============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 F0 5A 01 00 E0 5A 01 00 D0 5A 01 00 88 5A 01 00 9A 5A 01 00 AE 5A 01 00 C0 5A 01 00 00 00 00 00 ≡Z☺.αZ☺.╨Z☺.êZ☺.ÜZ☺.«Z☺.└Z☺..... 00000020 66 5C 01 00 C4 5C 01 00 B6 5C 01 00 90 5C 01 00 12 5B 01 00 1E 5B 01 00 2E 5B 01 00 40 5B 01 00 f\☺.─\☺.╢\☺.É\☺.↕[☺.▲[☺..[☺.@[☺. 00000040 58 5B 01 00 74 5B 01 00 90 5B 01 00 9E 5B 01 00 AA 5B 01 00 B6 5B 01 00 C4 5B 01 00 D0 5B 01 00 X[☺.t[☺.É[☺.₧[☺.¬[☺.╢[☺.─[☺.╨[☺. 00000060 E6 5B 01 00 F8 5B 01 00 08 5C 01 00 1E 5C 01 00 2A 5C 01 00 36 5C 01 00 42 5C 01 00 4E 5C 01 00 µ[☺.°[☺.◘\☺.▲\☺.*\☺.6\☺.B\☺.N\☺. 00000080 7E 5C 01 00 48 5E 01 00 A0 5C 01 00 92 5D 01 00 D2 5C 01 00 E8 5C 01 00 FC 5C 01 00 14 5D 01 00 ~\☺.H^☺.á\☺.Æ]☺.╥\☺.Φ\☺.ⁿ\☺.¶]☺. 000000A0 2C 5D 01 00 44 5D 01 00 54 5D 01 00 68 5D 01 00 7C 5D 01 00 F8 5D 01 00 AC 5D 01 00 BC 5D 01 00 ,]☺.D]☺.T]☺.h]☺.|]☺.°]☺.¼]☺.╝]☺. 000000C0 CC 5D 01 00 E2 5D 01 00 04 5E 01 00 14 5E 01 00 24 5E 01 00 36 5E 01 00 00 00 00 00 90 5E 01 00 ╠]☺.Γ]☺.♦^☺.¶^☺.$^☺.6^☺.....É^☺. 000000E0 6E 5E 01 00 80 5E 01 00 00 00 00 00 09 00 00 80 08 00 00 80 0E 00 00 80 0F 00 00 80 00 00 00 00 n^☺.Ç^☺.....○..Ç◘..Ç♫..Ç☼..Ç.... 00000100 00 00 00 00 31 73 5D 32 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 00 9E 01 00 00 00 00 00 ....1s]2....♦...►☺.......₧☺..... 00000120 31 73 5D 32 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 3C EE 02 00 00 00 00 00 31 73 5D 32 1s]2....♦...►☺......<ε☻.....1s]2 00000140 00 00 00 00 03 00 00 00 80 13 00 00 00 00 00 00 4C EF 02 00 00 00 00 00 31 73 5D 32 00 00 00 00 ....♥...Ç‼......L∩☻.....1s]2.... 00000160 06 00 00 00 00 00 00 00 00 00 00 00 CC 02 03 00 00 00 00 00 31 73 5D 32 00 00 00 00 02 00 00 00 ♠...........╠☻♥.....1s]2....☻... 00000180 34 A4 00 00 00 00 00 00 C0 F5 B6 FF 00 00 00 00 57 69 6E 64 6F 77 73 20 4E 54 20 50 43 54 20 61 4ñ......└⌡╢ ....Windows NT PCT a 000001A0 6E 64 20 53 53 4C 20 53 65 63 75 72 69 74 79 20 50 72 6F 76 69 64 65 72 00 00 00 00 73 63 68 61 nd SSL Security Provider....scha 000001C0 6E 6E 65 6C 2E 64 6C 6C 00 00 00 00 53 65 63 75 72 69 74 79 50 72 6F 76 69 64 65 72 73 00 00 00 nnel.dll....SecurityProviders... 000001E0 53 79 73 74 65 6D 5C 43 75 72 72 65 6E 74 43 6F 6E 74 72 6F 6C 53 65 74 5C 43 6F 6E 74 72 6F 6C System\CurrentControlSet\Control 00000200 5C 53 65 63 75 72 69 74 79 50 72 6F 76 69 64 65 72 73 00 00 00 00 00 00 73 65 63 75 72 33 32 2E \SecurityProviders......secur32. 00000220 64 6C 6C 00 5C 00 00 00 56 65 72 51 75 65 72 79 56 61 6C 75 65 41 00 00 47 65 74 46 69 6C 65 56 dll.\...VerQueryValueA..GetFileV 00000240 65 72 73 69 6F 6E 49 6E 66 6F 41 00 47 65 74 46 69 6C 65 56 65 72 73 69 6F 6E 49 6E 66 6F 53 69 ersionInfoA.GetFileVersionInfoSi 00000260 7A 65 41 00 76 65 72 73 69 6F 6E 2E 64 6C 6C 00 50 43 54 00 53 53 4C 00 01 00 00 00 74 52 F3 74 zeA.version.dll.PCT.SSL.