============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 50 F0 01 00 B8 08 81 02 00 00 00 00 60 F2 01 00 24 F1 01 00 F8 F1 01 00 00 00 00 00 00 00 00 00 P≡☺.╕◘ü☻....`≥☺.$±☺.°±☺......... 00000020 6D F2 01 00 14 F2 01 00 30 F2 01 00 00 00 00 00 00 00 00 00 78 F2 01 00 48 F2 01 00 00 00 00 00 m≥☺.¶≥☺.0≥☺.........x≥☺.H≥☺..... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85 F2 01 00 93 F2 01 00 A5 F2 01 00 B3 F2 01 00 ................à≥☺.ô≥☺.Ñ≥☺.│≥☺. 00000060 CB F2 01 00 D9 F2 01 00 F1 F2 01 00 FF F2 01 00 09 F3 01 00 15 F3 01 00 27 F3 01 00 3D F3 01 00 ╦≥☺.┘≥☺.±≥☺. ≥☺.○≤☺.§≤☺.'≤☺.=≤☺. 00000080 4F F3 01 00 67 F3 01 00 7D F3 01 00 8B F3 01 00 99 F3 01 00 A9 F3 01 00 B9 F3 01 00 CB F3 01 00 O≤☺.g≤☺.}≤☺.ï≤☺.Ö≤☺.⌐≤☺.╣≤☺.╦≤☺. 000000A0 E1 F3 01 00 F5 F3 01 00 07 F4 01 00 19 F4 01 00 29 F4 01 00 3B F4 01 00 53 F4 01 00 6D F4 01 00 ß≤☺.⌡≤☺.•⌠☺.↓⌠☺.)⌠☺.;⌠☺.S⌠☺.m⌠☺. 000000C0 7F F4 01 00 8D F4 01 00 9D F4 01 00 B9 F4 01 00 D1 F4 01 00 DF F4 01 00 EB F4 01 00 01 F5 01 00 ⌂⌠☺.ì⌠☺.¥⌠☺.╣⌠☺.╤⌠☺.▀⌠☺.δ⌠☺.☺⌡☺. 000000E0 13 F5 01 00 1F F5 01 00 2B F5 01 00 43 F5 01 00 53 F5 01 00 65 F5 01 00 77 F5 01 00 83 F5 01 00 ‼⌡☺.▼⌡☺.+⌡☺.C⌡☺.S⌡☺.e⌡☺.w⌡☺.â⌡☺. 00000100 8D F5 01 00 9B F5 01 00 A9 F5 01 00 C5 F5 01 00 D5 F5 01 00 E3 F5 01 00 F3 F5 01 00 09 F6 01 00 ì⌡☺.¢⌡☺.⌐⌡☺.┼⌡☺.╒⌡☺.π⌡☺.≤⌡☺.○÷☺. 00000120 00 00 00 00 85 F2 01 00 93 F2 01 00 A5 F2 01 00 B3 F2 01 00 CB F2 01 00 D9 F2 01 00 F1 F2 01 00 ....à≥☺.ô≥☺.Ñ≥☺.│≥☺.╦≥☺.┘≥☺.±≥☺. 00000140 FF F2 01 00 09 F3 01 00 15 F3 01 00 27 F3 01 00 3D F3 01 00 4F F3 01 00 67 F3 01 00 7D F3 01 00 ≥☺.○≤☺.§≤☺.'≤☺.=≤☺.O≤☺.g≤☺.}≤☺. 00000160 8B F3 01 00 99 F3 01 00 A9 F3 01 00 B9 F3 01 00 CB F3 01 00 E1 F3 01 00 F5 F3 01 00 07 F4 01 00 ï≤☺.Ö≤☺.⌐≤☺.╣≤☺.╦≤☺.ß≤☺.⌡≤☺.•⌠☺. 00000180 19 F4 01 00 29 F4 01 00 3B F4 01 00 53 F4 01 00 6D F4 01 00 7F F4 01 00 8D F4 01 00 9D F4 01 00 ↓⌠☺.)⌠☺.;⌠☺.S⌠☺.m⌠☺.⌂⌠☺.ì⌠☺.¥⌠☺. 000001A0 B9 F4 01 00 D1 F4 01 00 DF F4 01 00 EB F4 01 00 01 F5 01 00 13 F5 01 00 1F F5 01 00 2B F5 01 00 ╣⌠☺.╤⌠☺.▀⌠☺.δ⌠☺.☺⌡☺.‼⌡☺.▼⌡☺.+⌡☺. 000001C0 43 F5 01 00 53 F5 01 00 65 F5 01 00 77 F5 01 00 83 F5 01 00 8D F5 01 00 9B F5 01 00 A9 F5 01 00 C⌡☺.S⌡☺.e⌡☺.w⌡☺.â⌡☺.ì⌡☺.¢⌡☺.⌐⌡☺. 000001E0 C5 F5 01 00 D5 F5 01 00 E3 F5 01 00 F3 F5 01 00 09 F6 01 00 00 00 00 00 15 F6 01 00 27 F6 01 00 ┼⌡☺.╒⌡☺.π⌡☺.