============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 B4 00 01 00 00 00 00 00 00 00 00 00 8C 03 01 00 BC 00 01 00 C4 00 01 00 00 00 00 00 00 00 00 00 ┤.☺.........î♥☺.╝.☺.─.☺......... 00000020 98 03 01 00 E8 00 01 00 0C 01 01 00 00 00 00 00 00 00 00 00 A5 03 01 00 14 01 01 00 1C 01 01 00 ÿ♥☺.Φ.☺.♀☺☺.........Ñ♥☺.¶☺☺.∟☺☺. 00000040 00 00 00 00 00 00 00 00 AF 03 01 00 3C 01 01 00 5C 01 01 00 00 00 00 00 00 00 00 00 BC 03 01 00 ........»♥☺.<☺☺.\☺☺.........╝♥☺. 00000060 B4 01 01 00 0C 02 01 00 00 00 00 00 00 00 00 00 C7 03 01 00 18 02 01 00 24 02 01 00 00 00 00 00 ┤☺☺.♀☻☺.........╟♥☺.↑☻☺.$☻☺..... 00000080 00 00 00 00 D2 03 01 00 D0 02 01 00 7C 03 01 00 00 00 00 00 00 00 00 00 DF 03 01 00 84 03 01 00 ....╥♥☺.╨☻☺.|♥☺.........▀♥☺.ä♥☺. 000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 EC 03 01 00 00 00 00 00 EC 03 01 00 ....................∞♥☺.....∞♥☺. 000000C0 00 00 00 00 FE 03 01 00 0C 04 01 00 18 04 01 00 2C 04 01 00 3A 04 01 00 48 04 01 00 56 04 01 00 ....■♥☺.♀♦☺.↑♦☺.,♦☺.:♦☺.H♦☺.V♦☺. 000000E0 62 04 01 00 00 00 00 00 FE 03 01 00 0C 04 01 00 18 04 01 00 2C 04 01 00 3A 04 01 00 48 04 01 00 b♦☺.....■♥☺.♀♦☺.↑♦☺.,♦☺.:♦☺.H♦☺. 00000100 56 04 01 00 62 04 01 00 00 00 00 00 6A 04 01 00 00 00 00 00 6A 04 01 00 00 00 00 00 7C 04 01 00 V♦☺.b♦☺.....j♦☺.....j♦☺.....|♦☺. 00000120 8A 04 01 00 9A 04 01 00 AC 04 01 00 BA 04 01 00 CA 04 01 00 DE 04 01 00 00 00 00 00 7C 04 01 00 è♦☺.Ü♦☺.¼♦☺.║♦☺.╩♦☺.▐♦☺.....|♦☺. 00000140 8A 04 01 00 9A 04 01 00 AC 04 01 00 BA 04 01 00 CA 04 01 00 DE 04 01 00 00 00 00 00 F0 04 01 00 è♦☺.Ü♦☺.¼♦☺.║♦☺.╩♦☺.▐♦☺.....≡♦☺. 00000160 06 05 01 00 18 05 01 00 2A 05 01 00 3E 05 01 00 4E 05 01 00 5C 05 01 00 6A 05 01 00 78 05 01 00 ♠♣☺.↑♣☺.*♣☺.>♣☺.N♣☺.\♣☺.j♣☺.x♣☺. 00000180 84 05 01 00 92 05 01 00 9E 05 01 00 AC 05 01 00 BC 05 01 00 CE 05 01 00 E0 05 01 00 F2 05 01 00 ä♣☺.Æ♣☺.₧♣☺.¼♣☺.╝♣☺.╬♣☺.α♣☺.≥♣☺. 000001A0 04 06 01 00 12 06 01 00 26 06 01 00 36 06 01 00 00 00 00 00 F0 04 01 00 06 05 01 00 18 05 01 00 ♦♠☺.↕♠☺.&♠☺.6♠☺.....≡♦☺.♠♣☺.↑♣☺. 000001C0 2A 05 01 00 3E 05 01 00 4E 05 01 00 5C 05 01 00 6A 05 01 00 78 05 01 00 84 05 01 00 92 05 01 00 *♣☺.>♣☺.N♣☺.\♣☺.j♣☺.x♣☺.ä♣☺.Æ♣☺. 000001E0 9E 05 01 00 AC 05 01 00 BC 05 01 00 CE 05 01 00 E0 05 01 00 F2 05 01 00 04 06 01 00 12 06 01 00 ₧♣☺.¼♣☺.╝♣☺.╬♣☺.α♣☺.≥♣☺.♦♠☺.↕♠☺. 00000200 26 06 01 00 36 06 01 00 00 00 00 00 42 06 01 00 54 06 01 00 00 00 00 00 42 06 01 00 54 06 01 00 &♠☺.6♠☺.....B♠☺.T♠☺.....B♠☺.T♠☺. 00000220 00 00 00 00 60 06 01 00 6E 06 01 00 7E 06 01 00 8C 06 01 00 9C 06 01 00 AC 06 01 00 BA 06 01 00 ....`♠☺.n♠☺.~♠☺.î♠☺.£♠☺.¼♠☺.║♠☺. 00000240 C8 06 01 00 D6 06 01 00 E8 06 01 00 FA 06 01 00 10 07 01 00 26 07 01 00 3A 07 01 00 52 07 01 00 ╚♠☺.