============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 01 00 00 00 13 00 09 00 00 00 00 00 0C 41 44 56 41 50 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 ☺...‼.○.....♀ADVAPI32.dll$.☺.♥•. 00000020 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 ◘↔Microsoft LINK 2.60.5112 (NT)☺ 00000040 00 00 00 13 00 09 00 00 00 00 00 0C 41 44 56 41 50 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 ...‼.○.....♀ADVAPI32.dll$.☺.♥•.◘ 00000060 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 ↔Microsoft LINK 2.60.5112 (NT)☺. 00000080 00 00 13 00 09 00 00 00 00 00 0C 41 44 56 41 50 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D ..‼.○.....♀ADVAPI32.dll$.☺.♥•.◘↔ 000000A0 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 23 00 06 Microsoft LINK 2.60.5112 (NT)#.♠ 000000C0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 00 00 00 47 00 00 0B 52 65 67 43 6C 6F 73 65 4B ☻..............A...G..♂RegCloseK 000000E0 65 79 02 00 06 00 25 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 06 00 41 00 06 00 47 00 00 0D ey☻.♠.%.♠☻............♠.A.♠.G..♪ 00000100 52 65 67 43 72 65 61 74 65 4B 65 79 41 02 00 06 00 28 00 06 02 00 00 00 00 00 00 00 00 00 00 00 RegCreateKeyA☻.♠.(.♠☻........... 00000120 00 0C 00 41 00 0C 00 47 00 00 10 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 02 00 06 00 01 .♀.A.♀.G..►RegQueryValueExA☻.♠.☺ 00000140 00 00 00 10 00 09 00 00 00 00 00 09 47 44 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 ...►.○.....○GDI32.dll$.☺.♥•.◘↔Mi 00000160 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 10 crosoft LINK 2.60.5112 (NT)☺...► 00000180 00 09 00 00 00 00 00 09 47 44 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 .○.....○GDI32.dll$.☺.♥•.◘↔Micros 000001A0 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 10 00 09 00 00 oft LINK 2.60.5112 (NT)☺...►.○.. 000001C0 00 00 00 09 47 44 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 ...○GDI32.dll$.☺.♥•.◘↔Microsoft 000001E0 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 10 00 09 00 00 00 00 00 09 LINK 2.60.5112 (NT)☺...►.○.....○ 00000200 47 44 49 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B GDI32.dll$.☺.♥•.◘↔Microsoft LINK 00000220 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 2A 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 12 2.60.5112 (NT)*.♠☻............↕ 00000240 00 41 00 12 00 47 00 00 12 43 72 65 61 74 65 50 61 74 74 65 72 6E 42 72 75 73 68 02 00 06 00 28 .A.↕.G..↕CreatePatternBrush☻.♠.( 00000260 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 18 00 41 00 18 00 47 00 00 10 43 72 65 61 74 65 53 .♠☻............↑.A.↑.G..►CreateS 00000280 6F 6C 69 64 42 72 75 73 68 02 00 06 00 24 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 1E 00 41 olidBrush☻.♠.$.♠☻............▲.A 000002A0 00 1E 00 47 00 00 0C 44 65 6C 65 74 65 4F 62 6A 65 63 74 02 00 06 00 26 00 06 02 00 00 00 00 00 .▲.G..♀DeleteObject☻.♠.&.♠☻..... 000002C0 00 00 00 00 00 00 00 24 00 41 00 24 00 47 00 00 0E 47 65 74 53 74 6F 63 6B 4F 62 6A 65 63 74 02 .......$.A.$.G..♫GetStockObject☻ 000002E0 00 06 00 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 .♠.☺...‼.○.....♀KERNEL32.dll$.☺. 00000300 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E ♥•.◘↔Microsoft LINK 2.60.5112 (N 00000320 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 T)☺...‼.○.....♀KERNEL32.dll$.☺.♥ 00000340 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 •.◘↔Microsoft LINK 2.60.5112 (NT 00000360 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 )☺...‼.○.....♀KERNEL32.dll$.☺.♥• 00000380 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 .◘↔Microsoft LINK 2.60.5112 (NT) 000003A0 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 ☺...‼.○.....♀KERNEL32.dll$.☺.♥•. 000003C0 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 ◘↔Microsoft LINK 2.60.5112 (NT)☺ 000003E0 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 ...‼.○.....♀KERNEL32.dll$.☺.♥•.◘ 00000400 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 ↔Microsoft LINK 2.60.5112 (NT)☺. 00000420 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D ..‼.○.....♀KERNEL32.dll$.☺.♥•.◘↔ 00000440 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 Microsoft LINK 2.60.5112 (NT)☺.. 00000460 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D .‼.○.....♀KERNEL32.dll$.☺.♥•.◘↔M 00000480 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 icrosoft LINK 2.60.5112 (NT)☺... 000004A0 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 ‼.○.....♀KERNEL32.dll$.☺.♥•.◘↔Mi 000004C0 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 crosoft LINK 2.60.5112 (NT)☺...‼ 000004E0 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 .○.....♀KERNEL32.dll$.☺.♥•.◘↔Mic 00000500 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 rosoft LINK 2.60.5112 (NT)☺...‼. 00000520 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 ○.....♀KERNEL32.dll$.☺.♥•.◘↔Micr 00000540 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 osoft LINK 2.60.5112 (NT)☺...‼.○ 00000560 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F .....♀KERNEL32.dll$.☺.♥•.◘↔Micro 00000580 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 soft LINK 2.60.5112 (NT)☺...‼.○. 000005A0 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 ....♀KERNEL32.dll$.☺.♥•.◘↔Micros 000005C0 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 oft LINK 2.60.5112 (NT)☺...‼.○.. 000005E0 00 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F ...♀KERNEL32.dll$.☺.♥•.◘↔Microso 00000600 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 ft LINK 2.60.5112 (NT)☺...‼.○... 00000620 00 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 ..♀KERNEL32.dll$.☺.♥•.◘↔Microsof 00000640 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 t LINK 2.60.5112 (NT)☺...‼.○.... 00000660 00 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 .♀KERNEL32.dll$.☺.♥•.◘↔Microsoft 00000680 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 LINK 2.60.5112 (NT)☺...‼.○..... 000006A0 0C 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 ♀KERNEL32.dll$.☺.♥•.◘↔Microsoft 000006C0 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C LINK 2.60.5112 (NT)☺...‼.○.....