≤⌡☺.○÷☺.....§÷☺.'÷☺. 00000200 39 F6 01 00 4D F6 01 00 61 F6 01 00 6F F6 01 00 00 00 00 00 15 F6 01 00 27 F6 01 00 39 F6 01 00 9÷☺.M÷☺.a÷☺.o÷☺.....§÷☺.'÷☺.9÷☺. 00000220 4D F6 01 00 61 F6 01 00 6F F6 01 00 00 00 00 00 7D F6 01 00 91 F6 01 00 A1 F6 01 00 B7 F6 01 00 M÷☺.a÷☺.o÷☺.....}÷☺.æ÷☺.í÷☺.╖÷☺. 00000240 C7 F6 01 00 00 00 00 00 7D F6 01 00 91 F6 01 00 A1 F6 01 00 B7 F6 01 00 C7 F6 01 00 00 00 00 00 ╟÷☺.....}÷☺.æ÷☺.í÷☺.╖÷☺.╟÷☺..... 00000260 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 55 53 45 52 33 32 2E 64 6C 6C 00 4F 4C 45 41 55 54 33 32 KERNEL32.dll.USER32.dll.OLEAUT32 00000280 2E 64 6C 6C 00 00 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 00 00 43 6F 6D 70 61 72 65 53 74 72 69 .dll...CloseHandle...CompareStri 000002A0 6E 67 41 00 00 00 00 43 72 65 61 74 65 46 69 6C 65 41 00 00 00 44 65 6C 65 74 65 43 72 69 74 69 ngA....CreateFileA...DeleteCriti 000002C0 63 61 6C 53 65 63 74 69 6F 6E 00 00 00 44 65 6C 65 74 65 46 69 6C 65 41 00 00 00 45 6E 74 65 72 calSection...DeleteFileA...Enter 000002E0 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 00 00 45 78 69 74 50 72 6F 63 65 73 73 00 00 CriticalSection....ExitProcess.. 00000300 00 47 65 74 41 43 50 00 00 00 00 47 65 74 43 50 49 6E 66 6F 00 00 00 47 65 74 43 6F 6D 6D 61 6E .GetACP....GetCPInfo...GetComman 00000320 64 4C 69 6E 65 41 00 00 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 49 64 00 00 00 00 47 dLineA...GetCurrentThreadId....G 00000340 65 74 44 61 74 65 46 6F 72 6D 61 74 41 00 00 00 00 47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 etDateFormatA....GetEnvironmentS 00000360 74 72 69 6E 67 73 00 00 00 47 65 74 46 69 6C 65 41 74 74 72 69 62 75 74 65 73 41 00 00 00 00 47 trings...GetFileAttributesA....G 00000380 65 74 46 69 6C 65 53 69 7A 65 00 00 00 47 65 74 46 69 6C 65 54 79 70 65 00 00 00 47 65 74 4C 61 etFileSize...GetFileType...GetLa 000003A0 73 74 45 72 72 6F 72 00 00 00 00 47 65 74 4C 6F 63 61 6C 54 69 6D 65 00 00 00 00 47 65 74 4C 6F stError....GetLocalTime....GetLo 000003C0 63 61 6C 65 49 6E 66 6F 41 00 00 00 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 41 00 caleInfoA....GetModuleFileNameA. 