╓♠☺.Φ♠☺.·♠☺.►•☺.&•☺.:•☺.R•☺. 00000260 60 07 01 00 70 07 01 00 80 07 01 00 96 07 01 00 AA 07 01 00 BC 07 01 00 CC 07 01 00 E6 07 01 00 `•☺.p•☺.Ç•☺.û•☺.¬•☺.╝•☺.╠•☺.µ•☺. 00000280 F4 07 01 00 04 08 01 00 18 08 01 00 24 08 01 00 34 08 01 00 40 08 01 00 58 08 01 00 6A 08 01 00 ⌠•☺.♦◘☺.↑◘☺.$◘☺.4◘☺.@◘☺.X◘☺.j◘☺. 000002A0 76 08 01 00 88 08 01 00 98 08 01 00 A4 08 01 00 AE 08 01 00 BC 08 01 00 CA 08 01 00 DA 08 01 00 v◘☺.ê◘☺.ÿ◘☺.ñ◘☺.«◘☺.╝◘☺.╩◘☺.┌◘☺. 000002C0 E8 08 01 00 FE 08 01 00 0E 09 01 00 00 00 00 00 60 06 01 00 6E 06 01 00 7E 06 01 00 8C 06 01 00 Φ◘☺.■◘☺.♫○☺.....`♠☺.n♠☺.~♠☺.î♠☺. 000002E0 9C 06 01 00 AC 06 01 00 BA 06 01 00 C8 06 01 00 D6 06 01 00 E8 06 01 00 FA 06 01 00 10 07 01 00 £♠☺.¼♠☺.║♠☺.╚♠☺.╓♠☺.Φ♠☺.·♠☺.►•☺. 00000300 26 07 01 00 3A 07 01 00 52 07 01 00 60 07 01 00 70 07 01 00 80 07 01 00 96 07 01 00 AA 07 01 00 &•☺.:•☺.R•☺.`•☺.p•☺.Ç•☺.û•☺.¬•☺. 00000320 BC 07 01 00 CC 07 01 00 E6 07 01 00 F4 07 01 00 04 08 01 00 18 08 01 00 24 08 01 00 34 08 01 00 ╝•☺.╠•☺.µ•☺.⌠•☺.♦◘☺.↑◘☺.$◘☺.4◘☺. 00000340 40 08 01 00 58 08 01 00 6A 08 01 00 76 08 01 00 88 08 01 00 98 08 01 00 A4 08 01 00 AE 08 01 00 @◘☺.X◘☺.j◘☺.v◘☺.ê◘☺.ÿ◘☺.ñ◘☺.«◘☺. 00000360 BC 08 01 00 CA 08 01 00 DA 08 01 00 E8 08 01 00 FE 08 01 00 0E 09 01 00 00 00 00 00 1A 09 01 00 ╝◘☺.╩◘☺.┌◘☺.Φ◘☺.■◘☺.♫○☺.....→○☺. 00000380 00 00 00 00 1A 09 01 00 00 00 00 00 53 48 45 4C 4C 33 32 2E 64 6C 6C 00 4B 45 52 4E 45 4C 33 32 ....→○☺.....SHELL32.dll.KERNEL32 000003A0 2E 64 6C 6C 00 47 44 49 33 32 2E 64 6C 6C 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 55 53 45 52 .dll.GDI32.dll.ADVAPI32.dll.USER 000003C0 33 32 2E 64 6C 6C 00 55 53 45 52 33 32 2E 44 4C 4C 00 4B 45 52 4E 45 4C 33 32 2E 44 4C 4C 00 43 32.dll.USER32.DLL.KERNEL32.DLL.C 000003E0 4F 4D 43 54 4C 33 32 2E 64 6C 6C 00 01 00 53 68 65 6C 6C 45 78 65 63 75 74 65 45 78 41 00 01 00 OMCTL32.dll.☺.ShellExecuteExA.☺. 00000400 43 6C 6F 73 65 48 61 6E 64 6C 65 00 02 00 43 6F 70 79 46 69 6C 65 41 00 03 00 43 72 65 61 74 65 CloseHandle.☻.CopyFileA.♥.Create 00000420 44 69 72 65 63 74 6F 72 79 41 00 00 04 00 43 72 65 61 74 65 46 69 6C 65 41 00 05 00 44 65 6C 65 DirectoryA..♦.CreateFileA.♣.Dele 00000440 74 65 46 69 6C 65 41 00 06 00 47 65 74 46 69 6C 65 53 69 7A 65 00 07 00 52 65 61 64 46 69 6C 65 teFileA.♠.GetFileSize.•.ReadFile 00000460 00 00 08 00 53 6C 65 65 70 00 01 00 47 65 74 53 74 6F 63 6B 4F 62 6A 65 63 74 00 00 01 00 52 65 ..◘.Sleep.☺.GetStockObject..☺.Re 00000480 67 43 6C 6F 73 65 4B 65 79 00 02 00 52 65 67 43 72 65 61 74 65 4B 65 79 41 00 03 00 52 65 67 44 gCloseKey.☻.RegCreateKeyA.