============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 AC 10 01 00 00 00 00 00 00 00 00 00 B2 17 01 00 70 12 01 00 78 10 01 00 00 00 00 00 00 00 00 00 ¼►☺.........▓↨☺.p↕☺.x►☺......... 00000020 8A 18 01 00 3C 12 01 00 84 11 01 00 00 00 00 00 00 00 00 00 3C 1B 01 00 48 13 01 00 24 12 01 00 è↑☺.<↕☺.ä◄☺.........<←☺.H‼☺.$↕☺. 00000040 00 00 00 00 00 00 00 00 98 1B 01 00 E8 13 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ÿ←☺.Φ‼☺................. 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 DE 17 01 00 EC 17 01 00 ........................▐↨☺.∞↨☺. 00000080 78 18 01 00 68 18 01 00 44 18 01 00 34 18 01 00 56 18 01 00 14 18 01 00 00 18 01 00 26 18 01 00 x↑☺.h↑☺.D↑☺.4↑☺.V↑☺.¶↑☺..↑☺.&↑☺. 000000A0 CE 17 01 00 C0 17 01 00 00 00 00 00 08 15 01 00 1A 15 01 00 EC 14 01 00 4A 15 01 00 66 15 01 00 ╬↨☺.└↨☺.....◘§☺.→§☺.∞¶☺.J§☺.f§☺. 000000C0 78 15 01 00 90 15 01 00 FA 14 01 00 2E 15 01 00 9C 15 01 00 BE 15 01 00 CC 15 01 00 E2 15 01 00 x§☺.ɧ☺.·¶☺..§☺.£§☺.╛§☺.╠§☺.Γ§☺. 000000E0 F2 15 01 00 02 16 01 00 12 16 01 00 22 16 01 00 38 16 01 00 44 16 01 00 A8 15 01 00 50 16 01 00 ≥§☺.☻▬☺.↕▬☺."▬☺.8▬☺.D▬☺.¿§☺.P▬☺. 00000100 DC 14 01 00 7A 16 01 00 8A 16 01 00 9A 16 01 00 AA 16 01 00 BC 16 01 00 D2 16 01 00 E4 16 01 00 ▄¶☺.z▬☺.è▬☺.Ü▬☺.¬▬☺.╝▬☺.╥▬☺.Σ▬☺. 00000120 F8 16 01 00 08 17 01 00 14 17 01 00 26 17 01 00 36 17 01 00 4C 17 01 00 5C 17 01 00 72 17 01 00 °▬☺.◘↨☺.¶↨☺.&↨☺.6↨☺.L↨☺.\↨☺.r↨☺. 00000140 82 17 01 00 98 17 01 00 A8 17 01 00 B8 14 01 00 C8 14 01 00 00 14 01 00 30 14 01 00 86 14 01 00 é↨☺.ÿ↨☺.¿↨☺.╕¶☺.╚¶☺..¶☺.0¶☺.å¶☺. 00000160 AA 14 01 00 A2 14 01 00 48 14 01 00 70 14 01 00 60 14 01 00 5E 16 01 00 6E 16 01 00 18 14 01 00 ¬¶☺.ó¶☺.H¶☺.p¶☺.`¶☺.^▬☺.n▬☺.↑¶☺. 00000180 00 00 00 00 34 1A 01 00 B2 18 01 00 C8 18 01 00 DA 18 01 00 F6 18 01 00 0C 19 01 00 20 19 01 00 ....4→☺.▓↑☺.╚↑☺.┌↑☺.÷↑☺.♀↓☺. ↓☺. 000001A0 32 19 01 00 42 19 01 00 52 19 01 00 62 19 01 00 70 19 01 00 7E 19 01 00 92 19 01 00 A0 19 01 00 2↓☺.B↓☺.R↓☺.b↓☺.p↓☺.~↓☺.Æ↓☺.á↓☺. 000001C0 B0 19 01 00 C4 19 01 00 D4 19 01 00 E2 19 01 00 F6 19 01 00 08 1A 01 00 1A 1A 01 00 26 1A 01 00 ░↓☺.─↓☺.╘↓☺.Γ↓☺.÷↓☺.◘→☺.→→☺.&→☺. 000001E0 98 18 01 00 40 1A 01 00 4C 1A 01 00 64 1A 01 00 74 1A 01 00 86 1A 01 00 96 1A 01 00 A8 1A 01 00 ÿ↑☺.