============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 24 91 01 00 00 00 00 00 00 00 00 00 10 92 01 00 00 92 01 00 8C 90 01 00 00 00 00 00 00 00 00 00 $æ☺.........►Æ☺..Æ☺.îÉ☺......... 00000020 F0 94 01 00 68 91 01 00 50 90 01 00 00 00 00 00 00 00 00 00 F6 95 01 00 2C 91 01 00 00 00 00 00 ≡ö☺.hæ☺.PÉ☺.........÷ò☺.,æ☺..... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B2 95 01 00 E8 95 01 00 C2 95 01 00 92 95 01 00 ................▓ò☺.Φò☺.┬ò☺.Æò☺. 00000060 76 95 01 00 68 95 01 00 58 95 01 00 4A 95 01 00 3E 95 01 00 2C 95 01 00 14 95 01 00 FC 94 01 00 vò☺.hò☺.Xò☺.Jò☺.>ò☺.,ò☺.¶ò☺.ⁿö☺. 00000080 A0 95 01 00 D4 95 01 00 00 00 00 00 0A 93 01 00 18 93 01 00 F2 92 01 00 DC 92 01 00 CC 92 01 00 áò☺.╘ò☺.....◙ô☺.↑ô☺.≥Æ☺.▄Æ☺.╠Æ☺. 000000A0 32 93 01 00 70 93 01 00 88 93 01 00 9C 93 01 00 B0 93 01 00 48 93 01 00 62 93 01 00 C0 92 01 00 2ô☺.pô☺.êô☺.£ô☺.░ô☺.Hô☺.bô☺.└Æ☺. 000000C0 AC 92 01 00 1A 94 01 00 2A 94 01 00 3E 94 01 00 54 94 01 00 64 94 01 00 74 94 01 00 8E 94 01 00 ¼Æ☺.→ö☺.*ö☺.>ö☺.Tö☺.dö☺.tö☺.Äö☺. 000000E0 AC 94 01 00 C2 94 01 00 D2 94 01 00 E2 94 01 00 98 92 01 00 88 92 01 00 76 92 01 00 60 92 01 00 ¼ö☺.┬ö☺.╥ö☺.Γö☺.ÿÆ☺.êÆ☺.vÆ☺.`Æ☺. 00000100 4E 92 01 00 3A 92 01 00 2A 92 01 00 1A 92 01 00 EE 93 01 00 C4 93 01 00 DA 93 01 00 04 94 01 00 NÆ☺.:Æ☺.*Æ☺.→Æ☺.εô☺.─ô☺.┌ô☺.♦ö☺. 00000120 00 00 00 00 08 92 01 00 00 00 00 00 B2 95 01 00 E8 95 01 00 C2 95 01 00 92 95 01 00 76 95 01 00 ....◘Æ☺.....▓ò☺.Φò☺.┬ò☺.Æò☺.vò☺. 00000140 68 95 01 00 58 95 01 00 4A 95 01 00 3E 95 01 00 2C 95 01 00 14 95 01 00 FC 94 01 00 A0 95 01 00 hò☺.Xò☺.Jò☺.>ò☺.,ò☺.¶ò☺.ⁿö☺.áò☺. 00000160 D4 95 01 00 00 00 00 00 0A 93 01 00 18 93 01 00 F2 92 01 00 DC 92 01 00 CC 92 01 00 32 93 01 00 ╘ò☺.....◙ô☺.↑ô☺.≥Æ☺.▄Æ☺.╠Æ☺.2ô☺. 00000180 70 93 01 00 88 93 01 00 9C 93 01 00 B0 93 01 00 48 93 01 00 62 93 01 00 C0 92 01 00 AC 92 01 00 pô☺.êô☺.£ô☺.░ô☺.Hô☺.bô☺.└Æ☺.¼Æ☺. 000001A0 1A 94 01 00 2A 94 01 00 3E 94 01 00 54 94 01 00 64 94 01 00 74 94 01 00 8E 94 01 00 AC 94 01 00 →ö☺.*ö☺.>ö☺.Tö☺.dö☺.tö☺.Äö☺.¼ö☺. 000001C0 C2 94 01 00 D2 94 01 00 E2 94 01 00 98 92 01 00 88 92 01 00 76 92 01 00 60 92 01 00 4E 92 01 00 ┬ö☺.╥ö☺.Γö☺.ÿÆ☺.êÆ☺.vÆ☺.`Æ☺.NÆ☺. 000001E0 3A 92 01 00 2A 92 01 00 1A 92 01 00 EE 93 01 00 C4 93 01 00 DA 93 01 00 04 94 01 00 00 00 00 00 :Æ☺.*Æ☺.→Æ☺.εô☺.─ô☺.┌ô☺.♦ö☺..... 