♀ 000006E0 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C KERNEL32.dll$.☺.♥•.◘↔Microsoft L 00000700 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B INK 2.60.5112 (NT)☺...‼.○.....♀K 00000720 45 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 ERNEL32.dll$.☺.♥•.◘↔Microsoft LI 00000740 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 NK 2.60.5112 (NT)☺...‼.○.....♀KE 00000760 52 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E RNEL32.dll$.☺.♥•.◘↔Microsoft LIN 00000780 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 K 2.60.5112 (NT)☺...‼.○.....♀KER 000007A0 4E 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B NEL32.dll$.☺.♥•.◘↔Microsoft LINK 000007C0 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 2.60.5112 (NT)☺...‼.○.....♀KERN 000007E0 45 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 EL32.dll$.☺.♥•.◘↔Microsoft LINK 00000800 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 2.60.5112 (NT)☺...‼.○.....♀KERNE 00000820 4C 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 L32.dll$.☺.♥•.◘↔Microsoft LINK 2 00000840 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C .60.5112 (NT)☺...‼.○.....♀KERNEL 00000860 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 32.dll$.☺.♥•.◘↔Microsoft LINK 2. 00000880 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 60.5112 (NT)☺...‼.○.....♀KERNEL3 000008A0 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 2.dll$.☺.♥•.◘↔Microsoft LINK 2.6 000008C0 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 13 00 09 00 00 00 00 00 0C 4B 45 52 4E 45 4C 33 32 0.5112 (NT)☺...‼.○.....♀KERNEL32 000008E0 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 .dll$.☺.♥•.◘↔Microsoft LINK 2.60 00000900 2E 35 31 31 32 20 28 4E 54 29 23 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 2A 00 41 00 2A 00 .5112 (NT)#.♠☻............*.A.*. 00000920 47 00 00 0B 43 6C 6F 73 65 48 61 6E 64 6C 65 02 00 06 00 21 00 06 02 00 00 00 00 00 00 00 00 00 G..♂CloseHandle☻.♠.!.♠☻......... 00000940 00 00 00 30 00 41 00 30 00 47 00 00 09 43 6F 70 79 46 69 6C 65 41 02 00 06 00 23 00 06 02 00 00 ...0.A.0.G..○CopyFileA☻.♠.#.♠☻.. 00000960 00 00 00 00 00 00 00 00 00 00 36 00 41 00 36 00 47 00 00 0B 43 72 65 61 74 65 46 69 6C 65 41 02 ..........6.A.6.G..♂CreateFileA☻ 00000980 00 06 00 2D 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 3C 00 41 00 3C 00 47 00 00 15 44 6F 73 .♠.-.♠☻............<.A.<.G..§Dos 000009A0 44 61 74 65 54 69 6D 65 54 6F 46 69 6C 65 54 69 6D 65 02 00 06 00 31 00 06 02 00 00 00 00 00 00 DateTimeToFileTime☻.♠.1.♠☻...... 000009C0 00 00 00 00 00 00 42 00 41 00 42 00 47 00 00 19 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E ......B.A.B.G..↓ExpandEnvironmen 000009E0 74 53 74 72 69 6E 67 73 41 02 00 06 00 21 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 48 00 41 tStringsA☻.♠.!.♠☻............H.A 00000A00 00 48 00 47 00 00 09 46 69 6E 64 43 6C 6F 73 65 02 00 06 00 26 00 06 02 00 00 00 00 00 00 00 00 .H.G..○FindClose☻.♠.&.♠☻........ 00000A20 00 00 00 00 4E 00 41 00 4E 00 47 00 00 0E 46 69 6E 64 46 69 72 73 74 46 69 6C 65 41 02 00 06 00 ....N.A.N.G..♫FindFirstFileA☻.♠. 00000A40 25 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 54 00 41 00 54 00 47 00 00 0D 46 69 6E 64 4E 65 %.♠☻............T.A.T.G..♪FindNe 00000A60 78 74 46 69 6C 65 41 02 00 06 00 27 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 5A 00 41 00 5A xtFileA☻.♠.'.♠☻............Z.A.Z 00000A80 00 47 00 00 0F 47 65 74 43 6F 6D 6D 61 6E 64 4C 69 6E 65 41 02 00 06 00 25 00 06 02 00 00 00 00 .G..☼GetCommandLineA☻.♠.%.♠☻.... 00000AA0 00 00 00 00 00 00 00 00 60 00 41 00 60 00 47 00 00 0D 47 65 74 44 72 69 76 65 54 79 70 65 41 02 ........`.A.`.G..♪GetDriveTypeA☻ 00000AC0 00 06 00 28 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 66 00 41 00 66 00 47 00 00 10 47 65 74 .♠.(.♠☻............f.A.f.G..►Get 00000AE0 46 75 6C 6C 50 61 74 68 4E 61 6D 65 41 02 00 06 00 24 00 06 02 00 00 00 00 00 00 00 00 00 00 00 FullPathNameA☻.♠.$.♠☻........... 00000B00 00 6C 00 41 00 6C 00 47 00 00 0C 47 65 74 4C 61 73 74 45 72 72 6F 72 02 00 06 00 2A 00 06 02 00 .l.A.l.G..♀GetLastError☻.♠.*.♠☻. 00000B20 00 00 00 00 00 00 00 00 00 00 00 72 00 41 00 72 00 47 00 00 12 47 65 74 4D 6F 64 75 6C 65 46 69 ...........r.A.r.G..↕GetModuleFi 00000B40 6C 65 4E 61 6D 65 41 02 00 06 00 28 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 78 00 41 00 78 leNameA☻.♠.(.♠☻............x.A.x 00000B60 00 47 00 00 10 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 41 02 00 06 00 2E 00 06 02 00 00 00 .G..►GetModuleHandleA☻.♠...♠☻... 00000B80 00 00 00 00 00 00 00 00 00 7E 00 41 00 7E 00 47 00 00 16 47 65 74 54 69 6D 65 5A 6F 6E 65 49 6E .........~.A.~.G..▬GetTimeZoneIn 00000BA0 66 6F 72 6D 61 74 69 6F 6E 02 00 06 00 22 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 84 00 41 formation☻.♠.".♠☻............ä.A 00000BC0 00 84 00 47 00 00 0A 47 65 74 56 65 72 73 69 6F 6E 02 00 06 00 2D 00 06 02 00 00 00 00 00 00 00 .ä.G..◙GetVersion☻.♠.-.♠☻....... 00000BE0 00 00 00 00 00 8A 00 41 00 8A 00 47 00 00 15 47 65 74 56 6F 6C 75 6D 65 49 6E 66 6F 72 6D 61 74 .....è.A.è.G..§GetVolumeInformat 00000C00 69 6F 6E 41 02 00 06 00 2F 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 90 00 41 00 90 00 47 00 ionA☻.♠./.♠☻............É.A.É.G. 00000C20 00 17 4C 6F 63 61 6C 46 69 6C 65 54 69 6D 65 54 6F 46 69 6C 65 54 69 6D 65 02 00 06 00 2B 00 06 .↨LocalFileTimeToFileTime☻.♠.+.♠ 00000C40 02 00 00 00 00 00 00 00 00 00 00 00 00 96 00 41 00 96 00 47 00 00 13 4D 75 6C 74 69 42 79 74 65 ☻............û.A.û.G..‼MultiByte 00000C60 54 6F 57 69 64 65 43 68 61 72 02 00 06 00 20 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 9C 00 ToWideChar☻.♠. .♠☻............£. 00000C80 41 00 9C 00 47 00 00 08 4F 70 65 6E 46 69 6C 65 02 00 06 00 23 00 06 02 00 00 00 00 00 00 00 00 A.£.G..◘OpenFile☻.♠.#.♠☻........ 00000CA0 00 00 00 00 A2 00 41 00 A2 00 47 00 00 0B 53 65 61 72 63 68 50 61 74 68 41 02 00 06 00 2A 00 06 ....ó.A.ó.G..♂SearchPathA☻.♠.*.♠ 00000CC0 02 00 00 00 00 00 00 00 00 00 00 00 00 A8 00 41 00 A8 00 47 00 00 12 53 65 74 46 69 6C 65 41 74 ☻............¿.A.¿.G..↕SetFileAt 00000CE0 74 72 69 62 75 74 65 73 41 02 00 06 00 23 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 AE 00 41 tributesA☻.