☺...tR≤t 00000280 02 00 00 00 00 00 00 00 02 00 00 00 70 52 F3 74 01 00 00 00 00 00 00 00 03 00 00 00 74 52 F3 74 ☻.......☻...pR≤t☺.......♥...tR≤t 000002A0 03 00 00 00 00 00 00 00 04 00 00 00 70 52 F3 74 02 00 00 00 00 00 00 00 2F 00 00 00 21 54 63 70 ♥.......♦...pR≤t☻......./...!Tcp 000002C0 00 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 53 00 53 00 4C 00 00 00 ....M.i.c.r.o.s.o.f.t. .S.S.L... 000002E0 4D 69 63 72 6F 73 6F 66 74 20 53 53 4C 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 Microsoft SSL...M.i.c.r.o.s.o.f. 00000300 74 00 20 00 53 00 53 00 4C 00 20 00 33 00 2E 00 30 00 00 00 4D 69 63 72 6F 73 6F 66 74 20 53 53 t. .S.S.L. .3...0...Microsoft SS 00000320 4C 20 33 2E 30 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 50 00 43 00 L 3.0...M.i.c.r.o.s.o.f.t. .P.C. 00000340 54 00 00 00 4D 69 63 72 6F 73 6F 66 74 20 50 43 54 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 T...Microsoft PCT...M.i.c.r.o.s. 00000360 6F 00 66 00 74 00 20 00 55 00 6E 00 69 00 66 00 69 00 65 00 64 00 20 00 53 00 65 00 63 00 75 00 o.f.t. .U.n.i.f.i.e.d. .S.e.c.u. 00000380 72 00 69 00 74 00 79 00 20 00 50 00 72 00 6F 00 74 00 6F 00 63 00 6F 00 6C 00 20 00 50 00 72 00 r.i.t.y. .P.r.o.t.o.c.o.l. .P.r. 000003A0 6F 00 76 00 69 00 64 00 65 00 72 00 00 00 00 00 4D 69 63 72 6F 73 6F 66 74 20 55 6E 69 66 69 65 o.v.i.d.e.r.....Microsoft Unifie 000003C0 64 20 53 65 63 75 72 69 74 79 20 50 72 6F 74 6F 63 6F 6C 20 50 72 6F 76 69 64 65 72 00 00 00 00 d Security Protocol Provider.... 000003E0 43 74 63 50 00 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 53 00 53 00 CtcP....M.i.c.r.o.s.o.f.t. .S.S. 00000400 4C 00 20 00 32 00 2E 00 30 00 20 00 53 00 65 00 63 00 75 00 72 00 69 00 74 00 79 00 20 00 50 00 L. .2...0. .S.e.c.u.r.i.t.y. .P. 00000420 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 r.o.v.i.d.e.r...M.i.c.r.o.s.o.f. 00000440 74 00 20 00 53 00 53 00 4C 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 t. .S.S.L...M.i.c.r.o.s.o.f.t. . 00000460 53 00 53 00 4C 00 20 00 33 00 2E 00 30 00 20 00 53 00 65 00 63 00 75 00 72 00 69 00 74 00 79 00 S.S.L. .3...0. .S.e.c.u.r.i.t.y. 00000480 20 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 00 00 4D 00 69 00 63 00 72 00 6F 00 73 00 .P.r.o.v.i.d.e.r...M.i.c.r.o.s. 000004A0 6F 00 66 00 74 00 20 00 50 00 43 00 54 00 20 00 31 00 2E 00 30 00 20 00 20 00 53 00 65 00 63 00 o.f.t. .P.C.T. .1...0. . .S.e.c. 000004C0 75 00 72 00 69 00 74 00 79 00 20 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 00 00 00 00 u.r.i.t.y. .P.r.o.v.i.d.e.r..... 000004E0 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 50 00 43 00 54 00 00 00 4D 00 69 00 M.i.c.r.o.s.o.f.t. .P.C.T...M.i. 00000500 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 55 00 6E 00 69 00 66 00 69 00 65 00 64 00 20 00 c.r.o.s.o.f.t. .U.n.i.f.i.e.d. . 