============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 50 25 00 00 12 25 00 00 EC 24 00 00 3A 25 00 00 28 25 00 00 02 25 00 00 00 00 00 00 94 26 00 00 P%..↕%..∞$..:%..(%..☻%......ö&.. 00000020 00 00 00 00 C2 25 00 00 16 26 00 00 24 26 00 00 74 26 00 00 54 26 00 00 4A 26 00 00 60 26 00 00 ....┬%..▬&..$&..t&..T&..J&..`&.. 00000040 FC 25 00 00 E8 25 00 00 DC 25 00 00 CE 25 00 00 AE 25 00 00 9E 25 00 00 90 25 00 00 6E 25 00 00 ⁿ%..Φ%..▄%..╬%..«%..₧%..É%..n%.. 00000060 34 26 00 00 7C 25 00 00 00 00 00 00 22 24 00 00 04 24 00 00 0E 24 00 00 18 24 00 00 DE 24 00 00 4&..|%......"$..♦$..♫$..↑$..▐$.. 00000080 BE 24 00 00 AC 24 00 00 7E 24 00 00 F8 23 00 00 9E 24 00 00 2A 24 00 00 40 24 00 00 8E 24 00 00 ╛$..¼$..~$..°#..₧$..*$..@$..Ä$.. 000000A0 4E 24 00 00 6A 24 00 00 5A 24 00 00 38 24 00 00 00 00 00 00 01 02 00 80 00 02 00 80 FF 01 00 80 N$..j$..Z$..8$......☺☻.Ç.☻.Ç ☺.Ç 000000C0 F7 01 00 80 00 00 00 00 B0 26 00 00 BE 26 00 00 CC 26 00 00 E0 26 00 00 F4 26 00 00 06 27 00 00 ≈☺.Ç....░&..╛&..╠&..α&..⌠&..♠'.. 000000E0 14 27 00 00 26 27 00 00 40 27 00 00 50 27 00 00 60 27 00 00 70 27 00 00 84 27 00 00 94 27 00 00 ¶'..&'..@'..P'..`'..p'..ä'..ö'.. 00000100 AA 27 00 00 C6 27 00 00 D4 27 00 00 E6 27 00 00 FC 27 00 00 0E 28 00 00 00 00 00 00 00 00 00 00 ¬'..╞'..╘'..µ'..ⁿ'..♫(.......... 00000120 00 00 00 00 F0 EF 36 33 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 00 36 00 00 00 00 00 00 ....≡∩63....♦...►☺.......6...... 00000140 F0 EF 36 33 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 D8 5E 00 00 00 00 00 00 F0 EF 36 33 ≡∩63....♦...►☺......╪^......≡∩63 00000160 00 00 00 00 03 00 00 00 00 01 00 00 00 00 00 00 E8 5F 00 00 00 00 00 00 F0 EF 36 33 00 00 00 00 ....♥....☺......Φ_......≡∩63.... 00000180 06 00 00 00 00 00 00 00 00 00 00 00 E8 60 00 00 00 00 00 00 F0 EF 36 33 00 00 00 00 02 00 00 00 ♠...........Φ`......≡∩63....☻... 000001A0 98 39 00 00 00 00 00 00 C0 F5 B6 FF 00 00 00 00 5C 5C 00 00 4E 44 44 45 41 67 65 6E 74 00 00 00 ÿ9......└⌡╢ ....\\..NDDEAgent... 000001C0 4E 44 44 45 41 67 6E 74 00 00 00 00 43 6C 69 70 53 72 76 00 64 00 65 00 66 00 61 00 75 00 6C 00 NDDEAgnt....ClipSrv.d.e.f.a.u.l. 000001E0 74 00 00 00 57 00 69 00 6E 00 53 00 74 00 61 00 30 00 00 00 5C 00 5C 00 2E 00 5C 00 70 00 69 00 t...W.i.n.S.t.a.0...\.\...