============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 A0 70 00 00 00 00 00 00 00 00 00 00 22 71 00 00 0C 71 00 00 3C 70 00 00 00 00 00 00 00 00 00 00 áp.........."q..♀q..<p.......... 00000020 C2 72 00 00 A8 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F0 71 00 00 ┬r..¿p......................≡q.. 00000040 DA 71 00 00 2E 71 00 00 46 71 00 00 58 71 00 00 66 71 00 00 74 71 00 00 8A 71 00 00 98 71 00 00 ┌q...q..Fq..Xq..fq..tq..èq..ÿq.. 00000060 A4 71 00 00 AE 71 00 00 BC 71 00 00 CA 71 00 00 B2 72 00 00 FA 71 00 00 06 72 00 00 12 72 00 00 ñq..«q..╝q..╩q..▓r..·q..♠r..↕r.. 00000080 22 72 00 00 30 72 00 00 42 72 00 00 4E 72 00 00 6A 72 00 00 82 72 00 00 9A 72 00 00 00 00 00 00 "r..0r..Br..Nr..jr..ér..Ür...... 000000A0 14 71 00 00 00 00 00 00 F0 71 00 00 DA 71 00 00 2E 71 00 00 46 71 00 00 58 71 00 00 66 71 00 00 ¶q......≡q..┌q...q..Fq..Xq..fq.. 000000C0 74 71 00 00 8A 71 00 00 98 71 00 00 A4 71 00 00 AE 71 00 00 BC 71 00 00 CA 71 00 00 B2 72 00 00 tq..èq..ÿq..ñq..«q..╝q..╩q..▓r.. 000000E0 FA 71 00 00 06 72 00 00 12 72 00 00 22 72 00 00 30 72 00 00 42 72 00 00 4E 72 00 00 6A 72 00 00 ·q..♠r..↕r.."r..0r..Br..Nr..jr.. 00000100 82 72 00 00 9A 72 00 00 00 00 00 00 14 71 00 00 00 00 00 00 88 01 4D 65 73 73 61 67 65 42 6F 78 ér..Ür......¶q......ê☺MessageBox 00000120 41 00 55 53 45 52 33 32 2E 64 6C 6C 00 00 D0 00 47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 A.USER32.dll..╨.GetEnvironmentSt 00000140 72 69 6E 67 73 00 9F 00 47 65 74 43 6F 6D 6D 61 6E 64 4C 69 6E 65 41 00 37 01 47 65 74 56 65 72 rings.ƒ.GetCommandLineA.7☺GetVer 00000160 73 69 6F 6E 00 00 62 00 45 78 69 74 50 72 6F 63 65 73 73 00 C7 00 47 65 74 43 75 72 72 65 6E 74 sion..b.ExitProcess.╟.GetCurrent 00000180 54 68 72 65 61 64 49 64 00 00 22 02 54 6C 73 53 65 74 56 61 6C 75 65 00 1F 02 54 6C 73 41 6C 6C ThreadId.."☻TlsSetValue.▼☻TlsAll 000001A0 6F 63 00 00 20 02 54 6C 73 46 72 65 65 00 21 02 54 6C 73 47 65 74 56 61 6C 75 65 00 33 02 56 69 oc.. ☻TlsFree.!☻TlsGetValue.3☻Vi 000001C0 72 74 75 61 6C 46 72 65 65 00 31 02 56 69 72 74 75 61 6C 41 6C 6C 6F 63 00 00 E9 00 47 65 74 4D rtualFree.1☻VirtualAlloc..Θ.GetM 000001E0 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 41 00 00 92 00 47 65 74 41 43 50 00 00 F6 00 47 65 74 4F oduleFileNameA..Æ.GetACP..÷.GetO 00000200 45 4D 43 50 00 00 98 00 47 65 74 43 50 49 6E 66 6F 00 16 01 47 65 74 53 74 64 48 61 6E 64 6C 65 EMCP..ÿ.GetCPInfo.▬☺GetStdHandle 00000220 00 00 DC 00 47 65 74 46 69 6C 65 54 79 70 65 00 14 01 47 65 74 53 74 61 72 74 75 70 49 6E 66 6F ..▄.GetFileType.¶☺GetStartupInfo 00000240 41 00 4F 02 57 72 69 74 65 46 69 6C 65 00 64 01 49 6E 69 74 69 61 6C 69 7A 65 43 72 69 74 69 63 A.O☻WriteFile.d☺InitializeCritic 00000260 61 6C 53 65 63 74 69 6F 6E 00 44 00 44 65 6C 65 74 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F alSection.D.DeleteCriticalSectio 00000280 6E 00 4F 00 45 6E 74 65 72 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 77 01 4C 65 61 76 n.O.EnterCriticalSection..w☺Leav 000002A0 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 E1 00 47 65 74 4C 61 73 74 45 72 72 6F 72 eCriticalSection..ß.GetLastError 000002C0 00 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..KERNEL32.dll.................. 000002E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................