00000520 53 00 65 00 63 00 75 00 72 00 69 00 74 00 79 00 20 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 S.e.c.u.r.i.t.y. .P.r.o.v.i.d.e. 00000540 72 00 00 00 4D 69 63 72 6F 73 6F 66 74 20 53 53 4C 20 32 2E 30 20 53 65 63 75 72 69 74 79 20 50 r...Microsoft SSL 2.0 Security P 00000560 72 6F 76 69 64 65 72 00 4D 69 63 72 6F 73 6F 66 74 20 53 53 4C 20 33 2E 30 20 53 65 63 75 72 69 rovider.Microsoft SSL 3.0 Securi 00000580 74 79 20 50 72 6F 76 69 64 65 72 00 4D 69 63 72 6F 73 6F 66 74 20 50 43 54 20 31 2E 30 20 20 53 ty Provider.Microsoft PCT 1.0 S 000005A0 65 63 75 72 69 74 79 20 50 72 6F 76 69 64 65 72 00 00 00 00 4D 69 63 72 6F 73 6F 66 74 20 55 6E ecurity Provider....Microsoft Un 000005C0 69 66 69 65 64 20 53 65 63 75 72 69 74 79 20 50 72 6F 76 69 64 65 72 00 53 53 4C 20 33 2E 30 5C ified Security Provider.SSL 3.0\ 000005E0 53 65 72 76 65 72 00 00 53 53 4C 20 33 2E 30 5C 43 6C 69 65 6E 74 00 00 53 53 4C 20 32 2E 30 5C Server..SSL 3.0\Client..SSL 2.0\ 00000600 53 65 72 76 65 72 00 00 53 53 4C 20 32 2E 30 5C 43 6C 69 65 6E 74 00 00 50 43 54 20 31 2E 30 5C Server..SSL 2.0\Client..PCT 1.0\ 00000620 53 65 72 76 65 72 00 00 50 43 54 20 31 2E 30 5C 43 6C 69 65 6E 74 00 00 4D 75 6C 74 69 2D 50 72 Server..PCT 1.0\Client..Multi-Pr 00000640 6F 74 6F 63 6F 6C 20 55 6E 69 66 69 65 64 20 48 65 6C 6C 6F 5C 53 65 72 76 65 72 00 4D 75 6C 74 otocol Unified Hello\Server.Mult 00000660 69 2D 50 72 6F 74 6F 63 6F 6C 20 55 6E 69 66 69 65 64 20 48 65 6C 6C 6F 5C 43 6C 69 65 6E 74 00 i-Protocol Unified Hello\Client. 00000680 43 65 72 74 69 66 69 63 61 74 69 6F 6E 41 75 74 68 6F 72 69 74 69 65 73 00 00 00 00 4B 65 79 45 CertificationAuthorities....KeyE 000006A0 78 63 68 61 6E 67 65 41 6C 67 6F 72 69 74 68 6D 73 00 00 00 48 61 73 68 65 73 00 00 43 69 70 68 xchangeAlgorithms...Hashes..Ciph 000006C0 65 72 73 00 50 72 6F 74 6F 63 6F 6C 73 00 00 00 53 79 73 74 65 6D 5C 43 75 72 72 65 6E 74 43 6F ers.Protocols...System\CurrentCo 000006E0 6E 74 72 6F 6C 53 65 74 5C 43 6F 6E 74 72 6F 6C 5C 53 65 63 75 72 69 74 79 50 72 6F 76 69 64 65 ntrolSet\Control\SecurityProvide 00000700 72 73 5C 53 43 48 41 4E 4E 45 4C 00 45 6E 61 62 6C 65 64 00 53 65 72 76 65 72 43 61 63 68 65 54 rs\SCHANNEL.Enabled.ServerCacheT 00000720 69 6D 65 00 53 65 72 76 65 72 43 61 63 68 65 00 45 76 65 6E 74 4C 6F 67 67 69 6E 67 00 00 00 00 ime.ServerCache.EventLogging.... 