♠.#.♠☻............«.A 00000D00 00 AE 00 47 00 00 0B 53 65 74 46 69 6C 65 54 69 6D 65 02 00 06 00 27 00 06 02 00 00 00 00 00 00 .«.G..♂SetFileTime☻.♠.'.♠☻...... 00000D20 00 00 00 00 00 00 B4 00 41 00 B4 00 47 00 00 0F 53 65 74 56 6F 6C 75 6D 65 4C 61 62 65 6C 41 02 ......┤.A.┤.G..☼SetVolumeLabelA☻ 00000D40 00 06 00 1F 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 BA 00 41 00 BA 00 47 00 00 07 5F 6C 63 .♠.▼.♠☻............║.A.║.G..•_lc 00000D60 6C 6F 73 65 02 00 06 00 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 lose☻.♠.☺...◄.○.....◙USER32.dll$ 00000D80 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 .☺.♥•.◘↔Microsoft LINK 2.60.5112 00000DA0 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 (NT)☺...◄.○.....◙USER32.dll$.☺. 00000DC0 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E ♥•.◘↔Microsoft LINK 2.60.5112 (N 00000DE0 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 T)☺...◄.○.....◙USER32.dll$.☺.♥•. 00000E00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 ◘↔Microsoft LINK 2.60.5112 (NT)☺ 00000E20 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D ...◄.○.....◙USER32.dll$.☺.♥•.◘↔M 00000E40 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 icrosoft LINK 2.60.5112 (NT)☺... 00000E60 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 ◄.○.....◙USER32.dll$.☺.♥•.◘↔Micr 00000E80 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 osoft LINK 2.60.5112 (NT)☺...◄.○ 00000EA0 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F .....◙USER32.dll$.☺.♥•.◘↔Microso 00000EC0 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 ft LINK 2.60.5112 (NT)☺...◄.○... 00000EE0 00 00 0A 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 ..◙USER32.dll$.☺.♥•.◘↔Microsoft 00000F00 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A LINK 2.60.5112 (NT)☺...◄.○.....◙ 00000F20 55 53 45 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E USER32.dll$.☺.♥•.◘↔Microsoft LIN 00000F40 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 K 2.60.5112 (NT)☺...◄.○.....◙USE 00000F60 52 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 R32.dll$.☺.♥•.◘↔Microsoft LINK 2 00000F80 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 .60.5112 (NT)☺...◄.○.....◙USER32 00000FA0 2E 64 6C 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 .dll$.☺.♥•.◘↔Microsoft LINK 2.60 00000FC0 2E 35 31 31 32 20 28 4E 54 29 01 00 00 00 11 00 09 00 00 00 00 00 0A 55 53 45 52 33 32 2E 64 6C .5112 (NT)☺...◄.○.....◙USER32.dl 00000FE0 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 l$.☺.♥•.◘↔Microsoft LINK 2.60.51 00001000 31 32 20 28 4E 54 29 27 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 2A 03 41 00 2A 03 47 00 00 12 (NT)'.♠☻............*♥A.*♥G.. 00001020 0F 43 72 65 61 74 65 57 69 6E 64 6F 77 45 78 41 02 00 06 00 26 00 06 02 00 00 00 00 00 00 00 00 ☼CreateWindowExA☻.♠.&.♠☻........ 00001040 00 00 00 00 30 03 41 00 30 03 47 00 00 0E 44 65 66 57 69 6E 64 6F 77 50 72 6F 63 41 02 00 06 00 ....0♥A.0♥G..♫DefWindowProcA☻.♠. 00001060 20 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 36 03 41 00 36 03 47 00 00 08 46 69 6C 6C 52 65 .♠☻............6♥A.6♥G..◘FillRe 00001080 63 74 02 00 06 00 26 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 3C 03 41 00 3C 03 47 00 00 0E ct☻.♠.&.♠☻............<♥A.<♥G..♫ 000010A0 47 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 41 02 00 06 00 23 00 06 02 00 00 00 00 00 00 00 00 00 00 GetWindowLongA☻.♠.#.♠☻.......... 000010C0 00 00 42 03 41 00 42 03 47 00 00 0B 4C 6F 61 64 42 69 74 6D 61 70 41 02 00 06 00 23 00 06 02 00 ..B♥A.B♥G..♂LoadBitmapA☻.♠.#.♠☻. 000010E0 00 00 00 00 00 00 00 00 00 00 00 48 03 41 00 48 03 47 00 00 0B 4C 6F 61 64 43 75 72 73 6F 72 41 ...........H♥A.H♥G..♂LoadCursorA 00001100 02 00 06 00 21 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 4E 03 41 00 4E 03 47 00 00 09 4C 6F ☻.♠.!.♠☻............N♥A.N♥G..○Lo 00001120 61 64 49 63 6F 6E 41 02 00 06 00 22 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 54 03 41 00 54 adIconA☻.♠.".♠☻............T♥A.T 00001140 03 47 00 00 0A 4F 65 6D 54 6F 43 68 61 72 41 02 00 06 00 26 00 06 02 00 00 00 00 00 00 00 00 00 ♥G..◙OemToCharA☻.♠.&.♠☻......... 00001160 00 00 00 5A 03 41 00 5A 03 47 00 00 0E 52 65 67 69 73 74 65 72 43 6C 61 73 73 41 02 00 06 00 24 ...Z♥A.Z♥G..♫RegisterClassA☻.♠.$ 00001180 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 60 03 41 00 60 03 47 00 00 0C 53 65 6E 64 4D 65 73 .♠☻............`♥A.`♥G..♀SendMes 000011A0 73 61 67 65 41 02 00 06 00 26 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 66 03 41 00 66 03 47 sageA☻.♠.&.♠☻............f♥A.f♥G 000011C0 00 00 0E 53 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 41 02 00 06 00 01 00 00 00 35 00 09 00 00 00 00 ..♫SetWindowLongA☻.♠.☺...5.○.... 000011E0 00 2E 44 3A 5C 6E 74 5C 70 72 69 76 61 74 65 5C 74 79 70 65 73 5C 75 75 69 64 5C 6F 62 6A 5C 69 ..D:\nt\private\types\uuid\obj\i 00001200 33 38 36 5C 6F 62 6A 69 64 6C 5F 69 2E 6F 62 6A 09 00 04 00 01 10 04 5F 49 49 44 17 00 02 02 00 386\objidl_i.obj○.♦.☺►♦_IID↨.☻☻. 00001220 00 44 00 00 00 44 10 0C 49 49 44 5F 49 4D 61 72 73 68 61 6C 16 00 02 02 10 00 44 00 10 00 44 10 .D...D►♀IID_IMarshal▬.☻☻►.D.►.D► 00001240 0B 49 49 44 5F 49 4D 61 6C 6C 6F 63 19 00 02 02 20 00 44 00 20 00 44 10 0E 49 49 44 5F 49 4D 61 ♂IID_IMalloc↓.☻☻ .D. .D►♫IID_IMa 00001260 6C 6C 6F 63 53 70 79 1E 00 02 02 30 00 44 00 30 00 44 10 13 49 49 44 5F 49 53 74 64 4D 61 72 73 llocSpy▲.☻☻0.D.0.D►‼IID_IStdMars 00001280 68 61 6C 49 6E 66 6F 22 00 02 02 40 00 44 00 40 00 44 10 17 49 49 44 5F 49 45 78 74 65 72 6E 61 halInfo".☻☻@.D.@.D►↨IID_IExterna 000012A0 6C 43 6F 6E 6E 65 63 74 69 6F 6E 1B 00 02 02 50 00 44 00 50 00 44 10 10 49 49 44 5F 49 45 6E 75 lConnection←.☻☻P.D.P.D►►IID_IEnu 000012C0 6D 55 6E 6B 6E 6F 77 6E 17 00 02 02 60 00 44 00 60 00 44 10 0C 49 49 44 5F 49 42 69 6E 64 43 74 mUnknown↨.☻☻`.D.`.D►♀IID_IBindCt 000012E0 78 1B 00 02 02 70 00 44 00 70 00 44 10 10 49 49 44 5F 49 45 6E 75 6D 4D 6F 6E 69 6B 65 72 1E 00 x←.☻☻p.D.p.D►►IID_IEnumMoniker▲. 00001300 02 02 80 00 44 00 80 00 44 10 13 49 49 44 5F 49 52 75 6E 6E 61 62 6C 65 4F 62 6A 65 63 74 22 00 ☻☻Ç.D.Ç.D►‼IID_IRunnableObject". 