000003E0 00 00 00 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 41 00 00 00 00 47 65 74 50 72 6F 63 41 64 ...GetModuleHandleA....GetProcAd 00000400 64 72 65 73 73 00 00 00 00 47 65 74 53 74 61 72 74 75 70 49 6E 66 6F 41 00 00 00 47 65 74 53 74 dress....GetStartupInfoA...GetSt 00000420 64 48 61 6E 64 6C 65 00 00 00 00 47 65 74 53 74 72 69 6E 67 54 79 70 65 57 00 00 00 00 47 65 74 dHandle....GetStringTypeW....Get 00000440 53 79 73 74 65 6D 44 65 66 61 75 6C 74 4C 43 49 44 00 00 00 00 47 65 74 53 79 73 74 65 6D 44 65 SystemDefaultLCID....GetSystemDe 00000460 66 61 75 6C 74 4C 61 6E 67 49 44 00 00 00 00 47 65 74 54 68 72 65 61 64 4C 6F 63 61 6C 65 00 00 faultLangID....GetThreadLocale.. 00000480 00 47 65 74 56 65 72 73 69 6F 6E 00 00 00 00 47 65 74 56 65 72 73 69 6F 6E 45 78 41 00 00 00 49 .GetVersion....GetVersionExA...I 000004A0 6E 69 74 69 61 6C 69 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 00 4C 65 61 76 65 nitializeCriticalSection...Leave 000004C0 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 00 00 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 00 CriticalSection....LocalAlloc... 000004E0 00 4C 6F 63 61 6C 46 72 65 65 00 00 00 4D 75 6C 74 69 42 79 74 65 54 6F 57 69 64 65 43 68 61 72 .LocalFree...MultiByteToWideChar 00000500 00 00 00 52 61 69 73 65 45 78 63 65 70 74 69 6F 6E 00 00 00 00 52 65 61 64 46 69 6C 65 00 00 00 ...RaiseException....ReadFile... 00000520 00 52 74 6C 55 6E 77 69 6E 64 00 00 00 53 65 74 43 6F 6E 73 6F 6C 65 43 74 72 6C 48 61 6E 64 6C .RtlUnwind...SetConsoleCtrlHandl 00000540 65 72 00 00 00 53 65 74 45 6E 64 4F 66 46 69 6C 65 00 00 00 00 53 65 74 46 69 6C 65 50 6F 69 6E er...SetEndOfFile....SetFilePoin 00000560 74 65 72 00 A9 00 00 53 65 74 48 61 6E 64 6C 65 43 6F 75 6E 74 00 00 00 00 54 6C 73 41 6C 6C 6F ter.⌐..SetHandleCount....TlsAllo 00000580 63 00 00 00 00 54 6C 73 46 72 65 65 00 00 00 54 6C 73 47 65 74 56 61 6C 75 65 00 00 00 54 6C 73 c....TlsFree...TlsGetValue...Tls 000005A0 53 65 74 56 61 6C 75 65 00 00 00 55 6E 68 61 6E 64 6C 65 64 45 78 63 65 70 74 69 6F 6E 46 69 6C SetValue...UnhandledExceptionFil 000005C0 74 65 72 00 00 00 00 56 69 72 74 75 61 6C 41 6C 6C 6F 63 00 00 00 00 56 69 72 74 75 61 6C 46 72 ter....VirtualAlloc....VirtualFr 000005E0 65 65 00 00 00 56 69 72 74 75 61 6C 51 75 65 72 79 00 00 00 00 57 69 64 65 43 68 61 72 54 6F 4D