============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 0C F1 00 00 00 00 00 00 00 00 00 00 3C F4 00 00 D0 F2 00 00 68 F2 00 00 00 00 00 00 00 00 00 00 ♀±..........<⌠..╨≥..h≥.......... 00000020 6C F4 00 00 2C F4 00 00 DC F1 00 00 00 00 00 00 00 00 00 00 42 F6 00 00 A0 F3 00 00 30 F1 00 00 l⌠..,⌠..▄±..........B÷..á≤..0±.. 00000040 00 00 00 00 00 00 00 00 F0 F8 00 00 F4 F2 00 00 B4 F0 00 00 00 00 00 00 00 00 00 00 7A FA 00 00 ........≡°..⌠≥..┤≡..........z·.. 00000060 78 F2 00 00 54 F2 00 00 00 00 00 00 00 00 00 00 D2 FA 00 00 18 F4 00 00 24 F1 00 00 00 00 00 00 x≥..T≥..........╥·..↑⌠..$±...... 00000080 00 00 00 00 02 FB 00 00 E8 F2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....☻√..Φ≥...................... 000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FE F9 00 00 EC F9 00 00 12 FA 00 00 ....................■∙..∞∙..↕·.. 000000C0 0C F9 00 00 1C F9 00 00 2A F9 00 00 FE F8 00 00 6A FA 00 00 5C FA 00 00 4C FA 00 00 3A FA 00 00 ♀∙..∟∙..*∙..■°..j·..\·..L·..:·.. 000000E0 2A FA 00 00 3A F9 00 00 A0 F9 00 00 D8 F9 00 00 C8 F9 00 00 B6 F9 00 00 60 F9 00 00 8E F9 00 00 *·..:∙..á∙..╪∙..╚∙..╢∙..`∙..Ä∙.. 00000100 76 F9 00 00 4A F9 00 00 00 00 00 00 25 00 00 80 29 00 00 80 24 00 00 80 30 00 00 80 2F 00 00 80 v∙..J∙......%..Ç)..Ç$..Ç0..Ç/..Ç 00000120 00 00 00 00 F2 FA 00 00 DC FA 00 00 00 00 00 00 90 F7 00 00 64 F8 00 00 72 F8 00 00 AC F7 00 00 ....≥·..▄·......É≈..d°..r°..¼≈.. 00000140 BA F7 00 00 D2 F8 00 00 4E F6 00 00 5A F6 00 00 68 F6 00 00 78 F6 00 00 90 F6 00 00 A8 F6 00 00 ║≈..╥°..N÷..Z÷..h÷..x÷..É÷..¿÷.. 00000160 B0 F6 00 00 CA F6 00 00 DC F6 00 00 EC F6 00 00 00 F7 00 00 14 F7 00 00 22 F7 00 00 38 F7 00 00 ░÷..╩÷..▄÷..∞÷...≈..¶≈.."≈..8≈.. 00000180 44 F7 00 00 50 F7 00 00 68 F7 00 00 84 F7 00 00 16 F8 00 00 A0 F7 00 00 C2 F8 00 00 E2 F8 00 00 D≈..P≈..h≈..ä≈..▬°..á≈..┬°..Γ°.. 000001A0 C8 F7 00 00 D6 F7 00 00 E4 F7 00 00 FC F7 00 00 0A F8 00 00 58 F8 00 00 22 F8 00 00 30 F8 00 00 ╚≈..╓≈..Σ≈..ⁿ≈..◙°..X°.."°..0°.. 000001C0 3E F8 00 00 4A F8 00 00 B2 F8 00 00 92 F8 00 00 88 F8 00 00 A2 F8 00 00 00 00 00 00 0A F6 00 00 >°..J°..▓°..ư..ê°..ó°......◙÷.. 000001E0 D6 F5 00 00 E4 F5 00 00 20 F6 00 00 30 F6 00 00 F8 F5 00 00 C6 F5 00 00 B6 F5 00 00 A4 F5 00 00 ╓⌡..Σ⌡.. ÷..0÷..°⌡..╞⌡..╢⌡..ñ⌡.. 00000200 92 F5 00 00 84 F5 00 00 76 F5 00 00 62 F5 00 00 52 F5 00 00 44 F5 00 00 3C F5 00 00 30 F5 00 00 Æ⌡..ä⌡..v⌡..b⌡..R⌡..D⌡..<⌡..0⌡.. 00000220 1A F5 00 00 0E F5 00 00 02 F5 00 00 F0 F4 00 00 DE F4 00 00 CC F4 00 00 BE F4 00 00 B0 F4 00 00 →⌡..♫⌡..☻⌡..