♥.RegD 000004A0 65 6C 65 74 65 56 61 6C 75 65 41 00 04 00 52 65 67 4F 70 65 6E 4B 65 79 41 00 05 00 52 65 67 4F eleteValueA.♦.RegOpenKeyA.♣.RegO 000004C0 70 65 6E 4B 65 79 45 78 41 00 06 00 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 07 00 penKeyExA.♠.RegQueryValueExA..•. 000004E0 52 65 67 53 65 74 56 61 6C 75 65 45 78 41 00 00 01 00 43 72 65 61 74 65 44 69 61 6C 6F 67 50 61 RegSetValueExA..☺.CreateDialogPa 00000500 72 61 6D 41 00 00 02 00 43 72 65 61 74 65 57 69 6E 64 6F 77 45 78 41 00 03 00 44 65 66 57 69 6E ramA..☻.CreateWindowExA.♥.DefWin 00000520 64 6F 77 50 72 6F 63 41 00 00 04 00 44 69 73 70 61 74 63 68 4D 65 73 73 61 67 65 41 00 00 05 00 dowProcA..♦.DispatchMessageA..♣. 00000540 45 6E 61 62 6C 65 57 69 6E 64 6F 77 00 00 06 00 46 69 6E 64 57 69 6E 64 6F 77 41 00 07 00 47 65 EnableWindow..♠.FindWindowA.•.Ge 00000560 74 44 6C 67 49 74 65 6D 00 00 08 00 47 65 74 4D 65 73 73 61 67 65 41 00 09 00 47 65 74 50 61 72 tDlgItem..◘.GetMessageA.○.GetPar 00000580 65 6E 74 00 0A 00 4C 6F 61 64 43 75 72 73 6F 72 41 00 0B 00 4C 6F 61 64 49 63 6F 6E 41 00 0C 00 ent.◙.LoadCursorA.♂.LoadIconA.♀. 000005A0 4D 65 73 73 61 67 65 42 6F 78 41 00 0D 00 50 6F 73 74 4D 65 73 73 61 67 65 41 00 00 0E 00 50 6F MessageBoxA.♪.PostMessageA..♫.Po 000005C0 73 74 51 75 69 74 4D 65 73 73 61 67 65 00 0F 00 52 65 67 69 73 74 65 72 43 6C 61 73 73 41 00 00 stQuitMessage.☼.RegisterClassA.. 000005E0 10 00 53 65 74 44 6C 67 49 74 65 6D 54 65 78 74 41 00 11 00 53 65 74 57 69 6E 64 6F 77 4C 6F 6E ►.SetDlgItemTextA.◄.SetWindowLon 00000600 67 41 00 00 12 00 53 68 6F 77 57 69 6E 64 6F 77 00 00 13 00 54 72 61 6E 73 6C 61 74 65 4D 65 73 gA..↕.ShowWindow..‼.TranslateMes 00000620 73 61 67 65 00 00 14 00 55 70 64 61 74 65 57 69 6E 64 6F 77 00 00 15 00 57 69 6E 48 65 6C 70 41 sage..¶.UpdateWindow..§.WinHelpA 00000640 00 00 01 00 47 65 74 41 63 74 69 76 65 57 69 6E 64 6F 77 00 02 00 77 73 70 72 69 6E 74 66 41 00 ..☺.GetActiveWindow.☻.wsprintfA. 00000660 01 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 02 00 43 72 65 61 74 65 45 76 65 6E 74 41 00 00 03 00 ☺.CloseHandle.☻.CreateEventA..♥. 00000680 43 72 65 61 74 65 46 69 6C 65 41 00 04 00 43 72 65 61 74 65 4D 75 74 65 78 41 00 00 05 00 43 72 CreateFileA.♦.CreateMutexA..♣.Cr 000006A0 65 61 74 65 54 68 72 65 61 64 00 00 06 00 44 65 6C 65 74 65 46 69 6C 65 41 00 07 00 45 78 69 74 eateThread..♠.DeleteFileA.•.Exit 000006C0 50 72 6F 63 65 73 73 00 08 00 45 78 69 74 54 68 72 65 61 64 00 00 09 00 47 65 74 43 6F 6D 6D 61 Process.◘.ExitThread..○.GetComma 000006E0 6E 64 4C 69 6E 65 41 00 0A 00 47 65 74 43 6F 6E 73 6F 6C 65 4D 6F 64 65 00 00 0B 00 47 65 74 43 ndLineA.