@→☺.L→☺.d→☺.t→☺.å→☺.û→☺.¿→☺. 00000200 B6 1A 01 00 C4 1A 01 00 D6 1A 01 00 EC 1A 01 00 FE 1A 01 00 10 1B 01 00 1C 1B 01 00 2A 1B 01 00 ╢→☺.─→☺.╓→☺.∞→☺.■→☺.►←☺.∟←☺.*←☺. 00000220 00 00 00 00 54 1B 01 00 66 1B 01 00 76 1B 01 00 84 1B 01 00 48 1B 01 00 00 00 00 00 DE 17 01 00 ....T←☺.f←☺.v←☺.ä←☺.H←☺.....▐↨☺. 00000240 EC 17 01 00 78 18 01 00 68 18 01 00 44 18 01 00 34 18 01 00 56 18 01 00 14 18 01 00 00 18 01 00 ∞↨☺.x↑☺.h↑☺.D↑☺.4↑☺.V↑☺.¶↑☺..↑☺. 00000260 26 18 01 00 CE 17 01 00 C0 17 01 00 00 00 00 00 08 15 01 00 1A 15 01 00 EC 14 01 00 4A 15 01 00 &↑☺.╬↨☺.└↨☺.....◘§☺.→§☺.∞¶☺.J§☺. 00000280 66 15 01 00 78 15 01 00 90 15 01 00 FA 14 01 00 2E 15 01 00 9C 15 01 00 BE 15 01 00 CC 15 01 00 f§☺.x§☺.ɧ☺.·¶☺..§☺.£§☺.╛§☺.╠§☺. 000002A0 E2 15 01 00 F2 15 01 00 02 16 01 00 12 16 01 00 22 16 01 00 38 16 01 00 44 16 01 00 A8 15 01 00 Γ§☺.≥§☺.☻▬☺.↕▬☺."▬☺.8▬☺.D▬☺.¿§☺. 000002C0 50 16 01 00 DC 14 01 00 7A 16 01 00 8A 16 01 00 9A 16 01 00 AA 16 01 00 BC 16 01 00 D2 16 01 00 P▬☺.▄¶☺.z▬☺.è▬☺.Ü▬☺.¬▬☺.╝▬☺.╥▬☺. 000002E0 E4 16 01 00 F8 16 01 00 08 17 01 00 14 17 01 00 26 17 01 00 36 17 01 00 4C 17 01 00 5C 17 01 00 Σ▬☺.°▬☺.◘↨☺.¶↨☺.&↨☺.6↨☺.L↨☺.\↨☺. 00000300 72 17 01 00 82 17 01 00 98 17 01 00 A8 17 01 00 B8 14 01 00 C8 14 01 00 00 14 01 00 30 14 01 00 r↨☺.é↨☺.ÿ↨☺.¿↨☺.╕¶☺.╚¶☺..¶☺.0¶☺. 00000320 86 14 01 00 AA 14 01 00 A2 14 01 00 48 14 01 00 70 14 01 00 60 14 01 00 5E 16 01 00 6E 16 01 00 å¶☺.¬¶☺.ó¶☺.H¶☺.p¶☺.`¶☺.^▬☺.n▬☺. 00000340 18 14 01 00 00 00 00 00 34 1A 01 00 B2 18 01 00 C8 18 01 00 DA 18 01 00 F6 18 01 00 0C 19 01 00 ↑¶☺.....4→☺.▓↑☺.╚↑☺.┌↑☺.÷↑☺.♀↓☺. 00000360 20 19 01 00 32 19 01 00 42 19 01 00 52 19 01 00 62 19 01 00 70 19 01 00 7E 19 01 00 92 19 01 00 ↓☺.2↓☺.B↓☺.R↓☺.b↓☺.p↓☺.~↓☺.Æ↓☺. 00000380 A0 19 01 00 B0 19 01 00 C4 19 01 00 D4 19 01 00 E2 19 01 00 F6 19 01 00 08 1A 01 00 1A 1A 01 00 á↓☺.░↓☺.─↓☺.╘↓☺.Γ↓☺.÷↓☺.◘→☺.→→☺. 000003A0 26 1A 01 00 98 18 01 00 40 1A 01 00 4C 1A 01 00 64 1A 01 00 74 1A 01 00 86 1A 01 00 96 1A 01 00 &→☺.ÿ↑☺.@→☺.L→☺.d→☺.t→☺.å→☺.û→☺. 000003C0 A8 1A 01 00 B6 1A 01 00 C4 1A 01 00 D6 1A 01 00 EC 1A 01 00 FE 1A 01 00 10 1B 01 00 1C 1B 01 00 ¿→☺.╢→☺.─→☺.╓→☺.∞→☺.■→☺.►←☺.∟←☺. 000003E0 2A 1B 01 00 00 00 00 00 54 1B 01 00 66 1B 01 00 76 1B 01 00 84 1B 01 00 48 1B 01 00 00 00 00 00 *←☺.....T←☺.f←☺.v←☺.