\.p.i. 00000200 70 00 65 00 5C 00 4E 00 65 00 74 00 44 00 44 00 45 00 00 00 4E 44 44 45 24 00 00 00 4E 65 74 44 p.e.\.N.e.t.D.D.E...NDDE$...NetD 00000220 44 45 4D 61 69 6E 57 64 77 00 00 00 4E 65 74 44 44 45 00 00 00 00 00 00 FF FF FF FF 50 1D A9 01 DEMainWdw...NetDDE...... P↔⌐☺ 00000240 6B 1D A9 01 84 23 00 00 00 00 00 00 00 00 00 00 EC 23 00 00 B4 20 00 00 3C 23 00 00 00 00 00 00 k↔⌐☺ä#..........∞#..┤ ..<#...... 00000260 00 00 00 00 D2 24 00 00 6C 20 00 00 D0 22 00 00 00 00 00 00 00 00 00 00 60 25 00 00 00 20 00 00 ....╥$..l ..╨"..........`%... .. 00000280 F4 22 00 00 00 00 00 00 00 00 00 00 86 26 00 00 24 20 00 00 EC 22 00 00 00 00 00 00 00 00 00 00 ⌠"..........å&..$ ..∞".......... 000002A0 A6 26 00 00 1C 20 00 00 98 23 00 00 00 00 00 00 00 00 00 00 1E 28 00 00 C8 20 00 00 00 00 00 00 ª&..∟ ..ÿ#..........▲(..╚ ...... 000002C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 25 00 00 12 25 00 00 EC 24 00 00 3A 25 00 00 ................P%..↕%..∞$..:%.. 000002E0 28 25 00 00 02 25 00 00 00 00 00 00 94 26 00 00 00 00 00 00 C2 25 00 00 16 26 00 00 24 26 00 00 (%..☻%......ö&......┬%..▬&..$&.. 00000300 74 26 00 00 54 26 00 00 4A 26 00 00 60 26 00 00 FC 25 00 00 E8 25 00 00 DC 25 00 00 CE 25 00 00 t&..T&..J&..`&..ⁿ%..Φ%..▄%..╬%.. 00000320 AE 25 00 00 9E 25 00 00 90 25 00 00 6E 25 00 00 34 26 00 00 7C 25 00 00 00 00 00 00 22 24 00 00 «%..₧%..É%..n%..4&..|%......"$.. 00000340 04 24 00 00 0E 24 00 00 18 24 00 00 DE 24 00 00 BE 24 00 00 AC 24 00 00 7E 24 00 00 F8 23 00 00 ♦$..♫$..↑$..▐$..╛$..¼$..~$..°#.. 00000360 9E 24 00 00 2A 24 00 00 40 24 00 00 8E 24 00 00 4E 24 00 00 6A 24 00 00 5A 24 00 00 38 24 00 00 ₧$..*$..@$..Ä$..N$..j$..Z$..8$.. 00000380 00 00 00 00 01 02 00 80 00 02 00 80 FF 01 00 80 F7 01 00 80 00 00 00 00 B0 26 00 00 BE 26 00 00 ....☺☻.Ç.☻.Ç ☺.Ç≈☺.Ç....░&..╛&.. 000003A0 CC 26 00 00 E0 26 00 00 F4 26 00 00 06 27 00 00 14 27 00 00 26 27 00 00 40 27 00 00 50 27 00 00 ╠&..α&..⌠&..♠'..¶'..&'..@'..P'.. 000003C0 60 27 00 00 70 27 00 00 84 27 00 00 94 27 00 00 AA 27 00 00 C6 27 00 00 D4 27 00 00 E6 27 00 00 `'..p'..ä'..ö'..¬'..╞'..╘'..µ'.. 000003E0 FC 27 00 00 0E 28 00 00 00 00 00 00 4E 44 64 65 41 70 69 2E 64 6C 6C 00 BC 01 5F 73 74 72 69 63 ⁿ'..♫(......NDdeApi.dll.╝☺_stric 00000400 6D 70 00 00 DE 02 77 63 73 63 70 79 00 00 E1 02 77 63 73 6C 65 6E 00 00 C0 02 73 74 72 73 74 72 mp..▐☻wcscpy..ß☻wcslen..