≡⌠..▐⌠..╠⌠..╛⌠..░⌠.. 00000240 A4 F4 00 00 94 F4 00 00 88 F4 00 00 76 F4 00 00 00 00 00 00 C2 FA 00 00 88 FA 00 00 A0 FA 00 00 ñ⌠..ö⌠..ê⌠..v⌠......┬·..ê·..á·.. 00000260 B0 FA 00 00 00 00 00 00 60 F4 00 00 56 F4 00 00 4A F4 00 00 00 00 00 00 FE F9 00 00 EC F9 00 00 ░·......`⌠..V⌠..J⌠......■∙..∞∙.. 00000280 12 FA 00 00 0C F9 00 00 1C F9 00 00 2A F9 00 00 FE F8 00 00 6A FA 00 00 5C FA 00 00 4C FA 00 00 ↕·..♀∙..∟∙..*∙..■°..j·..\·..L·.. 000002A0 3A FA 00 00 2A FA 00 00 3A F9 00 00 A0 F9 00 00 D8 F9 00 00 C8 F9 00 00 B6 F9 00 00 60 F9 00 00 :·..*·..:∙..á∙..╪∙..╚∙..╢∙..`∙.. 000002C0 8E F9 00 00 76 F9 00 00 4A F9 00 00 00 00 00 00 25 00 00 80 29 00 00 80 24 00 00 80 30 00 00 80 Ä∙..v∙..J∙......%..Ç)..Ç$..Ç0..Ç 000002E0 2F 00 00 80 00 00 00 00 F2 FA 00 00 DC FA 00 00 00 00 00 00 90 F7 00 00 64 F8 00 00 72 F8 00 00 /..Ç....≥·..▄·......É≈..d°..r°.. 00000300 AC F7 00 00 BA F7 00 00 D2 F8 00 00 4E F6 00 00 5A F6 00 00 68 F6 00 00 78 F6 00 00 90 F6 00 00 ¼≈..║≈..╥°..N÷..Z÷..h÷..x÷..É÷.. 00000320 A8 F6 00 00 B0 F6 00 00 CA F6 00 00 DC F6 00 00 EC F6 00 00 00 F7 00 00 14 F7 00 00 22 F7 00 00 ¿÷..░÷..╩÷..▄÷..∞÷...≈..¶≈.."≈.. 00000340 38 F7 00 00 44 F7 00 00 50 F7 00 00 68 F7 00 00 84 F7 00 00 16 F8 00 00 A0 F7 00 00 C2 F8 00 00 8≈..D≈..P≈..h≈..ä≈..▬°..á≈..┬°.. 00000360 E2 F8 00 00 C8 F7 00 00 D6 F7 00 00 E4 F7 00 00 FC F7 00 00 0A F8 00 00 58 F8 00 00 22 F8 00 00 Γ°..╚≈..╓≈..Σ≈..ⁿ≈..◙°..X°.."°.. 00000380 30 F8 00 00 3E F8 00 00 4A F8 00 00 B2 F8 00 00 92 F8 00 00 88 F8 00 00 A2 F8 00 00 00 00 00 00 0°..>°..J°..▓°..ư..ê°..ó°...... 000003A0 0A F6 00 00 D6 F5 00 00 E4 F5 00 00 20 F6 00 00 30 F6 00 00 F8 F5 00 00 C6 F5 00 00 B6 F5 00 00 ◙÷..╓⌡..Σ⌡.. ÷..0÷..°⌡..╞⌡..╢⌡.. 000003C0 A4 F5 00 00 92 F5 00 00 84 F5 00 00 76 F5 00 00 62 F5 00 00 52 F5 00 00 44 F5 00 00 3C F5 00 00 ñ⌡..Æ⌡..ä⌡..v⌡..b⌡..R⌡..D⌡..<⌡.. 000003E0 30 F5 00 00 1A F5 00 00 0E F5 00 00 02 F5 00 00 F0 F4 00 00 DE F4 00 00 CC F4 00 00 BE F4 00 00 0⌡..→⌡..♫⌡..☻⌡..≡⌠..▐⌠..╠⌠..╛⌠.. 00000400 B0 F4 00 00 A4 F4 00 00 94 F4 00 00 88 F4 00 00 76 F4 00 00 00 00 00 00 C2 FA 00 00 88 FA 00 00 ░⌠..ñ⌠..ö⌠..ê⌠..v⌠......┬·..ê·.. 00000420 A0 FA 00 00 B0 FA 00 00 00 00 00 00 60 F4 00 00 56 F4 00 00 4A F4 00 00 00 00 00 00 43 53 50 4D á·..░·......`⌠..V⌠..J⌠......CSPM 00000440 41 4E 4E 54 2E 64 6C 6C 00 00 70 03 5F 77 63 73 6E 69 63 6D 70 00 A5 03 77 63 73 63 61 74 00 00 ANNT.dll..p♥_wcsnicmp.Ñ♥wcscat.. 00000460 6E 03 5F 77 63 73 69 63 6D 70 00 00 6E 74 64 6C 6C 2E 64 6C 6C 00 8B 00 44 69 61 6C 6F 67 42 6F n♥_wcsicmp..ntdll.dll.