============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 5C 12 E6 5F 00 00 00 00 74 93 F8 77 64 93 F8 77 76 F9 F9 77 A0 8F F8 77 10 92 F8 77 D0 8E F8 77 \↕µ_....tô°wdô°wv∙∙wáÅ°w►Æ°w╨Ä°w 00000020 20 90 F8 77 E0 02 F9 77 DE 4F F8 77 C0 7F F8 77 4A 23 F8 77 00 00 00 00 00 00 00 00 00 00 00 00 É°wα☻∙w▐O°w└⌂°wJ#°w............ 00000040 00 00 00 00 DE AA 5B 30 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ....▐¬[0....♦...►☺.......►...... 00000060 DE AA 5B 30 00 00 00 00 03 00 00 00 20 00 00 00 00 00 00 00 10 11 00 00 00 00 00 00 DE AA 5B 30 ▐¬[0....♥... .......►◄......▐¬[0 00000080 00 00 00 00 03 00 00 00 20 00 00 00 00 00 00 00 DC 18 00 00 83 EC 04 8D 44 24 00 6A 04 C7 44 24 ....♥... .......▄↑..â∞♦ìD$.j♦╟D$ 000000A0 04 00 00 00 00 50 6A 0C 6A FF FF 15 18 10 FE 5F 83 C4 04 C3 55 8B EC 83 EC 58 56 8D 45 F8 57 8B ♦....Pj♀j §↑►■_â─♦├Uï∞â∞XVìE°Wï 000000C0 35 18 10 FE 5F C7 45 F8 0D 00 00 00 6A 04 50 6A 05 6A FF FF D6 6A 00 6A 00 6A 10 6A FF FF D6 85 5↑►■_╟E°♪...j♦Pj♣j ╓j.j.j►j ╓à 000000E0 C0 7D 17 8D 45 F4 50 6A 01 6A 00 6A 00 6A 00 68 37 01 00 C0 FF 15 20 10 FE 5F 6A 00 8D 45 D4 6A └}↨ìE⌠Pj☺j.j.j.h7☺.└ § ►■_j.ìE╘j 00000100 20 50 6A 01 6A FF FF 15 1C 10 FE 5F 85 C0 7C 6A 6A 00 8D 45 A8 6A 2C 50 6A 00 FF 15 14 10 FE 5F Pj☺j §∟►■_à└|jj.ìE¿j,Pj. §¶►■_ 00000120 85 C0 7C 56 B8 00 00 10 00 2B D2 F7 75 B0 8B C8 2B D2 8B 45 B4 F7 F1 89 45 B4 83 F8 0F 1B FF 8D à└|V╕..►.+╥≈u░ï╚+╥ïE┤≈±ëE┤â°☼← ì 00000140 45 FC 81 E7 00 00 F0 FF 50 81 C7 00 00 20 00 FF 15 10 10 FE 5F 84 C0 74 09 83 7D FC 01 74 03 8B Eⁿüτ..≡ Pü╟.. . §►►■_ä└t○â}ⁿ☺t♥ï 00000160 7D DC 6A 20 8D 45 D4 50 89 7D DC 81 C7 00 00 10 00 6A 01 6A FF 89 7D E0 FF D6 FF 75 0C FF 75 08 }▄j ìE╘Pë}▄ü╟..►.j☺j ë}α ╓ u♀ u◘ 00000180 E8 25 00 00 00 8B F0 85 F6 7D 09 56 6A FF FF 15 0C 10 FE 5F E8 FB FE FF FF 56 6A FE FF 15 08 10 Φ%...ï≡à÷}○Vj §♀►■_Φ√■ Vj■ §◘► 000001A0 FE 5F 33 C0 5F 5E 8B E5 5D C3 FF 25 00 10 FE 5F 83 EC 14 8B 44 24 18 53 56 33 DB 89 5C 24 10 57 ■_3└_^ïσ]├ %.►■_â∞¶ïD$↑SV3█ë\$►W 000001C0 55 8B 2D 30 10 FE 5F FF 70 10 FF D5 8B E8 89 5C 24 10 8D 44 24 18 85 ED 8B F8 89 44 24 14 0F 84 Uï-0►■_ p► ╒ïΦë\$►ìD$↑àφï°ëD$¶☼ä 000001E0 D0 00 00 00 8B 45 0C 68 00 08 00 00 8B 4C 24 2C 53 89 44 24 18 FF 71 18 FF 15 28 10 FE 5F 89 44 ╨...