============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 BC B0 00 00 00 00 00 00 00 00 00 00 BE B5 00 00 C4 B1 00 00 B4 B0 00 00 00 00 00 00 00 00 00 00 ╝░..........╛╡..─▒..┤░.......... 00000020 D8 B5 00 00 BC B1 00 00 6C B1 00 00 00 00 00 00 00 00 00 00 32 B6 00 00 74 B2 00 00 88 B1 00 00 ╪╡..╝▒..l▒..........2╢..t▓..ê▒.. 00000040 00 00 00 00 00 00 00 00 70 B6 00 00 90 B2 00 00 AC B1 00 00 00 00 00 00 00 00 00 00 BC B6 00 00 ........p╢..É▓..¼▒..........╝╢.. 00000060 B4 B2 00 00 98 B1 00 00 00 00 00 00 00 00 00 00 EA B6 00 00 A0 B2 00 00 64 B1 00 00 00 00 00 00 ┤▓..ÿ▒..........Ω╢..á▓..d▒...... 00000080 00 00 00 00 06 B7 00 00 6C B2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....♠╖..l▓...................... 000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CC B5 00 00 00 00 00 00 34 B4 00 00 ....................╠╡......4┤.. 000000C0 0A B3 00 00 18 B3 00 00 24 B3 00 00 30 B3 00 00 3E B3 00 00 4C B3 00 00 58 B3 00 00 70 B3 00 00 ◙│..↑│..$│..0│..>│..L│..X│..p│.. 000000E0 8A B3 00 00 98 B3 00 00 A4 B3 00 00 B0 B3 00 00 BC B3 00 00 D2 B3 00 00 DE B3 00 00 F2 B3 00 00 è│..ÿ│..ñ│..░│..╝│..╥│..▐│..≥│.. 00000100 02 B4 00 00 16 B4 00 00 E0 B2 00 00 FE B2 00 00 46 B4 00 00 56 B4 00 00 6A B4 00 00 80 B4 00 00 ☻┤..▬┤..α▓..■▓..F┤..V┤..j┤..Ç┤.. 00000120 96 B4 00 00 AA B4 00 00 C0 B4 00 00 D8 B4 00 00 E8 B4 00 00 04 B5 00 00 C4 B2 00 00 2E B5 00 00 û┤..¬┤..└┤..╪┤..Φ┤..♦╡..─▓...╡.. 00000140 42 B5 00 00 58 B5 00 00 6C B5 00 00 82 B5 00 00 96 B5 00 00 AC B5 00 00 26 B4 00 00 18 B5 00 00 B╡..X╡..l╡..é╡..û╡..¼╡..&┤..↑╡.. 00000160 00 00 00 00 F6 B6 00 00 00 00 00 00 06 B6 00 00 0E B6 00 00 24 B6 00 00 FA B5 00 00 EE B5 00 00 ....÷╢......♠╢..♫╢..$╢..·╡..ε╡.. 00000180 E2 B5 00 00 00 00 00 00 3E B6 00 00 60 B6 00 00 4C B6 00 00 00 00 00 00 E2 B6 00 00 C8 B6 00 00 Γ╡......>╢..`╢..L╢......Γ╢..╚╢.. 000001A0 D0 B6 00 00 DA B6 00 00 00 00 00 00 8C B6 00 00 A2 B6 00 00 7A B6 00 00 00 00 00 00 CC B5 00 00 ╨╢..┌╢......î╢..ó╢..z╢......╠╡.. 000001C0 00 00 00 00 34 B4 00 00 0A B3 00 00 18 B3 00 00 24 B3 00 00 30 B3 00 00 3E B3 00 00 4C B3 00 00 ....4┤..◙│..↑│..$│..0│..>│..L│.. 000001E0 58 B3 00 00 70 B3 00 00 8A B3 00 00 98 B3 00 00 A4 B3 00 00 B0 B3 00 00 BC B3 00 00 D2 B3 00 00 X│..p│..è│..ÿ│..ñ│..░│..╝│..╥│.. 00000200 DE B3 00 00 F2 B3 00 00 02 B4 00 00 16 B4 00 00 E0 B2 00 00 FE B2 00 00 46 B4 00 00 56 B4 00 00 ▐│..≥│..☻┤..▬┤..α▓..■▓..F┤..V┤.. 00000220 6A B4 00 00 80 B4 00 00 96 B4 00 00 AA B4 00 00 C0 B4 00 00 D8 B4 00 00 E8 B4 00 00 04 B5 00 00 j┤..Ç┤..û┤..¬┤..└┤..╪┤..Φ┤..♦╡.. 00000240 C4 B2 00 00 2E B5 00 00 42 B5 00 00 58 B5 00 00 6C B5 00 00 82 B5 00 00 96 B5 00 00 AC B5 00 00 ─▓...╡..B╡..X╡..l╡..é╡..û╡..¼╡.. 