ï.DialogBo 00000480 78 50 61 72 61 6D 57 00 AD 00 45 6E 64 44 69 61 6C 6F 67 00 CB 01 53 65 6E 64 4D 65 73 73 61 67 xParamW.¡.EndDialog.╦☺SendMessag 000004A0 65 57 00 00 4A 02 77 73 70 72 69 6E 74 66 57 00 78 01 4C 6F 61 64 53 74 72 69 6E 67 57 00 EB 00 eW..J☻wsprintfW.x☺LoadStringW.δ. 000004C0 47 65 74 44 6C 67 49 74 65 6D 00 00 31 01 47 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 00 00 0B 02 GetDlgItem..1☺GetWindowLongW..♂☻ 000004E0 53 65 74 57 69 6E 64 6F 77 54 65 78 74 57 00 00 05 02 53 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 SetWindowTextW..♣☻SetWindowLongW 00000500 00 00 E1 01 53 65 74 46 6F 63 75 73 00 00 15 01 47 65 74 50 61 72 65 6E 74 00 C5 01 53 65 6E 64 ..ß☺SetFocus..§☺GetParent.┼☺Send 00000520 44 6C 67 49 74 65 6D 4D 65 73 73 61 67 65 57 00 B9 01 52 65 6C 65 61 73 65 44 43 00 E6 00 47 65 DlgItemMessageW.╣☺ReleaseDC.µ.Ge 00000540 74 44 43 00 90 01 4D 6F 76 65 57 69 6E 64 6F 77 00 00 33 01 47 65 74 57 69 6E 64 6F 77 52 65 63 tDC.É☺MoveWindow..3☺GetWindowRec 00000560 74 00 23 01 47 65 74 53 79 73 74 65 6D 4D 65 74 72 69 63 73 00 00 8D 01 4D 65 73 73 61 67 65 42 t.#☺GetSystemMetrics..ì☺MessageB 00000580 6F 78 57 00 4C 02 77 76 73 70 72 69 6E 74 66 57 00 00 12 00 43 61 6C 6C 57 69 6E 64 6F 77 50 72 oxW.L☻wvsprintfW..↕.CallWindowPr 000005A0 6F 63 57 00 DF 01 53 65 74 44 6C 67 49 74 65 6D 54 65 78 74 57 00 AB 00 45 6E 61 62 6C 65 57 69 ocW.▀☺SetDlgItemTextW.½.EnableWi 000005C0 6E 64 6F 77 00 00 EA 00 47 65 74 44 6C 67 43 74 72 6C 49 44 00 00 16 02 53 68 6F 77 57 69 6E 64 ndow..Ω.GetDlgCtrlID..▬☻ShowWind 000005E0 6F 77 00 00 AC 00 45 6E 64 44 65 66 65 72 57 69 6E 64 6F 77 50 6F 73 00 7F 00 44 65 66 65 72 57 ow..¼.EndDeferWindowPos.⌂.DeferW 00000600 69 6E 64 6F 77 50 6F 73 00 00 08 00 42 65 67 69 6E 44 65 66 65 72 57 69 6E 64 6F 77 50 6F 73 00 indowPos..◘.BeginDeferWindowPos. 00000620 07 02 53 65 74 57 69 6E 64 6F 77 50 6F 73 00 00 83 01 4D 61 70 57 69 6E 64 6F 77 50 6F 69 6E 74 •☻SetWindowPos..â☺MapWindowPoint 00000640 73 00 55 53 45 52 33 32 2E 64 6C 6C 00 00 70 02 6C 73 74 72 63 70 79 57 00 00 8D 00 46 72 65 65 s.USER32.dll..p☻lstrcpyW..ì.Free 00000660 4C 69 62 72 61 72 79 00 7B 01 4C 6F 61 64 4C 69 62 72 61 72 79 57 00 00 77 01 4C 65 61 76 65 43 Library.{☺LoadLibraryW..w☺LeaveC 00000680 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 4F 00 45 6E 74 65 72 43 72 69 74 69 63 61 6C 53 riticalSection..O.EnterCriticalS 000006A0 65 63 74 69 6F 6E 00 00 18 02 53 6C 65 65 70 00 3C 02 57 61 69 74 46 6F 72 4D 75 6C 74 69 70 6C ection..