00001320 02 02 90 00 44 00 90 00 44 10 17 49 49 44 5F 49 52 75 6E 6E 69 6E 67 4F 62 6A 65 63 74 54 61 62 ☻☻É.D.É.D►↨IID_IRunningObjectTab 00001340 6C 65 17 00 02 02 A0 00 44 00 A0 00 44 10 0C 49 49 44 5F 49 50 65 72 73 69 73 74 1D 00 02 02 B0 le↨.☻☻á.D.á.D►♀IID_IPersist↔.☻☻░ 00001360 00 44 00 B0 00 44 10 12 49 49 44 5F 49 50 65 72 73 69 73 74 53 74 72 65 61 6D 17 00 02 02 C0 00 .D.░.D►↕IID_IPersistStream↨.☻☻└. 00001380 44 00 C0 00 44 10 0C 49 49 44 5F 49 4D 6F 6E 69 6B 65 72 17 00 02 02 D0 00 44 00 D0 00 44 10 0C D.└.D►♀IID_IMoniker↨.☻☻╨.D.╨.D►♀ 000013A0 49 49 44 5F 49 52 4F 54 44 61 74 61 1A 00 02 02 E0 00 44 00 E0 00 44 10 0F 49 49 44 5F 49 45 6E IID_IROTData→.☻☻α.D.α.D►☼IID_IEn 000013C0 75 6D 53 74 72 69 6E 67 16 00 02 02 F0 00 44 00 F0 00 44 10 0B 49 49 44 5F 49 53 74 72 65 61 6D umString▬.☻☻≡.D.≡.D►♂IID_IStream 000013E0 1B 00 02 02 00 01 44 00 00 01 44 10 10 49 49 44 5F 49 45 6E 75 6D 53 54 41 54 53 54 47 17 00 02 ←.☻☻.☺D..☺D►►IID_IEnumSTATSTG↨.☻ 00001400 02 10 01 44 00 10 01 44 10 0C 49 49 44 5F 49 53 74 6F 72 61 67 65 1B 00 02 02 20 01 44 00 20 01 ☻►☺D.►☺D►♀IID_IStorage←.☻☻ ☺D. ☺ 00001420 44 10 10 49 49 44 5F 49 50 65 72 73 69 73 74 46 69 6C 65 1E 00 02 02 30 01 44 00 30 01 44 10 13 D►►IID_IPersistFile▲.☻☻0☺D.0☺D►‼ 00001440 49 49 44 5F 49 50 65 72 73 69 73 74 53 74 6F 72 61 67 65 19 00 02 02 40 01 44 00 40 01 44 10 0E IID_IPersistStorage↓.☻☻@☺D.@☺D►♫ 00001460 49 49 44 5F 49 4C 6F 63 6B 42 79 74 65 73 1D 00 02 02 50 01 44 00 50 01 44 10 12 49 49 44 5F 49 IID_ILockBytes↔.☻☻P☺D.P☺D►↕IID_I 00001480 45 6E 75 6D 46 4F 52 4D 41 54 45 54 43 1C 00 02 02 60 01 44 00 60 01 44 10 11 49 49 44 5F 49 45 EnumFORMATETC∟.☻☻`☺D.`☺D►◄IID_IE 000014A0 6E 75 6D 53 54 41 54 44 41 54 41 1B 00 02 02 70 01 44 00 70 01 44 10 10 49 49 44 5F 49 52 6F 6F numSTATDATA←.☻☻p☺D.p☺D►►IID_IRoo 000014C0 74 53 74 6F 72 61 67 65 1A 00 02 02 80 01 44 00 80 01 44 10 0F 49 49 44 5F 49 41 64 76 69 73 65 tStorage→.☻☻Ç☺D.Ç☺D►☼IID_IAdvise 000014E0 53 69 6E 6B 1B 00 02 02 90 01 44 00 90 01 44 10 10 49 49 44 5F 49 41 64 76 69 73 65 53 69 6E 6B Sink←.☻☻É☺D.É☺D►►IID_IAdviseSink 00001500 32 1A 00 02 02 A0 01 44 00 A0 01 44 10 0F 49 49 44 5F 49 44 61 74 61 4F 62 6A 65 63 74 20 00 02 2→.☻☻á☺D.á☺D►☼IID_IDataObject .☻ 00001520 02 B0 01 44 00 B0 01 44 10 15 49 49 44 5F 49 44 61 74 61 41 64 76 69 73 65 48 6F 6C 64 65 72 1D ☻░☺D.░☺D►§IID_IDataAdviseHolder↔ 00001540 00 02 02 C0 01 44 00 C0 01 44 10 12 49 49 44 5F 49 4D 65 73 73 61 67 65 46 69 6C 74 65 72 20 00 .☻☻└☺D.└☺D►↕IID_IMessageFilter . 00001560 02 02 D0 01 44 00 D0 01 44 10 15 49 49 44 5F 49 52 70 63 43 68 61 6E 6E 65 6C 42 75 66 66 65 72 ☻☻╨☺D.╨☺D►§IID_IRpcChannelBuffer 00001580 1E 00 02 02 E0 01 44 00 E0 01 44 10 13 49 49 44 5F 49 52 70 63 50 72 6F 78 79 42 75 66 66 65 72 ▲.☻☻α☺D.α☺D►‼IID_IRpcProxyBuffer 000015A0 1D 00 02 02 F0 01 44 00 F0 01 44 10 12 49 49 44 5F 49 52 70 63 53 74 75 62 42 75 66 66 65 72 1F ↔.☻☻≡☺D.≡☺D►↕IID_IRpcStubBuffer▼ 000015C0 00 02 02 00 02 44 00 00 02 44 10 14 49 49 44 5F 49 50 53 46 61 63 74 6F 72 79 42 75 66 66 65 72 .☻☻.☻D..☻D►¶IID_IPSFactoryBuffer 000015E0 42 00 01 00 04 00 00 00 3B 4D 69 63 72 6F 73 6F 66 74 20 28 52 29 20 33 32 2D 62 69 74 20 43 2F B.☺.♦...;Microsoft (R) 32-bit C/ 00001600 43 2B 2B 20 4F 70 74 69 6D 69 7A 69 6E 67 20 43 6F 6D 70 69 6C 65 72 20 56 65 72 73 69 6F 6E 20 C++ Optimizing Compiler Version 00001620 39 2E 30 30 01 00 00 00 3E 00 09 00 00 00 00 00 37 44 3A 5C 6E 74 5C 70 72 69 76 61 74 65 5C 77 9.00☺...>.○.....7D:\nt\private\w 00001640 69 6E 64 6F 77 73 5C 73 68 65 6C 6C 5C 6C 69 62 72 61 72 79 5C 6F 62 6A 5C 69 33 38 36 5C 73 68 indows\shell\library\obj\i386\sh 00001660 67 75 69 64 2E 6F 62 6A 09 00 04 00 75 00 04 55 49 4E 54 1A 00 02 02 F0 02 44 00 F0 02 6A 10 0F guid.obj○.♦.u.♦UINT→.☻☻≡☻D.≡☻j►☼ 00001680 49 49 44 5F 49 53 68 65 6C 6C 4C 69 6E 6B 41 12 00 04 00 22 00 0D 52 50 43 4F 4C 45 44 41 54 41 IID_IShellLinkA↕.♦.".♪RPCOLEDATA 000016A0 52 45 50 0A 00 04 00 75 04 05 50 55 49 4E 54 1C 00 04 00 00 00 17 52 50 43 5F 46 4F 52 57 41 52 REP◙.♦.u♦♣PUINT∟.♦...↨RPC_FORWAR 000016C0 44 5F 46 55 4E 43 54 49 4F 4E 40 32 30 1E 00 04 00 2B 11 19 52 50 43 5F 41 55 54 48 5F 4B 45 59 D_FUNCTION@20▲.♦.+◄↓RPC_AUTH_KEY 000016E0 5F 52 45 54 52 49 45 56 41 4C 5F 46 4E 1E 00 02 02 00 03 44 00 00 03 6A 10 13 49 49 44 5F 49 53 _RETRIEVAL_FN▲.☻☻.♥D..♥j►‼IID_IS 00001700 68 65 6C 6C 43 6F 70 79 48 6F 6F 6B 41 15 00 04 00 2E 10 10 74 61 67 52 50 43 4F 4C 45 4D 45 53 hellCopyHookA§.♦..►►tagRPCOLEMES 00001720 53 41 47 45 0A 00 04 00 70 04 05 4C 50 53 54 52 0D 00 04 00 24 11 08 48 4F 4F 4B 50 52 4F 43 1B SAGE◙.♦.p♦♣LPSTR♪.♦.$◄◘HOOKPROC← 00001740 00 02 02 10 03 44 00 10 03 6A 10 10 49 49 44 5F 49 46 69 6C 65 56 69 65 77 65 72 41 12 00 04 00 .☻☻►♥D.►♥j►►IID_IFileViewerA↕.♦. 00001760 2E 10 0D 52 50 43 4F 4C 45 4D 45 53 53 41 47 45 0F 00 04 00 74 00 0A 49 4E 56 4F 4B 45 4B 49 4E .►♪RPCOLEMESSAGE☼.♦.t.◙INVOKEKIN 00001780 44 0C 00 04 00 21 00 07 77 63 68 61 72 5F 74 09 00 04 00 70 04 04 50 53 54 52 08 00 04 00 0C 11 D♀.♦.!.•wchar_t○.♦.p♦♦PSTR◘.♦.♀◄ 000017A0 03 53 4E 42 0B 00 04 00 21 00 06 77 69 6E 74 5F 74 1A 00 04 00 EE 10 15 52 50 43 5F 44 49 53 50 ♥SNB♂.♦.!.♠wint_t→.♦.ε►§RPC_DISP 000017C0 41 54 43 48 5F 46 55 4E 43 54 49 4F 4E 1E 00 02 02 20 03 44 00 20 03 6A 10 13 49 49 44 5F 49 43 ATCH_FUNCTION▲.☻☻ ♥D. ♥j►‼IID_IC 000017E0 6F 6D 6D 44 6C 67 42 72 6F 77 73 65 72 12 00 04 00 04 10 0D 53 45 4E 44 41 53 59 4E 43 50 52 4F ommDlgBrowser↕.♦.♦►♪SENDASYNCPRO 00001800 43 09 00 04 00 21 04 04 42 53 54 52 0B 00 04 00 70 04 06 4C 50 43 53 54 52 16 00 04 00 23 10 11 C○.♦.!♦♦BSTR♂.♦.p♦♠LPCSTR▬.♦.#►◄ 00001820 49 52 70 63 43 68 61 6E 6E 65 6C 42 75 66 66 65 72 12 00 04 00 00 11 0D 50 52 4F 50 45 4E 55 4D IRpcChannelBuffer↕.♦..◄♪PROPENUM 00001840 50 52 4F 43 41 1A 00 02 02 30 03 44 00 30 03 6A 10 0F 49 49 44 5F 49 45 6E 75 6D 49 44 4C 69 73 PROCA→.☻☻0♥D.0♥j►☼IID_IEnumIDLis 00001860 74 0D 00 04 00 21 00 08 77 63 74 79 70 65 5F 74 0A 00 04 00 09 10 05 5F 47 55 49 44 1E 00 02 02 t♪.♦.!.◘wctype_t◙.♦.○►♣_GUID▲.☻☻ 00001880 40 03 44 00 40 03 6A 10 13 49 49 44 5F 49 46 69 6C 65 56 69 65 77 65 72 53 69 74 65 0B 00 04 00 @♥D.@♥j►‼IID_IFileViewerSite♂.♦. 000018A0 0C 11 06 4C 50 42 53 54 52 12 00 04 00 03 11 0D 50 52 4F 50 45 4E 55 4D 50 52 4F 43 57 1A 00 04 ♀◄♠LPBSTR↕.