00000200 08 92 01 00 00 00 00 00 5F 03 5F 66 74 6F 6C 00 6E 74 64 6C 6C 2E 64 6C 6C 00 44 00 50 41 54 48 ◘Æ☺....._♥_ftol.ntdll.dll.D.PATH 00000220 4F 42 4A 5F 62 45 6E 75 6D 00 1A 00 45 6E 67 44 65 6C 65 74 65 43 6C 69 70 00 1F 00 45 6E 67 44 OBJ_bEnum.→.EngDeleteClip.▼.EngD 00000240 65 6C 65 74 65 53 75 72 66 61 63 65 00 00 24 00 45 6E 67 4C 6F 63 6B 53 75 72 66 61 63 65 00 00 eleteSurface..$.EngLockSurface.. 00000260 0B 00 45 6E 67 41 73 73 6F 63 69 61 74 65 53 75 72 66 61 63 65 00 0F 00 45 6E 67 43 72 65 61 74 ♂.EngAssociateSurface.☼.EngCreat 00000280 65 42 69 74 6D 61 70 00 10 00 45 6E 67 43 72 65 61 74 65 43 6C 69 70 00 2F 00 45 6E 67 55 6E 6C eBitmap.►.EngCreateClip./.EngUnl 000002A0 6F 63 6B 53 75 72 66 61 63 65 00 00 58 00 58 4C 41 54 45 4F 42 4A 5F 70 69 56 65 63 74 6F 72 00 ockSurface..X.XLATEOBJ_piVector. 000002C0 0C 00 45 6E 67 42 69 74 42 6C 74 00 02 00 43 4C 49 50 4F 42 4A 5F 62 45 6E 75 6D 00 03 00 43 4C ♀.EngBitBlt.☻.CLIPOBJ_bEnum.♥.CL 000002E0 49 50 4F 42 4A 5F 63 45 6E 75 6D 53 74 61 72 74 00 00 01 00 42 52 55 53 48 4F 42 4A 5F 70 76 47 IPOBJ_cEnumStart..☺.BRUSHOBJ_pvG 00000300 65 74 52 62 72 75 73 68 00 00 0E 00 45 6E 67 43 6F 70 79 42 69 74 73 00 00 00 42 52 55 53 48 4F etRbrush..♫.EngCopyBits...BRUSHO 00000320 42 4A 5F 70 76 41 6C 6C 6F 63 52 62 72 75 73 68 00 00 22 00 45 6E 67 47 65 74 50 72 6F 63 65 73 BJ_pvAllocRbrush..".EngGetProces 00000340 73 48 61 6E 64 6C 65 00 13 00 45 6E 67 43 72 65 61 74 65 44 65 76 69 63 65 53 75 72 66 61 63 65 sHandle.‼.EngCreateDeviceSurface 00000360 00 00 21 00 45 6E 67 46 69 6C 6C 50 61 74 68 00 12 00 45 6E 67 43 72 65 61 74 65 44 65 76 69 63 ..!.EngFillPath.↕.EngCreateDevic 00000380 65 42 69 74 6D 61 70 00 16 00 45 6E 67 43 72 65 61 74 65 50 61 6C 65 74 74 65 00 00 1D 00 45 6E eBitmap.▬.EngCreatePalette..↔.En 000003A0 67 44 65 6C 65 74 65 50 61 6C 65 74 74 65 00 00 42 00 50 41 4C 4F 42 4A 5F 63 47 65 74 43 6F 6C gDeletePalette..B.PALOBJ_cGetCol 000003C0 6F 72 73 00 2E 00 45 6E 67 55 6E 6C 6F 63 6B 44 72 69 76 65 72 4F 62 6A 00 00 23 00 45 6E 67 4C ors...EngUnlockDriverObj..#.EngL 000003E0 6F 63 6B 44 72 69 76 65 72 4F 62 6A 00 00 14 00 45 6E 67 43 72 65 61 74 65 44 72 69 76 65 72 4F ockDriverObj..¶.EngCreateDriverO 00000400 62 6A 00 00 1C 00 45 6E 67 44 65 6C 65 74 65 44 72 69 76 65 72 4F 62 6A 00 00 4F 00 57 4E 44 4F bj..