00000260 26 B4 00 00 18 B5 00 00 00 00 00 00 F6 B6 00 00 00 00 00 00 06 B6 00 00 0E B6 00 00 24 B6 00 00 &┤..↑╡......÷╢......♠╢..♫╢..$╢.. 00000280 FA B5 00 00 EE B5 00 00 E2 B5 00 00 00 00 00 00 3E B6 00 00 60 B6 00 00 4C B6 00 00 00 00 00 00 ·╡..ε╡..Γ╡......>╢..`╢..L╢...... 000002A0 E2 B6 00 00 C8 B6 00 00 D0 B6 00 00 DA B6 00 00 00 00 00 00 8C B6 00 00 A2 B6 00 00 7A B6 00 00 Γ╢..╚╢..╨╢..┌╢......î╢..ó╢..z╢.. 000002C0 00 00 00 00 0B 01 47 65 74 50 72 69 76 61 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 00 ....♂☺GetPrivateProfileStringA.. 000002E0 80 02 57 72 69 74 65 50 72 69 76 61 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 00 93 01 Ç☻WritePrivateProfileStringA..ô☺ 00000300 4C 6F 63 61 6C 46 72 65 65 00 8F 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 96 02 6C 73 74 72 63 61 LocalFree.Å☺LocalAlloc..û☻lstrca 00000320 74 41 00 00 9F 02 6C 73 74 72 63 70 79 41 00 00 24 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 E5 00 tA..ƒ☻lstrcpyA..$.CloseHandle.σ. 00000340 47 65 74 46 69 6C 65 53 69 7A 65 00 99 02 6C 73 74 72 63 6D 70 41 00 00 8B 00 46 69 6C 65 54 69 GetFileSize.Ö☻lstrcmpA..ï.FileTi 00000360 6D 65 54 6F 53 79 73 74 65 6D 54 69 6D 65 00 00 8A 00 46 69 6C 65 54 69 6D 65 54 6F 4C 6F 63 61 meToSystemTime..è.FileTimeToLoca 00000380 6C 46 69 6C 65 54 69 6D 65 00 E6 00 47 65 74 46 69 6C 65 54 69 6D 65 00 B4 01 4F 70 65 6E 46 69 lFileTime.µ.GetFileTime.┤☺OpenFi 000003A0 6C 65 00 00 9C 02 6C 73 74 72 63 6D 70 69 41 00 A5 02 6C 73 74 72 6C 65 6E 41 00 00 21 02 53 65 le..£☻lstrcmpiA.Ñ☻lstrlenA..!☻Se 000003C0 74 46 69 6C 65 41 74 74 72 69 62 75 74 65 73 41 00 00 30 00 43 6F 70 79 46 69 6C 65 41 00 37 01 tFileAttributesA..0.CopyFileA.7☺ 000003E0 47 65 74 54 65 6D 70 46 69 6C 65 4E 61 6D 65 41 00 00 96 01 4C 6F 63 61 6C 52 65 41 6C 6C 6F 63 GetTempFileNameA..û☺LocalReAlloc 00000400 00 00 33 00 43 72 65 61 74 65 44 69 72 65 63 74 6F 72 79 41 00 00 1D 02 53 65 74 45 72 72 6F 72 ..3.CreateDirectoryA..↔☻SetError 00000420 4D 6F 64 65 00 00 AA 00 46 72 65 65 4C 69 62 72 61 72 79 00 0F 01 47 65 74 50 72 6F 63 41 64 64 Mode..¬.FreeLibrary.☼☺GetProcAdd 00000440 72 65 73 73 00 00 89 01 4C 6F 61 64 4C 69 62 72 61 72 79 41 00 00 22 01 47 65 74 53 68 6F 72 74 ress..ë☺LoadLibraryA.."☺GetShort 00000460 50 61 74 68 4E 61 6D 65 41 00 F7 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 41 00 00 PathNameA.≈.GetModuleFileNameA.. 00000480 E2 00 47 65 74 46 69 6C 65 41 74 74 72 69 62 75 74 65 73 41 00 00 F9 00 47 65 74 4D 6F 64 75 6C Γ.GetFileAttributesA..∙.GetModul 000004A0 65 48 61 6E 64 6C 65 41 00 00 2D 01 47 65 74 53 79 73 74 65 6D 44 69 72 65 63 74 6F 72 79 41 00 eHandleA..-☺GetSystemDirectoryA. 