00000740 65 65 72 46 00 00 00 00 63 76 70 00 73 72 00 00 45 45 45 45 45 00 00 00 44 44 44 44 00 00 00 00 eerF....cvp.sr..EEEEE...DDDD.... 00000760 43 43 43 00 42 42 00 00 41 00 00 00 53 52 56 52 00 00 00 00 43 4C 4E 54 00 00 00 00 73 6C 00 00 CCC.BB..A...SRVR....CLNT....sl.. 00000780 73 76 6D 61 63 00 00 00 63 6D 61 63 00 00 00 00 73 76 77 00 63 77 00 00 43 6C 6F 73 65 54 6F 6B svmac...cmac....svw.cw..CloseTok 000007A0 65 6E 48 61 6E 64 6C 65 00 00 00 00 52 65 66 72 65 73 68 54 6F 6B 65 6E 00 00 00 00 54 65 72 6D enHandle....RefreshToken....Term 000007C0 69 6E 61 74 65 43 65 72 74 4D 61 70 70 65 72 00 44 65 6C 65 74 65 49 73 73 75 65 72 4C 69 73 74 inateCertMapper.DeleteIssuerList 000007E0 00 00 00 00 49 6E 69 74 43 65 72 74 4D 61 70 70 65 72 00 00 43 65 72 74 4D 61 70 70 65 72 00 00 ....InitCertMapper..CertMapper.. 00000800 54 79 70 65 00 00 00 00 43 45 52 54 00 00 00 00 43 41 43 65 72 74 00 00 21 41 74 68 00 00 00 00 Type....CERT....CACert..!Ath.... 00000820 52 53 41 00 43 72 79 70 74 43 72 65 61 74 65 48 61 73 68 00 61 64 76 61 70 69 33 32 2E 64 6C 6C RSA.CryptCreateHash.advapi32.dll 00000840 00 00 00 00 43 72 79 70 74 48 61 73 68 44 61 74 61 00 00 00 43 72 79 70 74 44 65 73 74 72 6F 79 ....CryptHashData...CryptDestroy 00000860 48 61 73 68 00 00 00 00 43 72 79 70 74 53 69 67 6E 48 61 73 68 41 00 00 43 72 79 70 74 53 65 74 Hash....CryptSignHashA..CryptSet 00000880 48 61 73 68 50 61 72 61 6D 00 00 00 4D 44 35 00 52 43 34 00 41 64 64 72 3D 00 00 00 4E 61 6D 65 HashParam...MD5.RC4.Addr=...Name 000008A0 3D 00 00 00 45 6D 61 69 6C 3D 00 00 4F 55 3D 00 4F 3D 00 00 53 3D 00 00 4C 3D 00 00 43 3D 00 00 =...Email=..OU=.O=..S=..L=..C=.. 000008C0 43 4E 3D 00 20 00 00 00 02 00 00 00 70 72 69 76 61 74 65 2D 6B 65 79 00 80 00 00 00 00 00 00 00 CN=. ...☻...private-key.Ç....... 000008E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 5A 01 00 00 00 00 00 ........................hZ☺..... 00000920 00 00 00 00 7C 5A 01 00 EC 50 01 00 7C 59 01 00 00 00 00 00 00 00 00 00 04 5B 01 00 00 50 01 00 ....|Z☺.∞P☺.|Y☺.........♦[☺..P☺. 00000940 9C 59 01 00 00 00 00 00 00 00 00 00 60 5E 01 00 20 50 01 00 58 5A 01 00 00 00 00 00 00 00 00 00 £Y☺.........`^☺. P☺.XZ☺......... 00000960 9E 5E 01 00 DC 50 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F0 5A 01 00 ₧^☺.▄P☺.....................≡Z☺. 00000980 E0 5A 01 00 D0 5A 01 00 88 5A 01 00 9A 5A 01 00 AE 5A 01 00 C0 5A 01 00 00 00 00 00 66 5C 01 00 αZ☺.╨Z☺.êZ☺.ÜZ☺.«Z☺.└Z☺.....f\☺. 000009A0 C4 5C 01 00 B6 5C 01 00 90 5C 01 00 12 5B 01 00 1E 5B 01 00 2E 5B 01 00 40 5B 01 00 58 5B 01 00 ─\☺.╢\☺.É\☺.↕[☺.▲[☺..[☺.@[☺.X[☺. 000009C0 74 5B 01 00 90 5B 01 00 9E 5B 01 00 AA 5B 01 00 B6 5B 01 00 C4 5B 01 00 D0 5B 01 00 E6 5B 01 00 t[☺.É[☺.₧[☺.¬[☺.╢[☺.─[☺.╨[☺.µ[☺. 000009E0 F8 5B 01 00 08 5C 01 00 1E 5C 01 00 2A 5C 01 00 36 5C 01 00 42 5C 01 00 4E 5C 01 00 7E 5C 01 00 °[☺.◘\☺.▲\☺.