♦.♥◄♪PROPENUMPROCW→.♦ 000018C0 00 24 10 15 49 52 70 63 43 68 61 6E 6E 65 6C 42 75 66 66 65 72 56 74 62 6C 0B 00 04 00 12 00 06 .$►§IRpcChannelBufferVtbl♂.♦.↕.♠ 000018E0 44 49 53 50 49 44 1C 00 04 00 74 00 17 54 4F 4B 45 4E 5F 49 4E 46 4F 52 4D 41 54 49 4F 4E 5F 43 DISPID∟.♦.t.↨TOKEN_INFORMATION_C 00001900 4C 41 53 53 1C 00 02 02 50 03 44 00 50 03 6A 10 11 49 49 44 5F 49 43 6F 6E 74 65 78 74 4D 65 6E LASS∟.☻☻P♥D.P♥j►◄IID_IContextMen 00001920 75 32 14 00 04 00 BC 10 0F 50 52 4F 50 45 4E 55 4D 50 52 4F 43 45 58 41 09 00 04 00 09 10 04 47 u2¶.♦.╝►☼PROPENUMPROCEXA○.♦.○►♦G 00001940 55 49 44 21 00 02 02 60 03 44 00 60 03 6A 10 16 49 49 44 5F 49 53 68 65 6C 6C 45 78 65 63 75 74 UID!.☻☻`♥D.`♥j►▬IID_IShellExecut 00001960 65 48 6F 6F 6B 41 0E 00 04 00 74 00 09 58 4C 41 54 5F 53 49 44 45 14 00 04 00 C2 10 0F 50 52 4F eHookA♫.♦.t.○XLAT_SIDE¶.♦.┬►☼PRO 00001980 50 45 4E 55 4D 50 52 4F 43 45 58 57 0D 00 04 00 12 00 08 4D 45 4D 42 45 52 49 44 0D 00 04 00 22 PENUMPROCEXW♪.♦.↕.◘MEMBERID♪.♦." 000019A0 00 08 48 52 45 46 54 59 50 45 19 00 04 00 00 00 14 52 50 43 5F 4F 42 4A 45 43 54 5F 49 4E 51 5F .◘HREFTYPE↓.♦...¶RPC_OBJECT_INQ_ 000019C0 46 4E 40 31 32 1F 00 04 00 1A 10 1A 5F 46 55 4C 4C 5F 50 54 52 5F 54 4F 5F 52 45 46 49 44 5F 45 FN@12▼.♦.→►→_FULL_PTR_TO_REFID_E 000019E0 4C 45 4D 45 4E 54 1D 00 02 02 70 03 44 00 70 03 6A 10 12 49 49 44 5F 49 50 72 6F 70 53 68 65 65 LEMENT↔.☻☻p♥D.p♥j►↕IID_IPropShee 00001A00 74 50 61 67 65 20 00 02 02 80 03 44 00 80 03 6A 10 15 49 49 44 5F 49 4E 65 77 53 68 6F 72 74 63 tPage .☻☻Ç♥D.Ç♥j►§IID_INewShortc 00001A20 75 74 48 6F 6F 6B 57 12 00 04 00 03 04 0D 48 4D 45 54 41 46 49 4C 45 50 49 43 54 19 00 04 00 03 utHookW↕.♦.♥♦♪HMETAFILEPICT↓.♦.♥ 00001A40 04 14 52 50 43 5F 53 53 5F 54 48 52 45 41 44 5F 48 41 4E 44 4C 45 1D 00 04 00 03 04 18 52 50 43 ♦¶RPC_SS_THREAD_HANDLE↔.♦.♥♦↑RPC 00001A60 5F 41 55 54 48 5F 49 44 45 4E 54 49 54 59 5F 48 41 4E 44 4C 45 10 00 04 00 D1 10 0B 48 49 4E 53 _AUTH_IDENTITY_HANDLE►.♦.╤►♂HINS 00001A80 54 41 4E 43 45 5F 5F 0E 00 04 00 03 04 09 53 43 5F 48 41 4E 44 4C 45 1B 00 02 02 90 03 44 00 90 TANCE__♫.♦.♥♦○SC_HANDLE←.☻☻É♥D.É 00001AA0 03 6A 10 10 49 49 44 5F 49 46 69 6C 65 56 69 65 77 65 72 57 18 00 04 00 A5 10 13 5F 46 4C 4F 41 ♥j►►IID_IFileViewerW↑.♦.Ñ►‼_FLOA 00001AC0 54 49 4E 47 5F 53 41 56 45 5F 41 52 45 41 15 00 04 00 03 04 10 52 50 43 5F 41 55 54 48 5A 5F 48 TING_SAVE_AREA§.♦.♥♦►RPC_AUTHZ_H 00001AE0 41 4E 44 4C 45 0C 00 04 00 74 00 07 56 41 52 4B 49 4E 44 1A 00 02 02 A0 03 44 00 A0 03 6A 10 0F ANDLE♀.♦.t.•VARKIND→.☻☻á♥D.á♥j►☼ 00001B00 49 49 44 5F 49 53 68 65 6C 6C 4C 69 6E 6B 57 17 00 04 00 A5 10 12 46 4C 4F 41 54 49 4E 47 5F 53 IID_IShellLinkW↨.♦.Ñ►↕FLOATING_S 00001B20 41 56 45 5F 41 52 45 41 0E 00 04 00 D7 10 09 48 49 4E 53 54 41 4E 43 45 0F 00 04 00 21 00 0A 43 AVE_AREA♫.♦.╫►○HINSTANCE☼.♦.!.◙C 00001B40 4C 49 50 46 4F 52 4D 41 54 1A 00 04 00 22 00 15 53 45 52 56 49 43 45 5F 53 54 41 54 55 53 5F 48 LIPFORMAT→.♦.".§SERVICE_STATUS_H 00001B60 41 4E 44 4C 45 17 00 04 00 00 00 12 52 50 43 5F 43 4C 49 45 4E 54 5F 41 4C 4C 4F 43 40 34 1C 00 ANDLE↨.♦...↕RPC_CLIENT_ALLOC@4∟. 00001B80 02 02 B0 03 44 00 B0 03 6A 10 11 49 49 44 5F 49 45 78 74 72 61 63 74 49 63 6F 6E 57 21 00 02 02 ☻☻░♥D.░♥j►◄IID_IExtractIconW!.☻☻ 00001BA0 C0 03 44 00 C0 03 6A 10 16 49 49 44 5F 49 53 68 65 6C 6C 45 78 65 63 75 74 65 48 6F 6F 6B 57 0B └♥D.└♥j►▬IID_IShellExecuteHookW♂ 00001BC0 00 04 00 21 04 06 4C 50 54 53 54 52 1E 00 02 02 D0 03 44 00 D0 03 6A 10 13 49 49 44 5F 49 53 68 .♦.!♦♠LPTSTR▲.☻☻╨♥D.╨♥j►‼IID_ISh 00001BE0 65 6C 6C 43 6F 70 79 48 6F 6F 6B 57 0C 00 04 00 21 04 07 4C 50 43 54 53 54 52 16 00 04 00 00 00 ellCopyHookW♀.♦.!♦•LPCTSTR▬.♦... 00001C00 11 52 50 43 5F 43 4C 49 45 4E 54 5F 46 52 45 45 40 34 0D 00 04 00 B6 10 08 50 43 4F 4E 54 45 58 ◄RPC_CLIENT_FREE@4♪.♦.╢►◘PCONTEX 00001C20 54 1C 00 02 02 E0 03 44 00 E0 03 6A 10 11 49 49 44 5F 49 42 72 69 65 66 63 61 73 65 53 74 67 09 T∟.☻☻α♥D.α♥j►◄IID_IBriefcaseStg○ 00001C40 00 04 00 20 00 04 62 79 74 65 1B 00 02 02 F0 03 44 00 F0 03 6A 10 10 49 49 44 5F 49 45 78 74 72 .♦. .♦byte←.☻☻≡♥D.≡♥j►►IID_IExtr 00001C60 61 63 74 49 63 6F 6E 19 00 02 02 00 04 44 00 00 04 6A 10 0E 49 49 44 5F 49 53 68 65 6C 6C 4C 69 actIcon↓.☻☻.♦D..♦j►♫IID_IShellLi 00001C80 6E 6B 09 00 04 00 41 00 04 44 41 54 45 13 00 04 00 7F 10 0E 74 61 67 48 41 4E 44 4C 45 54 41 42 nk○.♦.A.♦DATE‼.♦.⌂►♫tagHANDLETAB 00001CA0 4C 45 0A 00 04 00 12 04 05 50 4C 4F 4E 47 17 00 04 00 BF 10 12 45 44 49 54 57 4F 52 44 42 52 45 LE◙.♦.↕♦♣PLONG↨.♦.┐►↕EDITWORDBRE 00001CC0 41 4B 50 52 4F 43 57 15 00 04 00 9E 10 10 4C 4F 43 41 4C 45 5F 45 4E 55 4D 50 52 4F 43 41 12 00 AKPROCW§.♦.₧►►LOCALE_ENUMPROCA↕. 00001CE0 04 00 03 04 0D 52 50 43 5F 4E 53 5F 48 41 4E 44 4C 45 0C 00 04 00 21 00 07 4F 4C 45 43 48 41 52 ♦.♥♦♪RPC_NS_HANDLE♀.♦.!.•OLECHAR 00001D00 17 00 04 00 9E 10 12 43 4F 44 45 50 41 47 45 5F 45 4E 55 4D 50 52 4F 43 41 1D 00 02 02 10 04 44 ↨.♦.₧►↕CODEPAGE_ENUMPROCA↔.☻☻►♦D 00001D20 00 10 04 6A 10 12 49 49 44 5F 49 53 68 65 6C 6C 43 6F 70 79 48 6F 6F 6B 10 00 04 00 7F 10 0B 48 .►♦j►↕IID_IShellCopyHook►.♦.⌂►♂H 00001D40 41 4E 44 4C 45 54 41 42 4C 45 0B 00 04 00 03 04 06 48 41 4E 44 4C 45 16 00 04 00 9E 10 11 44 41 ANDLETABLE♂.♦.♥♦♠HANDLE▬.♦.₧►◄DA 00001D60 54 45 46 4D 54 5F 45 4E 55 4D 50 52 4F 43 41 0D 00 04 00 21 04 08 4C 50 4F 4C 45 53 54 52 11 00 TEFMT_ENUMPROCA♪.♦.!♦◘LPOLESTR◄. 00001D80 04 00 03 04 0C 4E 44 52 5F 43 43 4F 4E 54 45 58 54 0C 00 04 00 C9 10 07 50 48 41 4E 44 4C 45 16 ♦.♥♦♀NDR_CCONTEXT♀.♦.╔►•PHANDLE▬ 00001DA0 00 04 00 C9 10 11 52 50 43 5F 45 50 5F 49 4E 51 5F 48 41 4E 44 4C 45 1A 00 02 02 20 04 44 00 20 .♦.╔►◄RPC_EP_INQ_HANDLE→.☻☻ ♦D. 00001DC0 04 6A 10 0F 49 49 44 5F 49 46 69 6C 65 56 69 65 77 65 72 1A 00 04 00 7C 10 15 50 54 48 52 45 41 ♦j►☼IID_IFileViewer→.♦.|►§PTHREA 00001DE0 44 5F 53 54 41 52 54 5F 52 4F 55 54 49 4E 45 0D 00 04 00 74 00 08 54 59 50 45 4B 49 4E 44 0E 00 D_START_ROUTINE♪.♦.t.◘TYPEKIND♫. 00001E00 04 00 21 04 09 4C 50 43 4F 4C 45 53 54 52 16 00 04 00 9E 10 11 54 49 4D 45 46 4D 54 5F 45 4E 55 ♦.!♦○LPCOLESTR▬.♦.₧►◄TIMEFMT_ENU 00001E20 4D 50 52 4F 43 41 1B 00 04 00 7C 10 16 4C 50 54 48 52 45 41 44 5F 53 54 41 52 54 5F 52 4F 55 54 MPROCA←.♦.|►▬LPTHREAD_START_ROUT 00001E40 49 4E 45 16 00 04 00 9E 10 11 43 41 4C 49 4E 46 4F 5F 45 4E 55 4D 50 52 4F 43 41 0A 00 04 00 12 INE▬.