000004C0 4B 01 47 65 74 57 69 6E 64 6F 77 73 44 69 72 65 63 74 6F 72 79 41 00 00 47 01 47 65 74 56 65 72 K☺GetWindowsDirectoryA..G☺GetVer 000004E0 73 69 6F 6E 45 78 41 00 58 00 44 69 73 61 62 6C 65 54 68 72 65 61 64 4C 69 62 72 61 72 79 43 61 sionExA.X.DisableThreadLibraryCa 00000500 6C 6C 73 00 EB 01 53 4D 61 70 4C 53 5F 49 50 5F 45 42 50 5F 31 32 00 00 F5 01 53 55 6E 4D 61 70 lls.δ☺SMapLS_IP_EBP_12..⌡☺SUnMap 00000520 4C 53 5F 49 50 5F 45 42 50 5F 31 32 00 00 EC 01 53 4D 61 70 4C 53 5F 49 50 5F 45 42 50 5F 31 36 LS_IP_EBP_12..∞☺SMapLS_IP_EBP_16 00000540 00 00 F6 01 53 55 6E 4D 61 70 4C 53 5F 49 50 5F 45 42 50 5F 31 36 00 00 ED 01 53 4D 61 70 4C 53 ..÷☺SUnMapLS_IP_EBP_16..φ☺SMapLS 00000560 5F 49 50 5F 45 42 50 5F 32 30 00 00 F7 01 53 55 6E 4D 61 70 4C 53 5F 49 50 5F 45 42 50 5F 32 30 _IP_EBP_20..≈☺SUnMapLS_IP_EBP_20 00000580 00 00 EE 01 53 4D 61 70 4C 53 5F 49 50 5F 45 42 50 5F 32 34 00 00 F8 01 53 55 6E 4D 61 70 4C 53 ..ε☺SMapLS_IP_EBP_24..°☺SUnMapLS 000005A0 5F 49 50 5F 45 42 50 5F 32 34 00 00 4A 02 54 68 75 6E 6B 43 6F 6E 6E 65 63 74 33 32 00 00 4B 45 _IP_EBP_24..J☻ThunkConnect32..KE 000005C0 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 60 00 45 78 74 45 73 63 61 70 65 00 47 44 49 33 32 2E 64 6C RNEL32.dll..`.ExtEscape.GDI32.dl 000005E0 6C 00 1E 00 43 68 61 72 4E 65 78 74 41 00 2D 02 77 73 70 72 69 6E 74 66 41 00 A3 01 52 65 6C 65 l.▲.CharNextA.-☻wsprintfA.ú☺Rele 00000600 61 73 65 44 43 00 D8 00 47 65 74 44 43 00 79 01 4D 65 73 73 61 67 65 42 6F 78 49 6E 64 69 72 65 aseDC.╪.GetDC.y☺MessageBoxIndire 00000620 63 74 41 00 68 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 55 53 45 52 33 32 2E 64 6C 6C 00 00 A9 00 ctA.h☺LoadStringA.USER32.dll..⌐. 00000640 77 61 76 65 4F 75 74 4F 70 65 6E 00 A3 00 77 61 76 65 4F 75 74 47 65 74 4E 75 6D 44 65 76 73 00 waveOutOpen.ú.waveOutGetNumDevs. 00000660 9D 00 77 61 76 65 4F 75 74 43 6C 6F 73 65 00 00 57 49 4E 4D 4D 2E 64 6C 6C 00 0A 00 56 65 72 51 ¥.waveOutClose..WINMM.dll.◙.VerQ 00000680 75 65 72 79 56 61 6C 75 65 41 00 00 00 00 47 65 74 46 69 6C 65 56 65 72 73 69 6F 6E 49 6E 66 6F ueryValueA....GetFileVersionInfo 000006A0 41 00 01 00 47 65 74 46 69 6C 65 56 65 72 73 69 6F 6E 49 6E 66 6F 53 69 7A 65 41 00 56 45 52 53 A.☺.GetFileVersionInfoSizeA.VERS 000006C0 49 4F 4E 2E 64 6C 6C 00 EF 00 61 74 6F 69 00 00 FE 00 66 63 6C 6F 73 65 00 00 04 01 66 67 65 74 ION.dll.∩.atoi..■.fclose..♦☺fget 000006E0 73 00 07 01 66 6F 70 65 6E 00 43 52 54 44 4C 4C 2E 64 6C 6C 00 00 4E 00 53 68 65 6C 6C 45 78 65 s.•☺fopen.CRTDLL.dll..N.ShellExe 00000700 63 75 74 65 41 00 53 48 45 4C 4C 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cuteA.SHELL32.dll............... 00000720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................