↑☻Sleep.<☻WaitForMultipl 000006C0 65 4F 62 6A 65 63 74 73 00 00 47 00 44 65 76 69 63 65 49 6F 43 6F 6E 74 72 6F 6C 00 E1 00 47 65 eObjects..G.DeviceIoControl.ß.Ge 000006E0 74 4C 61 73 74 45 72 72 6F 72 00 00 0F 02 53 65 74 54 68 72 65 61 64 50 72 69 6F 72 69 74 79 00 tLastError..☼☻SetThreadPriority. 00000700 C6 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 00 00 16 00 43 6C 6F 73 65 48 61 6E 64 6C ╞.GetCurrentThread..▬.CloseHandl 00000720 65 00 3E 02 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 F3 01 53 65 74 45 76 65 e.>☻WaitForSingleObject.≤☺SetEve 00000740 6E 74 00 00 59 01 48 65 61 70 46 72 65 65 00 00 44 00 44 65 6C 65 74 65 43 72 69 74 69 63 61 6C nt..Y☺HeapFree..D.DeleteCritical 00000760 53 65 63 74 69 6F 6E 00 64 01 49 6E 69 74 69 61 6C 69 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 Section.d☺InitializeCriticalSect 00000780 69 6F 6E 00 53 01 48 65 61 70 41 6C 6C 6F 63 00 2A 00 43 72 65 61 74 65 45 76 65 6E 74 57 00 00 ion.S☺HeapAlloc.*.CreateEventW.. 000007A0 4F 02 57 72 69 74 65 46 69 6C 65 00 47 01 47 6C 6F 62 61 6C 46 72 65 65 00 00 50 02 57 72 69 74 O☻WriteFile.G☺GlobalFree..P☻Writ 000007C0 65 46 69 6C 65 45 78 00 B9 01 52 65 61 64 46 69 6C 65 45 78 00 00 40 01 47 6C 6F 62 61 6C 41 6C eFileEx.╣☺ReadFileEx..@☺GlobalAl 000007E0 6C 6F 63 00 3F 02 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 45 78 00 46 00 44 65 loc.?☻WaitForSingleObjectEx.F.De 00000800 6C 65 74 65 46 69 6C 65 57 00 76 02 6C 73 74 72 6C 65 6E 57 00 00 67 02 6C 73 74 72 63 61 74 57 leteFileW.v☻lstrlenW..g☻lstrcatW 00000820 00 00 57 01 48 65 61 70 44 65 73 74 72 6F 79 00 55 01 48 65 61 70 43 72 65 61 74 65 00 00 82 01 ..W☺HeapDestroy.U☺HeapCreate..é☺ 00000840 4C 6F 63 61 6C 46 72 65 65 00 7E 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 6D 02 6C 73 74 72 63 6D LocalFree.~☺LocalAlloc..m☻lstrcm 00000860 70 69 57 00 2E 00 43 72 65 61 74 65 46 69 6C 65 57 00 F7 00 47 65 74 4F 76 65 72 6C 61 70 70 65 piW...CreateFileW.≈.GetOverlappe 00000880 64 52 65 73 75 6C 74 00 19 02 53 6C 65 65 70 45 78 00 FD 01 53 65 74 4C 61 73 74 45 72 72 6F 72 dResult.↓☻SleepEx.²☺SetLastError 000008A0 00 00 8F 00 46 72 65 65 52 65 73 6F 75 72 63 65 00 00 8B 01 4C 6F 63 6B 52 65 73 6F 75 72 63 65 ..Å.FreeResource..ï☺LockResource 000008C0 00 00 7D 01 4C 6F 61 64 52 65 73 6F 75 72 63 65 00 00 81 00 46 69 6E 64 52 65 73 6F 75 72 63 65 ..}☺LoadResource..ü.FindResource 000008E0 57 00 4B 01 47 6C 6F 62 61 6C 4C 6F 63 6B 00 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 C2 00 W.K☺GlobalLock..KERNEL32.dll..