♦.₧►◄CALINFO_ENUMPROCA◙.♦.↕ 00001E60 00 05 53 43 4F 44 45 11 00 04 00 DB 10 0C 4E 44 52 5F 53 43 4F 4E 54 45 58 54 12 00 04 00 C8 10 .♣SCODE◄.♦.█►♀NDR_SCONTEXT↕.♦.╚► 00001E80 0D 4E 41 4D 45 45 4E 55 4D 50 52 4F 43 41 09 00 04 00 22 00 04 4C 43 49 44 12 00 04 00 82 10 0D ♪NAMEENUMPROCA○.♦.".♦LCID↕.♦.é►♪ 00001EA0 74 61 67 4D 45 54 41 52 45 43 4F 52 44 0C 00 04 00 12 00 07 48 52 45 53 55 4C 54 11 00 04 00 11 tagMETARECORD♀.♦.↕.•HRESULT◄.♦.◄ 00001EC0 00 0C 56 41 52 49 41 4E 54 5F 42 4F 4F 4C 12 00 04 00 CD 10 0D 4E 41 4D 45 45 4E 55 4D 50 52 4F .♀VARIANT_BOOL↕.♦.═►♪NAMEENUMPRO 00001EE0 43 57 15 00 04 00 B5 10 10 4C 4F 43 41 4C 45 5F 45 4E 55 4D 50 52 4F 43 57 0E 00 04 00 91 10 09 CW§.♦.╡►►LOCALE_ENUMPROCW♫.♦.æ►○ 00001F00 41 42 4F 52 54 50 52 4F 43 10 00 04 00 03 04 0B 49 5F 52 50 43 5F 4D 55 54 45 58 18 00 04 00 9F ABORTPROC►.♦.♥♦♂I_RPC_MUTEX↑.♦.ƒ 00001F20 10 13 5F 45 58 43 45 50 54 49 4F 4E 5F 50 4F 49 4E 54 45 52 53 17 00 04 00 B5 10 12 43 4F 44 45 ►‼_EXCEPTION_POINTERS↨.♦.╡►↕CODE 00001F40 50 41 47 45 5F 45 4E 55 4D 50 52 4F 43 57 14 00 04 00 C8 10 0F 57 49 4E 53 54 41 45 4E 55 4D 50 PAGE_ENUMPROCW¶.♦.╚►☼WINSTAENUMP 00001F60 52 4F 43 41 10 00 04 00 0B 11 0B 4E 44 52 5F 52 55 4E 44 4F 57 4E 17 00 04 00 06 10 12 5F 4D 49 ROCA►.♦.♂◄♂NDR_RUNDOWN↨.♦.♠►↕_MI 00001F80 44 4C 5F 53 54 55 42 5F 4D 45 53 53 41 47 45 0B 00 04 00 21 00 06 4C 41 4E 47 49 44 15 00 04 00 DL_STUB_MESSAGE♂.♦.!.♠LANGID§.♦. 00001FA0 98 10 10 50 48 41 4E 44 4C 45 52 5F 52 4F 55 54 49 4E 45 16 00 04 00 B5 10 11 44 41 54 45 46 4D ÿ►►PHANDLER_ROUTINE▬.♦.╡►◄DATEFM 00001FC0 54 5F 45 4E 55 4D 50 52 4F 43 57 0D 00 04 00 13 00 08 4C 4F 4E 47 4C 4F 4E 47 15 00 04 00 C8 10 T_ENUMPROCW♪.♦.‼.◘LONGLONG§.♦.╚► 00001FE0 10 44 45 53 4B 54 4F 50 45 4E 55 4D 50 52 4F 43 41 14 00 04 00 4D 10 0F 5F 4D 49 44 4C 5F 53 54 ►DESKTOPENUMPROCA¶.♦.M►☼_MIDL_ST 00002000 55 42 5F 44 45 53 43 1A 00 04 00 74 00 15 41 43 4C 5F 49 4E 46 4F 52 4D 41 54 49 4F 4E 5F 43 4C UB_DESC→.♦.t.§ACL_INFORMATION_CL 00002020 41 53 53 0C 00 04 00 03 04 07 53 43 5F 4C 4F 43 4B 0E 00 04 00 23 00 09 44 57 4F 52 44 4C 4F 4E ASS♀.♦.♥♦•SC_LOCK♫.♦.#.○DWORDLON 00002040 47 14 00 04 00 CD 10 0F 57 49 4E 53 54 41 45 4E 55 4D 50 52 4F 43 57 16 00 04 00 B5 10 11 54 49 G¶.♦.═►☼WINSTAENUMPROCW▬.♦.╡►◄TI 00002060 4D 45 46 4D 54 5F 45 4E 55 4D 50 52 4F 43 57 18 00 04 00 25 11 13 50 45 58 43 45 50 54 49 4F 4E MEFMT_ENUMPROCW↑.♦.%◄‼PEXCEPTION 00002080 5F 50 4F 49 4E 54 45 52 53 08 00 04 00 09 10 03 49 49 44 1A 00 04 00 16 10 15 5F 46 55 4C 4C 5F _POINTERS◘.♦.○►♥IID→.♦.▬►§_FULL_ 000020A0 50 54 52 5F 58 4C 41 54 5F 54 41 42 4C 45 53 16 00 04 00 B5 10 11 43 41 4C 49 4E 46 4F 5F 45 4E PTR_XLAT_TABLES▬.♦.╡►◄CALINFO_EN 000020C0 55 4D 50 52 4F 43 57 15 00 04 00 CD 10 10 44 45 53 4B 54 4F 50 45 4E 55 4D 50 52 4F 43 57 0F 00 UMPROCW§.♦.═►►DESKTOPENUMPROCW☼. 000020E0 04 00 20 04 0A 52 50 43 5F 42 55 46 50 54 52 0A 00 04 00 11 11 05 4C 50 49 49 44 0A 00 04 00 09 ♦. ♦◙RPC_BUFPTR◙.♦.◄◄♣LPIID◙.♦.○ 00002100 10 05 43 4C 53 49 44 0C 00 04 00 11 11 07 4C 50 43 4C 53 49 44 0E 00 04 00 47 10 09 45 58 50 52 ►♣CLSID♀.♦.◄◄•LPCLSID♫.♦.G►○EXPR 00002120 5F 45 56 41 4C 1A 00 04 00 74 00 15 45 58 43 45 50 54 49 4F 4E 5F 44 49 53 50 4F 53 49 54 49 4F _EVAL→.♦.t.§EXCEPTION_DISPOSITIO 00002140 4E 16 00 04 00 A0 10 11 5F 45 58 43 45 50 54 49 4F 4E 5F 52 45 43 4F 52 44 13 00 04 00 20 04 0E N▬.♦.á►◄_EXCEPTION_RECORD‼.♦. ♦♫ 00002160 50 46 4F 52 4D 41 54 5F 53 54 52 49 4E 47 0A 00 04 00 74 00 05 48 46 49 4C 45 0D 00 04 00 A4 10 PFORMAT_STRING◙.♦.t.♣HFILE♪.♦.ñ► 00002180 08 5F 43 4F 4E 54 45 58 54 0F 00 04 00 41 10 0A 41 52 52 41 59 5F 49 4E 46 4F 20 00 04 00 21 00 ◘_CONTEXT☼.♦.A►◙ARRAY_INFO .♦.!. 000021A0 1B 53 45 43 55 52 49 54 59 5F 44 45 53 43 52 49 50 54 4F 52 5F 43 4F 4E 54 52 4F 4C 0D 00 04 00 ←SECURITY_DESCRIPTOR_CONTROL♪.♦. 000021C0 22 00 08 43 4F 4C 4F 52 52 45 46 15 00 04 00 1F 11 10 74 61 67 45 4E 48 4D 45 54 41 52 45 43 4F ".◘COLORREF§.♦.▼◄►tagENHMETARECO 000021E0 52 44 12 00 04 00 03 04 0D 50 41 43 43 45 53 53 5F 54 4F 4B 45 4E 21 00 04 00 21 04 1C 50 53 45 RD↕.♦.♥♦♪PACCESS_TOKEN!.♦.!♦∟PSE 00002200 43 55 52 49 54 59 5F 44 45 53 43 52 49 50 54 4F 52 5F 43 4F 4E 54 52 4F 4C 12 00 04 00 1F 11 0D CURITY_DESCRIPTOR_CONTROL↕.♦.▼◄♪ 00002220 45 4E 48 4D 45 54 41 52 45 43 4F 52 44 16 00 04 00 23 10 11 49 52 70 63 43 68 61 6E 6E 65 6C 42 ENHMETARECORD▬.♦.#►◄IRpcChannelB 00002240 75 66 66 65 72 15 00 04 00 E5 10 10 4F 4C 44 46 4F 4E 54 45 4E 55 4D 50 52 4F 43 41 19 00 04 00 uffer§.♦.σ►►OLDFONTENUMPROCA↓.♦. 00002260 03 04 14 50 53 45 43 55 52 49 54 59 5F 44 45 53 43 52 49 50 54 4F 52 09 00 04 00 03 04 04 50 53 ♥♦¶PSECURITY_DESCRIPTOR○.♦.♥♦♦PS 00002280 49 44 15 00 04 00 F5 10 10 4F 4C 44 46 4F 4E 54 45 4E 55 4D 50 52 4F 43 57 0B 00 04 00 75 00 06 ID§.♦.⌡►►OLDFONTENUMPROCW♂.♦.u.♠ 000022A0 57 50 41 52 41 4D 10 00 04 00 22 00 0B 41 43 43 45 53 53 5F 4D 41 53 4B 12 00 04 00 E5 10 0D 46 WPARAM►.♦.".♂ACCESS_MASK↕.♦.σ►♪F 000022C0 4F 4E 54 45 4E 55 4D 50 52 4F 43 41 0B 00 04 00 12 00 06 4C 50 41 52 41 4D 19 00 04 00 22 00 14 ONTENUMPROCA♂.♦.↕.♠LPARAM↓.♦.".¶ 000022E0 53 45 43 55 52 49 54 59 5F 49 4E 46 4F 52 4D 41 54 49 4F 4E 11 00 04 00 0B 11 0C 50 52 50 43 5F SECURITY_INFORMATION◄.♦.♂◄♀PRPC_ 00002300 52 55 4E 44 4F 57 4E 1A 00 04 00 22 04 15 50 53 45 43 55 52 49 54 59 5F 49 4E 46 4F 52 4D 41 54 RUNDOWN→.♦."♦§PSECURITY_INFORMAT 00002320 49 4F 4E 12 00 04 00 F5 10 0D 46 4F 4E 54 45 4E 55 4D 50 52 4F 43 57 0C 00 04 00 70 04 07 76 61 ION↕.♦.⌡►♪FONTENUMPROCW♀.♦.p♦•va 00002340 5F 6C 69 73 74 1C 00 04 00 B8 10 17 47 45 4E 45 52 49 43 5F 42 49 4E 44 49 4E 47 5F 52 4F 55 54 _list∟.♦.╕►↨GENERIC_BINDING_ROUT 00002360 49 4E 45 0C 00 04 00 12 00 07 4C 52 45 53 55 4C 54 0B 00 04 00 00 10 06 48 57 4E 44 5F 5F 0A 00 INE♀.♦.↕.•LRESULT♂.♦..►♠HWND__◙. 00002380 04 00 22 00 05 55 4C 4F 4E 47 1B 00 04 00 DE 10 16 47 45 4E 45 52 49 43 5F 55 4E 42 49 4E 44 5F ♦.".♣ULONG←.♦.▐►▬GENERIC_UNBIND_ 000023A0 52 4F 55 54 49 4E 45 10 00 04 00 E6 10 0B 74 61 67 4C 4F 47 46 4F 4E 54 41 24 00 04 00 16 11 1F ROUTINE►.♦.µ►♂tagLOGFONTA$.♦.▬◄▼ 000023C0 4C 50 4F 56 45 52 4C 41 50 50 45 44 5F 43 4F 4D 50 4C 45 54 49 4F 4E 5F 52 4F 55 54 49 4E 45 11 LPOVERLAPPED_COMPLETION_ROUTINE◄ 000023E0 00 04 00 0F 11 0C 47 4F 42 4A 45 4E 55 4D 50 52 4F 43 22 00 04 00 73 10 1D 5F 47 45 4E 45 52 49 .