============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 6C 40 00 00 00 00 00 00 00 00 00 00 2A 42 00 00 00 41 00 00 50 40 00 00 00 00 00 00 00 00 00 00 l@..........*B...A..P@.......... 00000020 9C 42 00 00 E4 40 00 00 A4 40 00 00 00 00 00 00 00 00 00 00 AA 42 00 00 38 41 00 00 00 00 00 00 £B..Σ@..ñ@..........¬B..8A...... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7A 42 00 00 8C 42 00 00 68 42 00 00 5A 42 00 00 ................zB..îB..hB..ZB.. 00000060 46 42 00 00 38 42 00 00 00 00 00 00 E8 41 00 00 BE 41 00 00 B0 41 00 00 DC 41 00 00 1E 42 00 00 FB..8B......ΦA..╛A..░A..▄A..▲B.. 00000080 CC 41 00 00 A0 41 00 00 04 42 00 00 F8 41 00 00 10 42 00 00 78 41 00 00 94 41 00 00 84 41 00 00 ╠A..áA..♦B..°A..►B..xA..öA..äA.. 000000A0 00 00 00 00 FC 01 00 80 06 02 00 80 00 02 00 80 12 02 00 80 18 02 00 80 19 02 00 80 FE 01 00 80 ....ⁿ☺.Ç♠☻.Ç.☻.Ç↕☻.Ç↑☻.Ç↓☻.Ç■☺.Ç 000000C0 FD 01 00 80 05 02 00 80 FA 01 00 80 F9 01 00 80 04 02 00 80 FB 01 00 80 01 02 00 80 FF 01 00 80 ²☺.Ç♣☻.Ç·☺.Ç∙☺.Ç♦☻.Ç√☺.Ç☺☻.Ç ☺.Ç 000000E0 00 00 00 00 7A 42 00 00 8C 42 00 00 68 42 00 00 5A 42 00 00 46 42 00 00 38 42 00 00 00 00 00 00 ....zB..îB..hB..ZB..FB..8B...... 00000100 E8 41 00 00 BE 41 00 00 B0 41 00 00 DC 41 00 00 1E 42 00 00 CC 41 00 00 A0 41 00 00 04 42 00 00 ΦA..╛A..░A..▄A..▲B..╠A..áA..♦B.. 00000120 F8 41 00 00 10 42 00 00 78 41 00 00 94 41 00 00 84 41 00 00 00 00 00 00 FC 01 00 80 06 02 00 80 °A..►B..xA..öA..äA......ⁿ☺.Ç♠☻.Ç 00000140 00 02 00 80 12 02 00 80 18 02 00 80 19 02 00 80 FE 01 00 80 FD 01 00 80 05 02 00 80 FA 01 00 80 .☻.Ç↕☻.Ç↑☻.Ç↓☻.Ç■☺.Dz☺.Ç♣☻.Ç·☺.Ç 00000160 F9 01 00 80 04 02 00 80 FB 01 00 80 01 02 00 80 FF 01 00 80 00 00 00 00 B6 02 6C 73 74 72 6C 65 ∙☺.Ç♦☻.Ç√☺.Ç☺☻.Ç ☺.Ç....╢☻lstrle 00000180 6E 41 00 00 85 01 49 73 42 61 64 52 65 61 64 50 74 72 00 00 AD 02 6C 73 74 72 63 6D 70 69 41 00 nA..à☺IsBadReadPtr..¡☻lstrcmpiA. 000001A0 F7 01 52 74 6C 5A 65 72 6F 4D 65 6D 6F 72 79 00 25 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 3C 00 ≈☺RtlZeroMemory.%.CloseHandle.<. 000001C0 43 72 65 61 74 65 46 69 6C 65 41 00 88 01 49 73 42 61 64 57 72 69 74 65 50 74 72 00 B0 02 6C 73 CreateFileA.ê☺IsBadWritePtr.░☻ls 000001E0 74 72 63 70 79 41 00 00 F5 01 52 74 6C 4D 6F 76 65 4D 65 6D 6F 72 79 00 B3 02 6C 73 74 72 63 70 trcpyA..⌡☺RtlMoveMemory.│☻lstrcp 00000200 79 6E 41 00 9E 01 4C 6F 63 61 6C 46 72 65 65 00 9A 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 A3 01 ynA.₧☺LocalFree.Ü☺LocalAlloc..ú☺ 00000220 4C 6F 63 61 6C 53 69 7A 65 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 96 00 52 65 67 43 6C 6F LocalSize.KERNEL32.dll..û.RegClo 00000240 73 65 4B 65 79 00 B5 00 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 AC 00 52 65 67 4F seKey.╡.RegQueryValueExA..¼.RegO 00000260 70 65 6E 4B 65 79 41 00 C1 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 41 00 00 9F 00 52 65 67 44 penKeyA.┴.RegSetValueExA..ƒ.RegD 00000280 65 6C 65 74 65 56 61 6C 75 65 41 00 99 00 52 65 67 43 72 65 61 74 65 4B 65 79 41 00 41 44 56 41 eleteValueA.Ö.RegCreateKeyA.ADVA 000002A0 50 49 33 32 2E 64 6C 6C 00 00 52 41 53 41 50 49 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 PI32.dll..RASAPI32.dll.......... 000002C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000002E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................