┬. 00000900 52 65 67 43 6C 6F 73 65 4B 65 79 00 C8 00 52 65 67 43 72 65 61 74 65 4B 65 79 57 00 DB 00 52 65 RegCloseKey.╚.RegCreateKeyW.█.Re 00000920 67 4F 70 65 6E 4B 65 79 57 00 CF 00 52 65 67 45 6E 75 6D 4B 65 79 45 78 57 00 B4 00 4F 70 65 6E gOpenKeyW.╧.RegEnumKeyExW.┤.Open 00000940 53 65 72 76 69 63 65 57 00 00 16 00 43 6C 6F 73 65 53 65 72 76 69 63 65 48 61 6E 64 6C 65 00 00 ServiceW..▬.CloseServiceHandle.. 00000960 BE 00 51 75 65 72 79 53 65 72 76 69 63 65 53 74 61 74 75 73 00 00 2C 01 55 6E 6C 6F 63 6B 53 65 ╛.QueryServiceStatus..,☺UnlockSe 00000980 72 76 69 63 65 44 61 74 61 62 61 73 65 00 1D 00 43 72 65 61 74 65 53 65 72 76 69 63 65 57 00 00 rviceDatabase.↔.CreateServiceW.. 000009A0 66 00 4C 6F 63 6B 53 65 72 76 69 63 65 44 61 74 61 62 61 73 65 00 B2 00 4F 70 65 6E 53 43 4D 61 f.LockServiceDatabase.▓.OpenSCMa 000009C0 6E 61 67 65 72 57 00 00 1F 00 44 65 6C 65 74 65 53 65 72 76 69 63 65 00 DD 00 52 65 67 51 75 65 nagerW..▼.DeleteService.▌.RegQue 000009E0 72 79 49 6E 66 6F 4B 65 79 57 00 00 ED 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 57 00 00 E2 00 ryInfoKeyW..φ.RegSetValueExW..Γ. 00000A00 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 57 00 00 12 00 43 68 61 6E 67 65 53 65 72 76 69 63 RegQueryValueExW..↕.ChangeServic 00000A20 65 43 6F 6E 66 69 67 57 00 00 09 01 53 74 61 72 74 53 65 72 76 69 63 65 57 00 17 00 43 6F 6E 74 eConfigW..○☺StartServiceW.↨.Cont 00000A40 72 6F 6C 53 65 72 76 69 63 65 00 00 DA 00 52 65 67 4F 70 65 6E 4B 65 79 45 78 57 00 D0 00 52 65 rolService..┌.RegOpenKeyExW.╨.Re 00000A60 67 45 6E 75 6D 4B 65 79 57 00 D2 00 52 65 67 45 6E 75 6D 56 61 6C 75 65 57 00 41 44 56 41 50 49 gEnumKeyW.╥.RegEnumValueW.ADVAPI 00000A80 33 32 2E 64 6C 6C 00 00 04 00 47 65 74 44 72 69 76 65 72 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 00 32.dll..♦.GetDriverModuleHandle. 00000AA0 01 00 44 65 66 44 72 69 76 65 72 50 72 6F 63 00 02 00 44 72 69 76 65 72 43 61 6C 6C 62 61 63 6B ☺.DefDriverProc.☻.DriverCallback 00000AC0 00 00 72 00 6D 6D 54 61 73 6B 43 72 65 61 74 65 00 00 57 49 4E 4D 4D 2E 64 6C 6C 00 2D 00 43 72 ..r.mmTaskCreate..WINMM.dll.-.Cr 00000AE0 65 61 74 65 46 6F 6E 74 49 6E 64 69 72 65 63 74 57 00 BC 00 47 65 74 44 65 76 69 63 65 43 61 70 eateFontIndirectW.╝.GetDeviceCap 00000B00 73 00 47 44 49 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 s.GDI32.dll..................... 00000B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................