ä←☺.H←☺..... 00000400 65 00 45 6E 74 65 72 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 A2 01 4C 65 61 76 65 43 e.EnterCriticalSection..ó☺LeaveC 00000420 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 8C 01 49 6E 74 65 72 6C 6F 63 6B 65 64 49 6E 63 riticalSection..î☺InterlockedInc 00000440 72 65 6D 65 6E 74 00 00 89 01 49 6E 74 65 72 6C 6F 63 6B 65 64 44 65 63 72 65 6D 65 6E 74 00 00 rement..ë☺InterlockedDecrement.. 00000460 A3 01 4C 6F 61 64 4C 69 62 72 61 72 79 41 00 00 0B 01 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E ú☺LoadLibraryA..♂☺GetModuleFileN 00000480 61 6D 65 41 00 00 B6 00 46 72 65 65 4C 69 62 72 61 72 79 41 6E 64 45 78 69 74 54 68 72 65 61 64 ameA..╢.FreeLibraryAndExitThread 000004A0 00 00 64 02 53 6C 65 65 70 00 26 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 05 02 52 65 73 75 6D 65 ..d☻Sleep.&.CloseHandle.♣☻Resume 000004C0 54 68 72 65 61 64 00 00 5B 02 53 65 74 54 68 72 65 61 64 50 72 69 6F 72 69 74 79 00 51 00 43 72 Thread..[☻SetThreadPriority.Q.Cr 000004E0 65 61 74 65 54 68 72 65 61 64 00 00 B5 00 46 72 65 65 4C 69 62 72 61 72 79 00 3D 00 43 72 65 61 eateThread..╡.FreeLibrary.=.Crea 00000500 74 65 46 69 6C 65 41 00 23 01 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 0D 01 47 65 74 4D teFileA.#☺GetProcAddress..♪☺GetM 00000520 6F 64 75 6C 65 48 61 6E 64 6C 65 41 00 00 87 01 49 6E 69 74 69 61 6C 69 7A 65 43 72 69 74 69 63 oduleHandleA..ç☺InitializeCritic 00000540 61 6C 53 65 63 74 69 6F 6E 00 5F 00 44 69 73 61 62 6C 65 54 68 72 65 61 64 4C 69 62 72 61 72 79 alSection._.DisableThreadLibrary 00000560 43 61 6C 6C 73 00 80 02 55 6E 6D 61 70 56 69 65 77 4F 66 46 69 6C 65 00 5A 00 44 65 6C 65 74 65 Calls.Ç☻UnmapViewOfFile.Z.Delete 00000580 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 AD 01 4C 6F 63 61 6C 46 72 65 65 00 3E 02 53 65 CriticalSection.¡☺LocalFree.>☻Se 000005A0 74 45 76 65 6E 74 00 00 8A 01 49 6E 74 65 72 6C 6F 63 6B 65 64 45 78 63 68 61 6E 67 65 00 03 02 tEvent..è☺InterlockedExchange.♥☻ 000005C0 52 65 73 65 74 45 76 65 6E 74 00 00 DB 00 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73 73 49 ResetEvent..