*\☺.6\☺.B\☺.N\☺.~\☺. 00000A00 48 5E 01 00 A0 5C 01 00 92 5D 01 00 D2 5C 01 00 E8 5C 01 00 FC 5C 01 00 14 5D 01 00 2C 5D 01 00 H^☺.á\☺.Æ]☺.╥\☺.Φ\☺.ⁿ\☺.¶]☺.,]☺. 00000A20 44 5D 01 00 54 5D 01 00 68 5D 01 00 7C 5D 01 00 F8 5D 01 00 AC 5D 01 00 BC 5D 01 00 CC 5D 01 00 D]☺.T]☺.h]☺.|]☺.°]☺.¼]☺.╝]☺.╠]☺. 00000A40 E2 5D 01 00 04 5E 01 00 14 5E 01 00 24 5E 01 00 36 5E 01 00 00 00 00 00 90 5E 01 00 6E 5E 01 00 Γ]☺.♦^☺.¶^☺.$^☺.6^☺.....É^☺.n^☺. 00000A60 80 5E 01 00 00 00 00 00 09 00 00 80 08 00 00 80 0E 00 00 80 0F 00 00 80 00 00 00 00 57 53 4F 43 Ç^☺.....○..Ç◘..Ç♫..Ç☼..Ç....WSOC 00000A80 4B 33 32 2E 64 6C 6C 00 41 01 52 65 67 53 65 74 56 61 6C 75 65 45 78 41 00 00 36 01 52 65 67 51 K32.dll.A☺RegSetValueExA..6☺RegQ 00000AA0 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 1B 01 52 65 67 43 72 65 61 74 65 4B 65 79 45 78 41 00 ueryValueExA..←☺RegCreateKeyExA. 00000AC0 9F 00 47 65 74 55 73 65 72 4E 61 6D 65 41 00 00 2E 01 52 65 67 4F 70 65 6E 4B 65 79 45 78 41 00 ƒ.GetUserNameA...☺RegOpenKeyExA. 00000AE0 23 01 52 65 67 45 6E 75 6D 4B 65 79 45 78 41 00 31 01 52 65 67 51 75 65 72 79 49 6E 66 6F 4B 65 #☺RegEnumKeyExA.1☺RegQueryInfoKe 00000B00 79 41 00 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 9A 01 4C 6F 63 61 6C 46 72 65 65 00 1E 02 yA..ADVAPI32.dll..Ü☺LocalFree.▲☻ 00000B20 53 65 74 4C 61 73 74 45 72 72 6F 72 00 00 F6 00 47 65 74 4C 6F 63 61 6C 65 49 6E 66 6F 41 00 00 SetLastError..÷.GetLocaleInfoA.. 00000B40 2F 01 47 65 74 53 79 73 74 65 6D 44 65 66 61 75 6C 74 4C 43 49 44 00 00 79 01 49 6E 69 74 69 61 /☺GetSystemDefaultLCID..y☺Initia 00000B60 6C 69 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 51 00 44 69 73 61 62 6C 65 54 68 72 lizeCriticalSection.Q.DisableThr 00000B80 65 61 64 4C 69 62 72 61 72 79 43 61 6C 6C 73 00 18 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 A1 02 eadLibraryCalls.↑.CloseHandle.í☻ 00000BA0 6C 73 74 72 6C 65 6E 41 00 00 98 02 6C 73 74 72 63 6D 70 69 41 00 96 01 4C 6F 63 61 6C 41 6C 6C lstrlenA..ÿ☻lstrcmpiA.û☺LocalAll 00000BC0 6F 63 00 00 92 02 6C 73 74 72 63 61 74 41 00 00 31 01 47 65 74 53 79 73 74 65 6D 44 69 72 65 63 oc..Æ☻lstrcatA..1☺GetSystemDirec 00000BE0 74 6F 72 79 41 00 16 01 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 90 01 4C 6F 61 64 4C 69 toryA.▬☺GetProcAddress..É☺LoadLi 00000C00 62 72 61 72 79 41 00 00 6E 02 57 69 64 65 43 68 61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 A2 02 braryA..n☻WideCharToMultiByte.ó☻ 00000C20 6C 73 74 72 6C 65 6E 57 00 00 9B 02 6C 73 74 72 63 70 79 41 00 00 9C 02 6C 73 74 72 63 70 79 57 lstrlenW..¢☻lstrcpyA..£☻lstrcpyW 00000C40 00 00 99 02 6C 73 74 72 63 6D 70 69 57 00 7E 01 49 6E 74 65 72 6C 6F 63 6B 65 64 49 6E 63 72 65 ..Ö☻lstrcmpiW.