└☻strstr 00000420 00 00 CF 00 5F 65 78 69 74 00 48 00 5F 58 63 70 74 46 69 6C 74 65 72 00 44 02 65 78 69 74 00 00 ..╧._exit.H._XcptFilter.D☻exit.. 00000440 67 00 5F 5F 70 5F 5F 61 63 6D 64 6C 6E 00 0B 01 5F 69 6E 69 74 74 65 72 6D 00 58 00 5F 5F 67 65 g.__p__acmdln.♂☺_initterm.X.__ge 00000460 74 6D 61 69 6E 61 72 67 73 00 81 00 5F 5F 73 65 74 75 73 65 72 6D 61 74 68 65 72 72 00 00 9A 00 tmainargs.ü.__setusermatherr..Ü. 00000480 5F 61 64 6A 75 73 74 5F 66 64 69 76 00 00 69 00 5F 5F 70 5F 5F 63 6F 6D 6D 6F 64 65 00 00 6E 00 _adjust_fdiv..i.__p__commode..n. 000004A0 5F 5F 70 5F 5F 66 6D 6F 64 65 00 00 7F 00 5F 5F 73 65 74 5F 61 70 70 5F 74 79 70 65 00 00 C6 00 __p__fmode..⌂.__set_app_type..╞. 000004C0 5F 65 78 63 65 70 74 5F 68 61 6E 64 6C 65 72 33 00 00 4D 53 56 43 52 54 2E 64 6C 6C 00 00 B3 00 _except_handler3..MSVCRT.dll..│. 000004E0 5F 63 6F 6E 74 72 6F 6C 66 70 00 00 24 00 43 6C 6F 73 65 53 65 72 76 69 63 65 48 61 6E 64 6C 65 _controlfp..$.CloseServiceHandle 00000500 00 00 07 01 4F 70 65 6E 53 65 72 76 69 63 65 41 00 00 66 00 45 6E 75 6D 53 65 72 76 69 63 65 73 ..•☺OpenServiceA..f.EnumServices 00000520 53 74 61 74 75 73 41 00 05 01 4F 70 65 6E 53 43 4D 61 6E 61 67 65 72 41 00 00 13 01 51 75 65 72 StatusA.♣☺OpenSCManagerA..‼☺Quer 00000540 79 53 65 72 76 69 63 65 53 74 61 74 75 73 00 00 66 01 53 74 61 72 74 53 65 72 76 69 63 65 41 00 yServiceStatus..f☺StartServiceA. 00000560 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 97 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 AE 00 47 65 ADVAPI32.dll..ù☺LocalAlloc..«.Ge 00000580 74 43 6F 6D 70 75 74 65 72 4E 61 6D 65 41 00 00 18 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 F4 00 tComputerNameA..↑.CloseHandle.⌠. 000005A0 47 65 74 4C 61 73 74 45 72 72 6F 72 00 00 40 00 43 72 65 61 74 65 53 65 6D 61 70 68 6F 72 65 41 GetLastError..@.CreateSemaphoreA 000005C0 00 00 9B 01 4C 6F 63 61 6C 46 72 65 65 00 A1 01 4C 6F 63 61 6C 55 6E 6C 6F 63 6B 00 9D 01 4C 6F ..¢☺LocalFree.í☺LocalUnlock.¥☺Lo 000005E0 63 61 6C 4C 6F 63 6B 00 4F 02 54 72 61 6E 73 61 63 74 4E 61 6D 65 64 50 69 70 65 00 26 02 53 65 calLock.O☻TransactNamedPipe.&☻Se 00000600 74 4E 61 6D 65 64 50 69 70 65 48 61 6E 64 6C 65 53 74 61 74 65 00 34 00 43 72 65 61 74 65 46 69 tNamedPipeHandleState.4.CreateFi 00000620 6C 65 57 00 45 01 47 65 74 54 69 63 6B 43 6F 75 6E 74 00 00 5D 01 47 6C 6F 62 61 6C 47 65 74 41 leW.E☺GetTickCount..]