█.GetCurrentProcessI 000005E0 64 00 91 01 49 73 42 61 64 52 65 61 64 50 74 72 00 00 94 01 49 73 42 61 64 57 72 69 74 65 50 74 d.æ☺IsBadReadPtr..ö☺IsBadWritePt 00000600 72 00 09 02 52 74 6C 5A 65 72 6F 4D 65 6D 6F 72 79 00 07 02 52 74 6C 4D 6F 76 65 4D 65 6D 6F 72 r.○☻RtlZeroMemory.•☻RtlMoveMemor 00000620 79 00 CA 01 4D 75 6C 74 69 42 79 74 65 54 6F 57 69 64 65 43 68 61 72 00 BA 02 6C 73 74 72 63 61 y.╩☺MultiByteToWideChar.║☻lstrca 00000640 74 41 00 00 C0 02 6C 73 74 72 63 6D 70 69 41 00 A9 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 B0 01 tA..└☻lstrcmpiA.⌐☺LocalAlloc..░☺ 00000660 4C 6F 63 61 6C 52 65 41 6C 6C 6F 63 00 00 C9 02 6C 73 74 72 6C 65 6E 41 00 00 A8 01 4C 6F 61 64 LocalReAlloc..╔☻lstrlenA..¿☺Load 00000680 52 65 73 6F 75 72 63 65 00 00 A5 00 46 69 6E 64 52 65 73 6F 75 72 63 65 41 00 01 01 47 65 74 4C Resource..Ñ.FindResourceA.☺☺GetL 000006A0 61 73 74 45 72 72 6F 72 00 00 4A 00 43 72 65 61 74 65 50 72 6F 63 65 73 73 41 00 00 95 02 57 69 astError..J.CreateProcessA..ò☻Wi 000006C0 64 65 43 68 61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 62 00 44 75 70 6C 69 63 61 74 65 48 61 6E deCharToMultiByte.b.DuplicateHan 000006E0 64 6C 65 00 DA 00 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73 73 00 8E 01 49 73 42 61 64 43 dle.┌.GetCurrentProcess.Ä☺IsBadC 00000700 6F 64 65 50 74 72 00 00 CA 02 6C 73 74 72 6C 65 6E 57 00 00 5E 00 44 65 76 69 63 65 49 6F 43 6F odePtr..╩☻lstrlenW..^.DeviceIoCo 00000720 6E 74 72 6F 6C 00 54 01 47 65 74 54 69 63 6B 43 6F 75 6E 74 00 00 DD 00 47 65 74 43 75 72 72 65 ntrol.T☺GetTickCount..▌.GetCurre 00000740 6E 74 54 68 72 65 61 64 49 64 00 00 FD 01 52 65 6C 65 61 73 65 4D 75 74 65 78 00 00 91 02 57 61 ntThreadId..²☺ReleaseMutex..æ☻Wa 00000760 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 C1 01 4D 61 70 56 69 65 77 4F 66 46 69 6C itForSingleObject.┴☺MapViewOfFil 00000780 65 00 3E 00 43 72 65 61 74 65 46 69 6C 65 4D 61 70 70 69 6E 67 41 00 00 45 00 43 72 65 61 74 65 e.>.CreateFileMappingA..E.Create 000007A0 4D 75 74 65 78 41 00 00 C9 01 4D 75 6C 44 69 76 00 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 MutexA..╔☺MulDiv..KERNEL32.dll.. 000007C0 7E 00 52 65 67 43 6C 6F 73 65 4B 65 79 00 95 00 52 65 67 4F 70 65 6E 4B 65 79 45 78 41 00 89 00 ~.RegCloseKey.