ee...VirtualQuery....WideCharToM 00000600 75 6C 74 69 42 79 74 65 00 00 00 57 72 69 74 65 46 69 6C 65 00 00 00 43 68 61 72 4C 6F 77 65 72 ultiByte...WriteFile...CharLower 00000620 42 75 66 66 41 00 00 00 00 43 68 61 72 55 70 70 65 72 42 75 66 66 41 00 00 00 00 45 6E 75 6D 54 BuffA....CharUpperBuffA....EnumT 00000640 68 72 65 61 64 57 69 6E 64 6F 77 73 00 00 00 47 65 74 53 79 73 74 65 6D 4D 65 74 72 69 63 73 00 hreadWindows...GetSystemMetrics. 00000660 00 00 00 4C 6F 61 64 53 74 72 69 6E 67 41 00 00 00 4D 65 73 73 61 67 65 42 6F 78 41 00 00 00 53 ...LoadStringA...MessageBoxA...S 00000680 79 73 41 6C 6C 6F 63 53 74 72 69 6E 67 4C 65 6E 00 00 00 53 79 73 53 74 72 69 6E 67 4C 65 6E 00 ysAllocStringLen...SysStringLen. 000006A0 00 00 00 56 61 72 69 61 6E 74 43 68 61 6E 67 65 54 79 70 65 45 78 00 00 00 56 61 72 69 61 6E 74 ...VariantChangeTypeEx...Variant 000006C0 43 6C 65 61 72 00 00 00 00 56 61 72 69 61 6E 74 43 6F 70 79 49 6E 64 00 00 01 00 00 40 42 64 65 Clear....VariantCopyInd..☺..@Bde 000006E0 40 4F 73 4C 64 53 74 72 6E 43 6D 70 69 24 71 71 73 70 76 70 63 74 32 75 73 00 00 00 00 00 00 00 @OsLdStrnCmpi$qqspvpct2us....... 00000700 4A 01 00 00 40 42 64 65 40 4F 73 4C 64 53 74 72 43 6D 70 69 24 71 71 73 70 76 70 63 74 32 00 00 J☺..@Bde@OsLdStrCmpi$qqspvpct2.. 00000720 90 12 11 A0 4B 01 00 00 40 42 64 65 40 4F 73 4C 64 53 74 72 6E 54 6F 4C 6F 77 65 72 24 71 71 73 É↕◄áK☺..@Bde@OsLdStrnToLower$qqs 00000740 70 76 70 75 63 75 73 00 00 00 00 00 4C 01 00 00 40 42 64 65 40 4F 73 4C 64 53 74 72 54 6F 4C 6F pvpucus.....L☺..@Bde@OsLdStrToLo 00000760 77 65 72 24 71 71 73 70 76 70 75 63 00 00 00 00 00 00 00 00 4D 01 00 00 40 42 64 65 40 4F 73 4C wer$qqspvpuc........M☺..@Bde@OsL 00000780 64 53 74 72 43 6D 70 24 71 71 73 70 76 70 63 74 32 00 00 00 00 00 00 00 4E 01 00 00 40 42 64 65 dStrCmp$qqspvpct2.......N☺..@Bde 000007A0 40 4F 73 4C 64 53 74 72 6E 43 6D 70 24 71 71 73 70 76 70 63 74 32 75 73 00 00 00 00 00 00 00 00 @OsLdStrnCmp$qqspvpct2us........ 000007C0 4F 01 00 00 40 42 64 65 40 4F 73 4C 64 4C 6F 61 64 42 79 53 79 6D 62 4E 61 6D 65 24 71 71 73 70 O☺..@Bde@OsLdLoadBySymbName$qqsp 000007E0 63 72 70 76 00 00 00 00 C4 5E 13 A0 50 01 00 00 40 42 64 65 40 4F 73 4C 64 4C 6F 61 64 42 79 46 crpv....─^‼áP☺..@Bde@OsLdLoadByF