♦.☼◄♀GOBJENUMPROC".♦.s►↔_GENERI 00002400 43 5F 42 49 4E 44 49 4E 47 5F 52 4F 55 54 49 4E 45 5F 50 41 49 52 0E 00 04 00 FD 10 09 5F 6F 6E C_BINDING_ROUTINE_PAIR♫.♦.²►○_on 00002420 65 78 69 74 5F 74 09 00 04 00 C5 10 04 48 57 4E 44 0E 00 04 00 74 00 09 4F 4C 45 55 50 44 41 54 exit_t○.♦.┼►♦HWND♫.♦.t.○OLEUPDAT 00002440 45 0D 00 04 00 E6 10 08 4C 4F 47 46 4F 4E 54 41 0B 00 04 00 21 00 06 55 53 48 4F 52 54 10 00 04 E♪.♦.µ►◘LOGFONTA♂.♦.!.♠USHORT►.♦ 00002460 00 9B 10 0B 4C 49 4E 45 44 44 41 50 52 4F 43 0B 00 04 00 75 00 06 73 69 7A 65 5F 74 13 00 04 00 .¢►♂LINEDDAPROC♂.♦.u.♠size_t‼.♦. 00002480 E8 10 0E 74 61 67 54 45 58 54 4D 45 54 52 49 43 41 09 00 04 00 21 00 04 41 54 4F 4D 1B 00 04 00 Φ►♫tagTEXTMETRICA○.♦.!.♦ATOM←.♦. 000024A0 4F 10 16 5F 5F 47 45 4E 45 52 49 43 5F 42 49 4E 44 49 4E 47 5F 49 4E 46 4F 0F 00 04 00 87 10 0A O►▬__GENERIC_BINDING_INFO☼.♦.ç►◙ 000024C0 4D 46 45 4E 55 4D 50 52 4F 43 0A 00 04 00 20 00 05 55 43 48 41 52 0B 00 04 00 20 04 06 50 55 43 MFENUMPROC◙.♦. .♣UCHAR♂.♦. ♦♠PUC 000024E0 48 41 52 10 00 04 00 F6 10 0B 74 61 67 4C 4F 47 46 4F 4E 54 57 12 00 04 00 1E 11 0D 45 4E 48 4D HAR►.♦.÷►♂tagLOGFONTW↕.♦.▲◄♪ENHM 00002500 46 45 4E 55 4D 50 52 4F 43 1A 00 04 00 DC 10 15 50 47 45 4E 45 52 49 43 5F 42 49 4E 44 49 4E 47 FENUMPROC→.♦.▄►§PGENERIC_BINDING 00002520 5F 49 4E 46 4F 0D 00 04 00 C9 10 08 4C 50 48 41 4E 44 4C 45 1D 00 04 00 95 10 18 4C 50 53 45 52 _INFO♪.♦.╔►◘LPHANDLE↔.♦.ò►↑LPSER 00002540 56 49 43 45 5F 4D 41 49 4E 5F 46 55 4E 43 54 49 4F 4E 57 0D 00 04 00 F6 10 08 4C 4F 47 46 4F 4E VICE_MAIN_FUNCTIONW♪.♦.÷►◘LOGFON 00002560 54 57 0C 00 04 00 03 04 07 48 47 4C 4F 42 41 4C 21 00 04 00 74 00 1C 53 45 43 55 52 49 54 59 5F TW♀.♦.♥♦•HGLOBAL!.♦.t.∟SECURITY_ 00002580 49 4D 50 45 52 53 4F 4E 41 54 49 4F 4E 5F 4C 45 56 45 4C 0A 00 04 00 22 00 05 44 57 4F 52 44 0C IMPERSONATION_LEVEL◙.♦.".♣DWORD♀ 000025A0 00 04 00 74 00 07 53 59 53 4B 49 4E 44 18 00 04 00 47 10 13 58 4D 49 54 5F 48 45 4C 50 45 52 5F .♦.t.•SYSKIND↑.♦.G►‼XMIT_HELPER_ 000025C0 52 4F 55 54 49 4E 45 12 00 04 00 2F 11 0D 4C 50 54 45 58 54 4D 45 54 52 49 43 41 09 00 04 00 74 ROUTINE↕.♦./◄♪LPTEXTMETRICA○.♦.t 000025E0 00 04 42 4F 4F 4C 1C 00 04 00 74 10 17 5F 58 4D 49 54 5F 52 4F 55 54 49 4E 45 5F 51 55 49 4E 54 .♦BOOL∟.♦.t►↨_XMIT_ROUTINE_QUINT 00002600 55 50 4C 45 0A 00 04 00 03 04 05 50 56 4F 49 44 0B 00 04 00 03 04 06 48 4C 4F 43 41 4C 13 00 04 UPLE◙.♦.♥♦♣PVOID♂.♦.♥♦♠HLOCAL‼.♦ 00002620 00 F8 10 0E 74 61 67 54 45 58 54 4D 45 54 52 49 43 57 23 00 04 00 20 00 1E 53 45 43 55 52 49 54 .°►♫tagTEXTMETRICW#.♦. .▲SECURIT 00002640 59 5F 43 4F 4E 54 45 58 54 5F 54 52 41 43 4B 49 4E 47 5F 4D 4F 44 45 09 00 04 00 20 00 04 42 59 Y_CONTEXT_TRACKING_MODE○.♦. .♦BY 00002660 54 45 09 00 04 00 70 00 04 43 48 41 52 14 00 04 00 D5 10 0F 45 4E 55 4D 52 45 53 54 59 50 45 50 TE○.♦.p.♦CHAR¶.♦.╒►☼ENUMRESTYPEP 00002680 52 4F 43 1D 00 04 00 8E 10 18 4C 50 53 45 52 56 49 43 45 5F 4D 41 49 4E 5F 46 55 4E 43 54 49 4F ROC↔.♦.Ä►↑LPSERVICE_MAIN_FUNCTIO 000026A0 4E 41 09 00 04 00 21 00 04 57 4F 52 44 0A 00 04 00 11 00 05 53 48 4F 52 54 0A 00 04 00 40 00 05 NA○.♦.!.♦WORD◙.♦.◄.♣SHORT◙.♦.@.♣ 000026C0 46 4C 4F 41 54 11 00 04 00 10 11 0C 50 54 45 58 54 4D 45 54 52 49 43 57 0C 00 04 00 06 11 07 46 FLOAT◄.♦.►◄♀PTEXTMETRICW♀.♦.♠◄•F 000026E0 41 52 50 52 4F 43 18 00 04 00 5F 10 13 5F 4D 41 4C 4C 4F 43 5F 46 52 45 45 5F 53 54 52 55 43 54 ARPROC↑.♦._►‼_MALLOC_FREE_STRUCT 00002700 09 00 04 00 12 00 04 4C 4F 4E 47 0D 00 04 00 03 04 08 48 4F 4C 45 4D 45 4E 55 12 00 04 00 10 11 ○.♦.↕.♦LONG♪.♦.♥♦◘HOLEMENU↕.♦.►◄ 00002720 0D 4E 50 54 45 58 54 4D 45 54 52 49 43 57 0B 00 04 00 40 04 06 50 46 4C 4F 41 54 0A 00 04 00 21 ♪NPTEXTMETRICW♂.♦.@♦♠PFLOAT◙.♦.! 00002740 00 05 57 43 48 41 52 1E 00 04 00 D0 10 19 52 50 43 5F 4D 47 4D 54 5F 41 55 54 48 4F 52 49 5A 41 .♣WCHAR▲.♦.╨►↓RPC_MGMT_AUTHORIZA 00002760 54 49 4F 4E 5F 46 4E 0A 00 04 00 74 04 05 50 42 4F 4F 4C 12 00 04 00 10 11 0D 4C 50 54 45 58 54 TION_FN◙.♦.t♦♣PBOOL↕.♦.►◄♪LPTEXT 00002780 4D 45 54 52 49 43 57 1D 00 02 02 10 02 44 00 10 02 6A 10 12 43 4C 53 49 44 5F 53 68 65 6C 6C 44 METRICW↔.☻☻►☻D.►☻j►↕CLSID_ShellD 000027A0 65 73 6B 74 6F 70 09 00 04 00 06 11 04 50 52 4F 43 18 00 04 00 77 10 13 5F 43 4F 4D 4D 5F 46 41 esktop○.♦.♠◄♦PROC↑.♦.w►‼_COMM_FA 000027C0 55 4C 54 5F 4F 46 46 53 45 54 53 09 00 04 00 03 04 04 48 44 57 50 1A 00 02 02 20 02 44 00 20 02 ULT_OFFSETS○.♦.♥♦♦HDWP→.☻☻ ☻D. ☻ 000027E0 6A 10 0F 43 4C 53 49 44 5F 53 68 65 6C 6C 4C 69 6E 6B 0C 00 04 00 03 04 07 48 47 44 49 4F 42 4A j►☼CLSID_ShellLink♀.♦.♥♦•HGDIOBJ 00002800 14 00 04 00 09 11 0F 45 4E 55 4D 52 45 53 4E 41 4D 45 50 52 4F 43 0B 00 04 00 74 04 06 4C 50 42 ¶.♦.○◄☼ENUMRESNAMEPROC♂.♦.t♦♠LPB 00002820 4F 4F 4C 17 00 04 00 77 10 12 43 4F 4D 4D 5F 46 41 55 4C 54 5F 4F 46 46 53 45 54 53 20 00 02 02 OOL↨.♦.w►↕COMM_FAULT_OFFSETS .☻☻ 00002840 30 02 44 00 30 02 6A 10 15 49 49 44 5F 49 4E 65 77 53 68 6F 72 74 63 75 74 48 6F 6F 6B 41 11 00 0☻D.0☻j►§IID_INewShortcutHookA◄. 00002860 04 00 0B 10 0C 5F 52 50 43 5F 56 45 52 53 49 4F 4E 12 00 04 00 03 00 0D 4D 45 4E 55 54 45 4D 50 ♦.♂►♀_RPC_VERSION↕.♦.♥.♪MENUTEMP 00002880 4C 41 54 45 41 0A 00 04 00 20 04 05 50 42 59 54 45 0D 00 04 00 74 00 08 43 41 4C 4C 43 4F 4E 56 LATEA◙.♦. ♦♣PBYTE♪.♦.t.◘CALLCONV 000028A0 0B 00 04 00 20 04 06 4C 50 42 59 54 45 10 00 04 00 0B 10 0B 52 50 43 5F 56 45 52 53 49 4F 4E 12 ♂.♦. ♦♠LPBYTE►.♦.♂►♂RPC_VERSION↕ 000028C0 00 04 00 03 00 0D 4D 45 4E 55 54 45 4D 50 4C 41 54 45 57 1C 00 02 02 40 02 44 00 40 02 6A 10 11 .♦.♥.♪MENUTEMPLATEW∟.☻☻@☻D.@☻j►◄ 000028E0 49 49 44 5F 49 53 68 65 6C 6C 42 72 6F 77 73 65 72 0D 00 04 00 74 00 08 44 45 53 43 4B 49 4E 44 IID_IShellBrowser♪.♦.t.◘DESCKIND 00002900 0B 00 04 00 22 00 06 52 45 47 53 41 4D 13 00 04 00 4D 10 0E 4D 49 44 4C 5F 53 54 55 42 5F 44 45 ♂.♦.".♠REGSAM‼.♦.M►♫MIDL_STUB_DE 00002920 53 43 11 00 04 00 03 04 0C 49 5F 52 50 43 5F 48 41 4E 44 4C 45 19 00 02 02 50 02 44 00 50 02 6A SC◄.♦.♥♦♀I_RPC_HANDLE↓.☻☻P☻D.P☻j 00002940 10 0E 49 49 44 5F 49 53 68 65 6C 6C 56 69 65 77 0F 00 04 00 12 00 0A 52 50 43 5F 53 54 41 54 55 ►♫IID_IShellView☼.♦.↕.◙RPC_STATU 00002960 53 1B 00 04 00 08 10 16 5F 52 50 43 5F 53 59 4E 54 41 58 5F 49 44 45 4E 54 49 46 49 45 52 1B 00 S←.