◙.GetConsoleMode..♂.GetC 00000700 75 72 72 65 6E 74 50 72 6F 63 65 73 73 49 64 00 0C 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 urrentProcessId.♀.GetCurrentThre 00000720 61 64 49 64 00 00 0D 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 00 00 0E 00 47 65 74 45 adId..♪.GetCurrentThread..♫.GetE 00000740 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 00 0F 00 47 65 74 46 69 6C 65 54 79 70 65 00 nvironmentStrings.☼.GetFileType. 00000760 10 00 47 65 74 4C 61 73 74 45 72 72 6F 72 00 00 11 00 47 65 74 4C 6F 63 61 6C 54 69 6D 65 00 00 ►.GetLastError..◄.GetLocalTime.. 00000780 12 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 41 00 00 13 00 47 65 74 4D 6F 64 75 6C ↕.GetModuleFileNameA..‼.GetModul 000007A0 65 48 61 6E 64 6C 65 41 00 00 14 00 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 15 00 47 65 eHandleA..¶.GetProcAddress..§.Ge 000007C0 74 53 74 64 48 61 6E 64 6C 65 00 00 16 00 47 65 74 54 69 6D 65 5A 6F 6E 65 49 6E 66 6F 72 6D 61 tStdHandle..▬.GetTimeZoneInforma 000007E0 74 69 6F 6E 00 00 17 00 47 65 74 56 65 72 73 69 6F 6E 00 00 18 00 4C 6F 61 64 4C 69 62 72 61 72 tion..↨.GetVersion..↑.LoadLibrar 00000800 79 41 00 00 19 00 52 65 61 64 43 6F 6E 73 6F 6C 65 49 6E 70 75 74 41 00 1A 00 52 65 61 64 46 69 yA..↓.ReadConsoleInputA.→.ReadFi 00000820 6C 65 00 00 1B 00 52 65 6C 65 61 73 65 4D 75 74 65 78 00 00 1C 00 52 74 6C 55 6E 77 69 6E 64 00 le..←.ReleaseMutex..∟.RtlUnwind. 00000840 1D 00 53 65 74 43 6F 6E 73 6F 6C 65 43 74 72 6C 48 61 6E 64 6C 65 72 00 1E 00 53 65 74 43 6F 6E ↔.SetConsoleCtrlHandler.▲.SetCon 00000860 73 6F 6C 65 4D 6F 64 65 00 00 1F 00 53 65 74 45 76 65 6E 74 00 00 20 00 53 65 74 46 69 6C 65 50 soleMode..▼.SetEvent.. .SetFileP 00000880 6F 69 6E 74 65 72 00 00 21 00 53 65 74 53 74 64 48 61 6E 64 6C 65 00 00 22 00 54 6C 73 41 6C 6C ointer..!.SetStdHandle..".TlsAll 000008A0 6F 63 00 00 23 00 54 6C 73 46 72 65 65 00 24 00 54 6C 73 47 65 74 56 61 6C 75 65 00 25 00 54 6C oc..#.TlsFree.$.TlsGetValue.%.Tl 000008C0 73 53 65 74 56 61 6C 75 65 00 26 00 56 69 72 74 75 61 6C 41 6C 6C 6F 63 00 00 27 00 56 69 72 74 sSetValue.&.VirtualAlloc..'.Virt 000008E0 75 61 6C 46 72 65 65 00 28 00 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 29 00 ualFree.(.WaitForSingleObject.). 00000900 57 72 69 74 65 43 6F 6E 73 6F 6C 65 41 00 2A 00 57 72 69 74 65 46 69 6C 65 00 01 00 50 72 6F 70 WriteConsoleA.*.WriteFile.☺.Prop 00000920 65 72 74 79 53 68 65 65 74 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ertySheetA...................... 00000940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................