~☺InterlockedIncre 00000C60 6D 65 6E 74 00 00 7B 01 49 6E 74 65 72 6C 6F 63 6B 65 64 44 65 63 72 65 6D 65 6E 74 00 00 53 02 ment..{☺InterlockedDecrement..S☻ 00000C80 55 6E 6D 61 70 56 69 65 77 4F 66 46 69 6C 65 00 A4 01 4D 61 70 56 69 65 77 4F 66 46 69 6C 65 00 UnmapViewOfFile.ñ☺MapViewOfFile. 00000CA0 32 00 43 72 65 61 74 65 46 69 6C 65 4D 61 70 70 69 6E 67 41 00 00 ED 00 47 65 74 46 69 6C 65 53 2.CreateFileMappingA..φ.GetFileS 00000CC0 69 7A 65 00 31 00 43 72 65 61 74 65 46 69 6C 65 41 00 FC 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C ize.1.CreateFileA.ⁿ.GetModuleFil 00000CE0 65 4E 61 6D 65 41 00 00 FE 00 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 41 00 00 4C 00 44 65 eNameA..■.GetModuleHandleA..L.De 00000D00 6C 65 74 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 8F 01 4C 65 61 76 65 43 72 69 74 69 leteCriticalSection.Å☺LeaveCriti 00000D20 63 61 6C 53 65 63 74 69 6F 6E 00 00 58 00 45 6E 74 65 72 43 72 69 74 69 63 61 6C 53 65 63 74 69 calSection..X.EnterCriticalSecti 00000D40 6F 6E 00 00 E4 01 52 74 6C 4D 6F 76 65 4D 65 6D 6F 72 79 00 AE 00 47 65 74 43 6F 6D 70 75 74 65 on..Σ☺RtlMoveMemory.«.GetCompute 00000D60 72 4E 61 6D 65 41 00 00 DB 00 47 65 74 44 69 73 6B 46 72 65 65 53 70 61 63 65 41 00 61 01 47 6C rNameA..█.GetDiskFreeSpaceA.a☺Gl 00000D80 6F 62 61 6C 4D 65 6D 6F 72 79 53 74 61 74 75 73 00 00 C5 01 51 75 65 72 79 50 65 72 66 6F 72 6D obalMemoryStatus..┼☺QueryPerform 00000DA0 61 6E 63 65 43 6F 75 6E 74 65 72 00 F5 00 47 65 74 4C 6F 63 61 6C 54 69 6D 65 00 00 45 01 47 65 anceCounter.⌡.GetLocalTime..E☺Ge 00000DC0 74 54 69 63 6B 43 6F 75 6E 74 00 00 D6 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 49 64 tTickCount..╓.GetCurrentThreadId 00000DE0 00 00 D4 00 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73 73 49 64 00 95 02 6C 73 74 72 63 6D ..╘.GetCurrentProcessId.ò☻lstrcm 00000E00 70 41 00 00 A3 01 4C 6F 63 6B 52 65 73 6F 75 72 63 65 00 00 95 01 4C 6F 61 64 52 65 73 6F 75 72 pA..ú☺LockResource..ò☺LoadResour 00000E20 63 65 00 00 3E 02 53 69 7A 65 6F 66 52 65 73 6F 75 72 63 65 00 00 8A 00 46 69 6E 64 52 65 73 6F ce..>☻SizeofResource..è.FindReso 00000E40 75 72 63 65 45 78 41 00 44 02 53 79 73 74 65 6D 54 69 6D 65 54 6F 46 69 6C 65 54 69 6D 65 00 00 urceExA.D☻SystemTimeToFileTime.. 00000E60 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 18 01 47 65 74 4D 65 73 73 61 67 65 54 69 6D 65 00 00 KERNEL32.dll..↑☺GetMessageTime.. 00000E80 ED 00 47 65 74 43 75 72 73 6F 72 50 6F 73 00 00 83 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 55 53 φ.GetCursorPos..â☺LoadStringA.US 00000EA0 45 52 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ER32.dll........................ 00000EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................