♦.◘►▬_RPC_SYNTAX_IDENTIFIER←. 00002980 02 02 60 02 44 00 60 02 6A 10 10 49 49 44 5F 49 43 6F 6E 74 65 78 74 4D 65 6E 75 0A 00 04 00 74 ☻☻`☻D.`☻j►►IID_IContextMenu◙.♦.t 000029A0 04 05 4C 50 49 4E 54 17 00 04 00 03 04 12 52 50 43 5F 42 49 4E 44 49 4E 47 5F 48 41 4E 44 4C 45 ♦♣LPINT↨.♦.♥♦↕RPC_BINDING_HANDLE 000029C0 20 00 04 00 AB 10 1B 50 54 4F 50 5F 4C 45 56 45 4C 5F 45 58 43 45 50 54 49 4F 4E 5F 46 49 4C 54 .♦.½►←PTOP_LEVEL_EXCEPTION_FILT 000029E0 45 52 0B 00 04 00 21 04 06 4C 50 57 53 54 52 14 00 04 00 03 04 0F 4C 50 4D 45 4E 55 54 45 4D 50 ER♂.♦.!♦♠LPWSTR¶.♦.♥♦☼LPMENUTEMP 00002A00 4C 41 54 45 57 19 00 02 02 70 02 44 00 70 02 6A 10 0E 49 49 44 5F 49 53 68 65 6C 6C 49 63 6F 6E LATEW↓.☻☻p☻D.p☻j►♫IID_IShellIcon 00002A20 17 00 04 00 C4 10 12 4C 50 48 41 4E 44 4C 45 52 5F 46 55 4E 43 54 49 4F 4E 0A 00 04 00 21 04 05 ↨.♦.─►↕LPHANDLER_FUNCTION◙.♦.!♦♣ 00002A40 50 57 4F 52 44 1B 00 04 00 B9 10 16 50 52 50 43 5F 53 59 4E 54 41 58 5F 49 44 45 4E 54 49 46 49 PWORD←.♦.╣►▬PRPC_SYNTAX_IDENTIFI 00002A60 45 52 0D 00 04 00 03 04 08 68 61 6E 64 6C 65 5F 74 18 00 04 00 37 11 13 50 49 4D 41 47 45 5F 54 ER♪.♦.♥♦◘handle_t↑.♦.7◄‼PIMAGE_T 00002A80 4C 53 5F 43 41 4C 4C 42 41 43 4B 0F 00 04 00 74 00 0A 54 4F 4B 45 4E 5F 54 59 50 45 0B 00 04 00 LS_CALLBACK☼.♦.t.◙TOKEN_TYPE♂.♦. 00002AA0 21 04 06 4C 50 57 4F 52 44 14 00 04 00 2E 11 0F 45 4E 55 4D 52 45 53 4C 41 4E 47 50 52 4F 43 11 !♦♠LPWORD¶.♦..◄☼ENUMRESLANGPROC◄ 00002AC0 00 04 00 07 10 0C 5F 52 50 43 5F 4D 45 53 53 41 47 45 1B 00 02 02 80 02 44 00 80 02 6A 10 10 49 .♦.•►♀_RPC_MESSAGE←.☻☻Ç☻D.Ç☻j►►I 00002AE0 49 44 5F 49 53 68 65 6C 6C 46 6F 6C 64 65 72 21 00 04 00 AB 10 1C 4C 50 54 4F 50 5F 4C 45 56 45 ID_IShellFolder!.♦.½►∟LPTOP_LEVE 00002B00 4C 5F 45 58 43 45 50 54 49 4F 4E 5F 46 49 4C 54 45 52 0A 00 04 00 7D 10 05 48 44 43 5F 5F 0C 00 L_EXCEPTION_FILTER◙.♦.}►♣HDC__♀. 00002B20 04 00 31 11 07 57 4E 44 50 52 4F 43 1C 00 02 02 90 02 44 00 90 02 6A 10 11 49 49 44 5F 49 53 68 ♦.1◄•WNDPROC∟.☻☻É☻D.É☻j►◄IID_ISh 00002B40 65 6C 6C 45 78 74 49 6E 69 74 0C 00 04 00 21 04 07 4C 50 43 57 53 54 52 0E 00 04 00 74 00 09 4F ellExtInit♀.♦.!♦•LPCWSTR♫.♦.t.○O 00002B60 4C 45 52 45 4E 44 45 52 0F 00 04 00 47 10 0A 53 54 55 42 5F 54 48 55 4E 4B 0B 00 04 00 12 04 06 LERENDER☼.♦.G►◙STUB_THUNK♂.♦.↕♦♠ 00002B80 4C 50 4C 4F 4E 47 0B 00 04 00 22 04 06 50 44 57 4F 52 44 0C 00 04 00 28 11 07 44 4C 47 50 52 4F LPLONG♂.♦."♦♠PDWORD♀.♦.(◄•DLGPRO 00002BA0 43 13 00 04 00 19 11 0E 53 45 52 56 45 52 5F 52 4F 55 54 49 4E 45 0B 00 04 00 22 00 06 4C 43 54 C‼.♦.↓◄♫SERVER_ROUTINE♂.♦.".♠LCT 00002BC0 59 50 45 08 00 04 00 EB 10 03 48 44 43 21 00 02 02 A0 02 44 00 A0 02 6A 10 16 49 49 44 5F 49 53 YPE◘.♦.δ►♥HDC!.☻☻á☻D.á☻j►▬IID_IS 00002BE0 68 65 6C 6C 50 72 6F 70 53 68 65 65 74 45 78 74 11 00 04 00 CA 10 0C 50 52 50 43 5F 4D 45 53 53 hellPropSheetExt◄.♦.╩►♀PRPC_MESS 00002C00 41 47 45 0C 00 04 00 22 04 07 4C 50 44 57 4F 52 44 1D 00 02 02 B0 02 44 00 B0 02 6A 10 12 49 49 AGE♀.♦."♦•LPDWORD↔.☻☻░☻D.░☻j►↕II 00002C20 44 5F 49 50 65 72 73 69 73 74 46 6F 6C 64 65 72 0E 00 04 00 DA 10 09 54 49 4D 45 52 50 52 4F 43 D_IPersistFolder♫.♦.┌►○TIMERPROC 00002C40 0C 00 04 00 22 00 07 43 41 4C 54 59 50 45 0C 00 04 00 20 00 07 42 4F 4F 4C 45 41 4E 0D 00 04 00 ♀.♦.".•CALTYPE♀.♦. .•BOOLEAN♪.♦. 00002C60 74 00 08 46 55 4E 43 4B 49 4E 44 12 00 04 00 74 04 0D 50 53 49 44 5F 4E 41 4D 45 5F 55 53 45 0B t.◘FUNCKIND↕.♦.t♦♪PSID_NAME_USE♂ 00002C80 00 04 00 03 04 06 4C 50 56 4F 49 44 0A 00 04 00 22 00 05 43 41 4C 49 44 13 00 04 00 B2 10 0E 47 .♦.♥♦♠LPVOID◙.♦.".♣CALID‼.♦.▓►♫G 00002CA0 52 41 59 53 54 52 49 4E 47 50 52 4F 43 1C 00 02 02 C0 02 44 00 C0 02 6A 10 11 49 49 44 5F 49 45 RAYSTRINGPROC∟.☻☻└☻D.└☻j►◄IID_IE 00002CC0 78 74 72 61 63 74 49 63 6F 6E 41 10 00 04 00 34 11 0B 57 4E 44 45 4E 55 4D 50 52 4F 43 12 00 04 xtractIconA►.♦.4◄♂WNDENUMPROC↕.♦ 00002CE0 00 03 04 0D 52 50 43 5F 49 46 5F 48 41 4E 44 4C 45 0C 00 04 00 03 04 07 4C 50 43 56 4F 49 44 1C .♥♦♪RPC_IF_HANDLE♀.♦.♥♦•LPCVOID∟ 00002D00 00 02 02 D0 02 44 00 D0 02 6A 10 11 49 49 44 5F 49 53 68 65 6C 6C 44 65 74 61 69 6C 73 10 00 04 .☻☻╨☻D.╨☻j►◄IID_IShellDetails►.♦ 00002D20 00 12 11 0B 5F 4F 56 45 52 4C 41 50 50 45 44 1E 00 02 02 E0 02 44 00 E0 02 6A 10 13 49 49 44 5F .↕◄♂_OVERLAPPED▲.☻☻α☻D.α☻j►‼IID_ 00002D40 49 44 65 6C 61 79 65 64 52 65 6C 65 61 73 65 0C 00 04 00 21 00 07 56 41 52 54 59 50 45 08 00 04 IDelayedRelease♀.♦.!.•VARTYPE◘.♦ 00002D60 00 74 00 03 49 4E 54 42 00 01 00 04 00 00 00 3B 4D 69 63 72 6F 73 6F 66 74 20 28 52 29 20 33 32 .t.♥INTB.☺.♦...;Microsoft (R) 32 00002D80 2D 62 69 74 20 43 2F 43 2B 2B 20 4F 70 74 69 6D 69 7A 69 6E 67 20 43 6F 6D 70 69 6C 65 72 20 56 -bit C/C++ Optimizing Compiler V 00002DA0 65 72 73 69 6F 6E 20 39 2E 30 30 01 00 00 00 10 00 09 00 00 00 00 00 09 6F 6C 65 33 32 2E 64 6C ersion 9.00☺...►.○.....○ole32.dl 00002DC0 6C 24 00 01 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 l$.☺.♥•.◘↔Microsoft LINK 2.60.51 00002DE0 31 32 20 28 4E 54 29 01 00 00 00 10 00 09 00 00 00 00 00 09 6F 6C 65 33 32 2E 64 6C 6C 24 00 01 12 (NT)☺...►.○.....○ole32.dll$.☺ 00002E00 00 03 07 00 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 .♥•.◘↔Microsoft LINK 2.60.5112 ( 00002E20 4E 54 29 01 00 00 00 10 00 09 00 00 00 00 00 09 6F 6C 65 33 32 2E 64 6C 6C 24 00 01 00 03 07 00 NT)☺...►.○.....○ole32.dll$.☺.♥•. 00002E40 08 1D 4D 69 63 72 6F 73 6F 66 74 20 4C 49 4E 4B 20 32 2E 36 30 2E 35 31 31 32 20 28 4E 54 29 28 ◘↔Microsoft LINK 2.60.5112 (NT)( 00002E60 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 6C 03 41 00 6C 03 47 00 00 10 43 6F 43 72 65 61 74 .♠☻............l♥A.l♥G..►CoCreat 00002E80 65 49 6E 73 74 61 6E 63 65 02 00 06 00 24 00 06 02 00 00 00 00 00 00 00 00 00 00 00 00 72 03 41 eInstance☻.♠.$.♠☻............r♥A 00002EA0 00 72 03 47 00 00 0C 43 6F 49 6E 69 74 69 61 6C 69 7A 65 02 00 06 00 26 00 06 02 00 00 00 00 00 .r♥G..♀CoInitialize☻.♠.&.♠☻..... 00002EC0 00 00 00 00 00 00 00 78 03 41 00 78 03 47 00 00 0E 43 6F 55 6E 69 6E 69 74 69 61 6C 69 7A 65 02 .......x♥A.x♥G..♫CoUninitialize☻ 00002EE0 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .♠.............................. 00002F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00002FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................