☺GlobalGetA 00000640 74 6F 6D 4E 61 6D 65 41 00 00 72 02 57 69 6E 45 78 65 63 00 A5 02 6C 73 74 72 6C 65 6E 41 00 00 tomNameA..r☻WinExec.Ñ☻lstrlenA.. 00000660 FE 00 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 41 00 00 28 01 47 65 74 53 74 61 72 74 75 70 ■.GetModuleHandleA..(☺GetStartup 00000680 49 6E 66 6F 41 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 FA 00 47 65 74 53 74 6F 63 6B 4F 62 InfoA.KERNEL32.dll..·.GetStockOb 000006A0 6A 65 63 74 00 00 47 44 49 33 32 2E 64 6C 6C 00 86 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 16 01 ject..GDI32.dll.å☺LoadStringA.▬☺ 000006C0 47 65 74 4D 65 73 73 61 67 65 41 00 90 00 44 69 73 70 61 74 63 68 4D 65 73 73 61 67 65 41 00 00 GetMessageA.É.DispatchMessageA.. 000006E0 4B 02 54 72 61 6E 73 6C 61 74 65 4D 65 73 73 61 67 65 00 00 55 00 43 72 65 61 74 65 57 69 6E 64 K☻TranslateMessage..U.CreateWind 00000700 6F 77 45 78 41 00 98 01 4D 65 73 73 61 67 65 42 6F 78 41 00 C2 01 52 65 67 69 73 74 65 72 43 6C owExA.ÿ☺MessageBoxA.┬☺RegisterCl 00000720 61 73 73 41 00 00 CE 01 52 65 67 69 73 74 65 72 57 69 6E 64 6F 77 4D 65 73 73 61 67 65 41 00 00 assA..╬☺RegisterWindowMessageA.. 00000740 8A 00 44 65 73 74 72 6F 79 57 69 6E 64 6F 77 00 B3 01 50 65 65 6B 4D 65 73 73 61 67 65 41 00 00 è.DestroyWindow.│☺PeekMessageA.. 00000760 24 02 53 65 74 57 69 6E 64 6F 77 50 6F 73 00 00 2D 01 47 65 74 53 79 73 74 65 6D 4D 65 74 72 69 $☻SetWindowPos..-☺GetSystemMetri 00000780 63 73 00 00 40 01 47 65 74 57 69 6E 64 6F 77 52 65 63 74 00 4B 00 43 72 65 61 74 65 44 69 61 6C cs..@☺GetWindowRect.K.CreateDial 000007A0 6F 67 50 61 72 61 6D 41 00 00 A1 01 4D 73 67 57 61 69 74 46 6F 72 4D 75 6C 74 69 70 6C 65 4F 62 ogParamA..í☺MsgWaitForMultipleOb 000007C0 6A 65 63 74 73 00 CD 00 46 69 6E 64 57 69 6E 64 6F 77 41 00 B7 01 50 6F 73 74 51 75 69 74 4D 65 jects.═.FindWindowA.╖☺PostQuitMe 000007E0 73 73 61 67 65 00 E5 01 53 65 6E 64 4E 6F 74 69 66 79 4D 65 73 73 61 67 65 41 00 00 80 00 44 65 ssage.σ☺SendNotifyMessageA..Ç.De 00000800 66 57 69 6E 64 6F 77 50 72 6F 63 41 00 00 DF 01 53 65 6E 64 4D 65 73 73 61 67 65 41 00 00 55 53 fWindowProcA..▀☺SendMessageA..US 00000820 45 52 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ER32.dll........................ 00000840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................