============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 7C 50 04 00 00 00 00 00 00 00 00 00 52 52 04 00 E0 50 04 00 64 50 04 00 00 00 00 00 00 00 00 00 |P♦.........RR♦.αP♦.dP♦......... 00000020 84 52 04 00 C8 50 04 00 70 50 04 00 00 00 00 00 00 00 00 00 BE 52 04 00 D4 50 04 00 00 00 00 00 äR♦.╚P♦.pP♦.........╛R♦.╘P♦..... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000060 00 00 00 00 74 52 04 00 60 52 04 00 00 00 00 00 A8 52 04 00 92 52 04 00 00 00 00 00 A6 51 04 00 ....tR♦.`R♦.....¿R♦.ÆR♦.....ªQ♦. 00000080 AE 51 04 00 BC 51 04 00 D2 51 04 00 9A 51 04 00 8E 51 04 00 0E 52 04 00 7A 51 04 00 1C 52 04 00 «Q♦.╝Q♦.╥Q♦.ÜQ♦.ÄQ♦.♫R♦.zQ♦.∟R♦. 000000A0 28 52 04 00 34 52 04 00 42 52 04 00 66 51 04 00 52 51 04 00 38 51 04 00 E0 51 04 00 2C 51 04 00 (R♦.4R♦.BR♦.fQ♦.RQ♦.8Q♦.αQ♦.,Q♦. 000000C0 FC 51 04 00 00 00 00 00 74 52 04 00 60 52 04 00 00 00 00 00 A8 52 04 00 92 52 04 00 00 00 00 00 ⁿQ♦.....tR♦.`R♦.....¿R♦.ÆR♦..... 000000E0 A6 51 04 00 AE 51 04 00 BC 51 04 00 D2 51 04 00 9A 51 04 00 8E 51 04 00 0E 52 04 00 7A 51 04 00 ªQ♦.«Q♦.╝Q♦.╥Q♦.ÜQ♦.ÄQ♦.♫R♦.zQ♦. 00000100 1C 52 04 00 28 52 04 00 34 52 04 00 42 52 04 00 66 51 04 00 52 51 04 00 38 51 04 00 E0 51 04 00 ∟R♦.(R♦.4R♦.BR♦.fQ♦.RQ♦.8Q♦.αQ♦. 00000120 2C 51 04 00 FC 51 04 00 00 00 00 00 77 01 48 65 61 70 41 6C 6C 6F 63 00 DF 01 51 75 65 72 79 50 ,Q♦.ⁿQ♦.....w☺HeapAlloc.▀☺QueryP 00000140 65 72 66 6F 72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 4B 02 53 65 74 50 72 69 6F 72 69 74 79 43 erformanceCounter.K☻SetPriorityC 00000160 6C 61 73 73 00 00 1A 01 47 65 74 50 72 69 6F 72 69 74 79 43 6C 61 73 73 00 00 E3 00 47 65 74 43 lass..→☺GetPriorityClass..π.GetC 00000180 75 72 72 65 6E 74 50 72 6F 63 65 73 73 00 B9 02 6C 73 74 72 63 6D 70 69 41 00 B6 02 6C 73 74 72 urrentProcess.╣☻lstrcmpiA.╢☻lstr 000001A0 63 6D 70 41 00 00 B7 01 4D 61 70 53 4C 00 7A 01 48 65 61 70 44 65 73 74 72 6F 79 00 85 01 49 6E cmpA..╖☺MapSL.z☺HeapDestroy.à☺In 000001C0 74 65 72 6C 6F 63 6B 65 64 45 78 63 68 61 6E 67 65 00 79 01 48 65 61 70 43 72 65 61 74 65 00 00 terlockedExchange.y☺HeapCreate.. 000001E0 5C 00 44 69 73 61 62 6C 65 54 68 72 65 61 64 4C 69 62 72 61 72 79 43 61 6C 6C 73 00 5B 00 44 65 \.DisableThreadLibraryCalls.[.De 00000200 76 69 63 65 49 6F 43 6F 6E 74 72 6F 6C 00 3E 00 43 72 65 61 74 65 46 69 6C 65 41 00 7B 01 48 65 viceIoControl.>.CreateFileA.{☺He 00000220 61 70 46 72 65 65 00 00 7E 01 48 65 61 70 53 69 7A 65 00 00 7D 01 48 65 61 70 52 65 41 6C 6C 6F apFree..~☺HeapSize..}☺HeapReAllo 00000240 63 00 F9 01 52 74 6C 4D 6F 76 65 4D 65 6D 6F 72 79 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 c.∙☺RtlMoveMemory.KERNEL32.dll.. 00000260 B5 00 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 AD 00 52 65 67 4F 70 65 6E 4B 65 79 ╡.RegQueryValueExA..¡.RegOpenKey 00000280 45 78 41 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 01 00 44 44 48 41 4C 33 32 5F 56 69 64 4D ExA.ADVAPI32.dll..☺.DDHAL32_VidM 000002A0 65 6D 46 72 65 65 00 00 00 00 44 44 48 41 4C 33 32 5F 56 69 64 4D 65 6D 41 6C 6C 6F 63 00 44 44 emFree....DDHAL32_VidMemAlloc.DD 000002C0 52 41 57 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 RAW.dll......................... 000002E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................