∟.EngDeleteDriverObj..O.WNDO 00000420 42 4A 5F 62 45 6E 75 6D 00 00 50 00 57 4E 44 4F 42 4A 5F 63 45 6E 75 6D 53 74 61 72 74 00 52 00 BJ_bEnum..P.WNDOBJ_cEnumStart.R. 00000440 57 4E 44 4F 42 4A 5F 76 53 65 74 43 6F 6E 73 75 6D 65 72 00 19 00 45 6E 67 43 72 65 61 74 65 57 WNDOBJ_vSetConsumer.↓.EngCreateW 00000460 6E 64 00 00 2A 00 45 6E 67 53 74 72 65 74 63 68 42 6C 74 00 45 00 50 41 54 48 4F 42 4A 5F 62 45 nd..*.EngStretchBlt.E.PATHOBJ_bE 00000480 6E 75 6D 43 6C 69 70 4C 69 6E 65 73 00 00 4A 00 50 41 54 48 4F 42 4A 5F 76 45 6E 75 6D 53 74 61 numClipLines..J.PATHOBJ_vEnumSta 000004A0 72 74 43 6C 69 70 4C 69 6E 65 73 00 4B 00 50 41 54 48 4F 42 4A 5F 76 47 65 74 42 6F 75 6E 64 73 rtClipLines.K.PATHOBJ_vGetBounds 000004C0 00 00 2C 00 45 6E 67 53 74 72 6F 6B 65 50 61 74 68 00 4C 00 53 54 52 4F 42 4A 5F 62 45 6E 75 6D ..,.EngStrokePath.L.STROBJ_bEnum 000004E0 00 00 2D 00 45 6E 67 54 65 78 74 4F 75 74 00 00 57 49 4E 53 52 56 2E 64 6C 6C 00 00 77 01 4C 65 ..-.EngTextOut..WINSRV.dll..w☺Le 00000500 61 76 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 4F 00 45 6E 74 65 72 43 72 69 74 69 aveCriticalSection..O.EnterCriti 00000520 63 61 6C 53 65 63 74 69 6F 6E 00 00 47 00 44 65 76 69 63 65 49 6F 43 6F 6E 74 72 6F 6C 00 82 01 calSection..G.DeviceIoControl.é☺ 00000540 4C 6F 63 61 6C 46 72 65 65 00 7E 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 31 02 56 69 72 74 75 61 LocalFree.~☺LocalAlloc..1☻Virtua 00000560 6C 41 6C 6C 6F 63 00 00 33 02 56 69 72 74 75 61 6C 46 72 65 65 00 64 01 49 6E 69 74 69 61 6C 69 lAlloc..3☻VirtualFree.d☺Initiali 00000580 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 16 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 zeCriticalSection.▬.CloseHandle. 000005A0 29 02 55 6E 6D 61 70 56 69 65 77 4F 66 46 69 6C 65 00 8C 01 4D 61 70 56 69 65 77 4F 66 46 69 6C )☻UnmapViewOfFile.î☺MapViewOfFil 000005C0 65 00 4C 00 44 75 70 6C 69 63 61 74 65 48 61 6E 64 6C 65 00 C4 00 47 65 74 43 75 72 72 65 6E 74 e.L.DuplicateHandle.─.GetCurrent 000005E0 50 72 6F 63 65 73 73 00 9C 01 4F 70 65 6E 50 72 6F 63 65 73 73 00 4B 45 52 4E 45 4C 33 32 2E 64 Process.£☺OpenProcess.KERNEL32.d 00000600 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ll.............................. 00000620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................