∟É▼.∟.►.∟ 00000120 40 1F 00 1C 50 1F 00 1C 60 1F 00 1C B5 15 00 1C D7 15 00 1C F9 15 00 1C 3A 16 00 1C 5C 16 00 1C @▼.∟P▼.∟`▼.∟╡§.∟╫§.∟∙§.∟:▬.∟\▬.∟ 00000140 7E 16 00 1C 00 00 00 00 10 1F 00 1C 20 1F 00 1C 30 1F 00 1C 40 15 00 1C 93 15 00 1C 00 00 00 00 ~▬.∟....►▼.∟ ▼.∟0▼.∟@§.∟ô§.∟.... 00000160 E0 1E 00 1C F0 1E 00 1C 00 1F 00 1C A0 1F 00 1C 78 1A 00 1C 13 1C 00 1C 37 1C 00 1C 30 10 00 1C α▲.∟≡▲.∟.▼.∟á▼.∟x→.∟‼∟.∟7∟.∟0►.∟ 00000180 7D 13 00 1C A4 14 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C }‼.∟ñ¶.∟µ".∟µ".∟µ".∟µ".∟µ".∟µ".∟ 000001A0 E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C µ".∟µ".∟µ".∟µ".∟µ".∟µ".∟µ".∟µ".∟ 000001C0 E6 22 00 1C 00 00 00 00 E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C µ".∟....µ".∟µ".∟µ".∟µ".∟µ".∟µ".∟ 000001E0 E6 22 00 1C E6 22 00 1C E6 22 00 1C 00 00 00 00 E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C µ".∟µ".∟µ".∟....µ".∟µ".∟µ".∟µ".∟ 00000200 E6 22 00 1C E6 22 00 1C E6 22 00 1C E6 22 00 1C 53 68 65 6C 6C 20 45 78 74 65 6E 73 69 6F 6E 20 µ".∟µ".∟µ".∟µ".∟Shell Extension 00000220 53 61 6D 70 6C 65 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 01 00 00 00 00 00 00 00 Sample..........└......F☺....... 00000240 C0 00 00 00 00 00 00 46 03 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 02 00 00 00 00 00 00 00 └......F♥.......└......F☻....... 00000260 C0 00 00 00 00 00 00 46 1D 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 18 00 00 00 00 00 00 00 └......F↔.......└......F↑....... 00000280 C0 00 00 00 00 00 00 46 19 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 00 01 00 00 00 00 00 00 └......F↓.......└......F.☺...... 000002A0 C0 00 00 00 00 00 00 46 0E 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 02 01 00 00 00 00 00 00 └......F♫.......└......F☻☺...... 000002C0 C0 00 00 00 00 00 00 46 26 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 10 00 00 00 00 00 00 00 └......F&☺......└......F►....... 000002E0 C0 00 00 00 00 00 00 46 0C 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 09 01 00 00 00 00 00 00 └......F♀☺......└......F○☺...... 00000300 C0 00 00 00 00 00 00 46 0F 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 C0 6B 9F F2 21 50 CE 11 └......F☼.......└......F└kƒ≥!P╬◄ 00000320 AA 15 00 00 69 01 29 3F 01 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 0C 00 00 00 00 00 00 00 ¬§..i☺)?☺☺......└......F♀....... 00000340 C0 00 00 00 00 00 00 46 0D 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 0B 00 00 00 00 00 00 00 └......F♪.......└......F♂....... 00000360 C0 00 00 00 00 00 00 46 0B 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 0A 01 00 00 00 00 00 00 └......F♂☺......└......F◙☺...... 00000380 C0 00 00 00 00 00 00 46 0A 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 03 01 00 00 00 00 00 00 └......F◙.......└......F♥☺...... 000003A0 C0 00 00 00 00 00 00 46 05 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 12 00 00 00 00 00 00 00 └......F♣☺......└......F↕....... 000003C0 C0 00 00 00 00 00 00 46 0F 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 25 01 00 00 00 00 00 00 └......F☼☺......└......F%☺...... 000003E0 C0 00 00 00 00 00 00 46 0E 01 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 10 01 00 00 00 00 00 00 └......F♫☺......└......F►☺...... 00000400 C0 00 00 00 00 00 00 46 16 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 46 60 6B F5 D5 3B 59 1A 10 └......F▬.......└......F`k⌡╒;Y→► 00000420 B5 69 08 00 2B 2D BF 7A 34 6A F5 D5 3B 59 1A 10 B5 69 08 00 2B 2D BF 7A FC 6A F5 D5 3B 59 1A 10 ╡i◘.+-┐z4j⌡╒;Y→►╡i◘.+-┐zⁿj⌡╒;Y→► 00000440 B5 69 08 00 2B 2D BF 7A D0 69 F5 D5 3B 59 1A 10 B5 69 08 00 2B 2D BF 7A 00 00 00 00 00 00 00 00 ╡i◘.+-┐z╨i⌡╒;Y→►╡i◘.+-┐z........ 00000460 00 00 00 00 94 73 F6 30 00 00 00 00 9C 34 00 00 02 00 00 00 02 00 00 00 02 00 00 00 88 34 00 00 ....ös÷0....£4..☻...☻...☻...ê4.. 00000480 90 34 00 00 98 34 00 00 D8 16 00 00 01 17 00 00 A9 34 00 00 B9 34 00 00 00 00 01 00 53 48 45 4C É4..ÿ4..╪▬..☺↨..⌐4..╣4....☺.SHEL 000004A0 4C 45 58 54 2E 64 6C 6C 00 44 6C 6C 43 61 6E 55 6E 6C 6F 61 64 4E 6F 77 00 44 6C 6C 47 65 74 43 LEXT.dll.DllCanUnloadNow.DllGetC 000004C0 6C 61 73 73 4F 62 6A 65 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 lassObject...................... 000004E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................