ò.RegOpenKeyExA.ë. 000007E0 52 65 67 45 6E 75 6D 4B 65 79 41 00 98 00 52 65 67 51 75 65 72 79 49 6E 66 6F 4B 65 79 41 00 00 RegEnumKeyA.ÿ.RegQueryInfoKeyA.. 00000800 9D 00 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 9C 00 52 65 67 51 75 65 72 79 56 61 ¥.RegQueryValueExA..£.RegQueryVa 00000820 6C 75 65 41 00 00 94 00 52 65 67 4F 70 65 6E 4B 65 79 41 00 81 00 52 65 67 43 72 65 61 74 65 4B lueA..ö.RegOpenKeyA.ü.RegCreateK 00000840 65 79 41 00 A9 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 41 00 00 87 00 52 65 67 44 65 6C 65 74 eyA.⌐.RegSetValueExA..ç.RegDelet 00000860 65 56 61 6C 75 65 41 00 85 00 52 65 67 44 65 6C 65 74 65 4B 65 79 41 00 82 00 52 65 67 43 72 65 eValueA.à.RegDeleteKeyA.é.RegCre 00000880 61 74 65 4B 65 79 45 78 41 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 D8 01 52 65 67 69 73 74 ateKeyExA.ADVAPI32.dll..╪☺Regist 000008A0 65 72 57 69 6E 64 6F 77 4D 65 73 73 61 67 65 41 00 00 50 02 55 6E 68 6F 6F 6B 57 69 6E 64 6F 77 erWindowMessageA..P☻UnhookWindow 000008C0 73 48 6F 6F 6B 45 78 00 14 00 43 61 6C 6C 4E 65 78 74 48 6F 6F 6B 45 78 00 00 54 01 47 65 74 57 sHookEx.¶.CallNextHookEx..T☺GetW 000008E0 69 6E 64 6F 77 54 68 72 65 61 64 50 72 6F 63 65 73 73 49 64 00 00 FF 00 47 65 74 46 6F 72 65 67 indowThreadProcessId.. .GetForeg 00000900 72 6F 75 6E 64 57 69 6E 64 6F 77 00 2F 02 53 65 74 57 69 6E 64 6F 77 73 48 6F 6F 6B 45 78 41 00 roundWindow./☻SetWindowsHookExA. 00000920 49 01 47 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 41 00 00 FA 01 53 65 74 43 75 72 73 6F 72 50 6F 73 I☺GetWindowLongA..·☺SetCursorPos 00000940 00 00 4E 01 47 65 74 57 69 6E 64 6F 77 52 65 63 74 00 F3 00 47 65 74 43 75 72 73 6F 72 50 6F 73 ..N☺GetWindowRect.≤.GetCursorPos 00000960 00 00 33 02 53 68 6F 77 43 75 72 73 6F 72 00 00 6D 02 6D 6F 75 73 65 5F 65 76 65 6E 74 00 DB 00 ..3☻ShowCursor..m☻mouse_event.█. 00000980 47 65 74 41 73 79 6E 63 4B 65 79 53 74 61 74 65 00 00 7B 01 49 73 52 65 63 74 45 6D 70 74 79 00 GetAsyncKeyState..{☺IsRectEmpty. 000009A0 38 02 53 75 62 74 72 61 63 74 52 65 63 74 00 00 F6 00 47 65 74 44 65 73 6B 74 6F 70 57 69 6E 64 8☻SubtractRect..÷.GetDesktopWind 000009C0 6F 77 00 00 E8 01 53 65 6E 64 4D 65 73 73 61 67 65 41 00 00 D1 00 46 69 6E 64 57 69 6E 64 6F 77 ow..Φ☺SendMessageA..╤.FindWindow 000009E0 41 00 3A 01 47 65 74 53 79 73 74 65 6D 4D 65 74 72 69 63 73 00 00 9B 01 4D 61 70 56 69 72 74 75 A.:☺GetSystemMetrics..¢☺MapVirtu 00000A00 61 6C 4B 65 79 41 00 00 0E 01 47 65 74 4B 65 79 62 6F 61 72 64 54 79 70 65 00 6E 02 77 73 70 72 alKeyA..♫☺GetKeyboardType.n☻wspr 00000A20 69 6E 74 66 41 00 94 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 2E 01 47 65 74 50 72 6F 70 41 00 00 intfA.ö☺LoadStringA..☺GetPropA.. 00000A40 7C 01 49 73 57 69 6E 64 6F 77 00 00 3D 02 53 79 73 74 65 6D 50 61 72 61 6D 65 74 65 72 73 49 6E |☺IsWindow..=☻SystemParametersIn 00000A60 66 6F 41 00 66 01 49 6E 74 65 72 73 65 63 74 52 65 63 74 00 9F 01 4D 61 70 57 69 6E 64 6F 77 50 foA.f☺IntersectRect.ƒ☺MapWindowP 00000A80 6F 69 6E 74 73 00 E8 00 47 65 74 43 6C 69 65 6E 74 52 65 63 74 00 DA 01 52 65 6C 65 61 73 65 43 oints.Φ.GetClientRect.┌☺ReleaseC 00000AA0 61 70 74 75 72 65 00 00 3C 00 43 6C 69 70 43 75 72 73 6F 72 00 00 F1 01 53 65 74 43 61 70 74 75 apture..<.ClipCursor..±☺SetCaptu 00000AC0 72 65 00 00 22 01 47 65 74 4D 65 73 73 61 67 65 54 69 6D 65 00 00 EE 01 53 65 6E 64 4E 6F 74 69 re.."☺GetMessageTime..ε☺SendNoti 00000AE0 66 79 4D 65 73 73 61 67 65 41 00 00 26 02 53 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 41 00 00 83 00 fyMessageA..&☻SetWindowLongA..â. 00000B00 44 65 66 57 69 6E 64 6F 77 50 72 6F 63 41 00 00 13 02 53 65 74 50 72 6F 70 41 00 00 DD 01 52 65 DefWindowProcA..‼☻SetPropA..▌☺Re 00000B20 6D 6F 76 65 50 72 6F 70 41 00 15 00 43 61 6C 6C 57 69 6E 64 6F 77 50 72 6F 63 41 00 55 53 45 52 movePropA.§.CallWindowProcA.USER 00000B40 33 32 2E 64 6C 6C 00 00 1B 00 6A 6F 79 47 65 74 50 6F 73 00 18 00 6A 6F 79 47 65 74 44 65 76 43 32.dll..←.joyGetPos.↑.joyGetDevC 00000B60 61 70 73 41 00 00 1A 00 6A 6F 79 47 65 74 4E 75 6D 44 65 76 73 00 1C 00 6A 6F 79 47 65 74 50 6F apsA..→.joyGetNumDevs.∟.joyGetPo 00000B80 73 45 78 00 17 00 6A 6F 79 43 6F 6E 66 69 67 43 68 61 6E 67 65 64 00 00 57 49 4E 4D 4D 2E 64 6C sEx.↨.joyConfigChanged..WINMM.dl 00000BA0 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 l............................... 00000BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................