ïE♀h.◘..ïL$,SëD$↑ q↑ §(►■_ëD 00000200 24 14 89 18 8B F0 39 5D 44 8D 45 40 74 05 66 39 18 75 03 8D 45 38 8D 4C 24 1C 6A 01 50 51 FF 15 $¶ë↑ï≡9]DìE@t♣f9↑u♥ìE8ìL$∟j☺PQ § 00000220 2C 10 FE 5F 0F B7 44 24 1C 8B 7C 24 20 85 FF 74 4C 83 C0 02 8B 4C 24 28 50 6A 00 FF 71 18 FF 15 ,►■_☼╖D$∟ï|$ à tLâ└☻ïL$(Pj. q↑ § 00000240 28 10 FE 5F 80 3F 00 74 34 80 3F 00 74 2A 80 3F 20 7F 06 47 80 3F 00 75 F5 80 3F 00 74 1F 43 89 (►■_Ç?.t4Ç?.t*Ç? ⌂♠GÇ?.u⌡Ç?.t▼Cë 00000260 06 83 C6 04 80 3F 20 7E 0B 8A 0F 47 88 08 40 80 3F 20 7F F5 C6 00 00 40 80 3F 00 75 D1 C7 06 00 ♠â╞♦Ç? ~♂è☼Gê◘@Ç? ⌂⌡╞..@Ç?.u╤╟♠. 00000280 00 00 00 83 C6 04 8B FE 8B 4D 48 85 C9 74 1F 80 39 00 74 1A 8B C1 89 0E 83 C6 04 41 80 38 00 74 ...â╞♦ï■ïMHà╔t▼Ç9.t→ï┴ë♫â╞♦AÇ8.t 000002A0 08 8B C1 41 80 38 00 75 F8 80 39 00 75 E6 C7 06 00 00 00 00 83 7C 24 10 00 74 05 E8 32 00 00 00 ◘ï┴AÇ8.u°Ç9.uµ╟♠....â|$►.t♣Φ2... 000002C0 FF 74 24 10 57 FF 74 24 1C 53 E8 E5 FD FF FF 83 C4 10 8B 2D 0C 10 FE 5F 50 6A FF FF D5 B9 01 00 t$►W t$∟SΦσ² â─►ï-♀►■_Pj ╒╣☺. 000002E0 00 00 5D 5F 5E 5B C7 01 00 00 00 00 83 C4 14 C2 04 00 FF 25 24 10 FE 5F 34 13 00 00 FF FF FF FF ..]_^[╟☺....â─¶┬♦. %$►■_4‼.. 00000300 FF FF FF FF 86 13 00 00 00 10 00 00 3C 13 00 00 FF FF FF FF FF FF FF FF 38 14 00 00 08 10 00 00 å‼...►..<‼.. 8¶..◘►.. 00000320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6C 13 00 00 00 00 00 00 AC 13 00 00 ....................l‼......¼‼.. 00000340 C0 13 00 00 D6 13 00 00 EC 13 00 00 92 13 00 00 08 14 00 00 24 14 00 00 42 14 00 00 52 14 00 00 └‼..╓‼..∞‼..Æ‼..◘¶..$¶..B¶..R¶.. 00000360 64 14 00 00 84 14 00 00 00 00 00 00 1B 00 43 73 72 53 65 72 76 65 72 49 6E 69 74 69 61 6C 69 7A d¶..ä¶......←.CsrServerInitializ 00000380 61 74 69 6F 6E 00 43 53 52 53 52 56 2E 64 6C 6C 00 00 CE 00 4E 74 53 65 74 49 6E 66 6F 72 6D 61 ation.CSRSRV.dll..╬.NtSetInforma 000003A0 74 69 6F 6E 50 72 6F 63 65 73 73 00 E6 00 4E 74 54 65 72 6D 69 6E 61 74 65 54 68 72 65 61 64 00 tionProcess.µ.NtTerminateThread. 000003C0 E5 00 4E 74 54 65 72 6D 69 6E 61 74 65 50 72 6F 63 65 73 73 00 00 85 01 52 74 6C 47 65 74 4E 74 σ.NtTerminateProcess..à☺RtlGetNt 000003E0 50 72 6F 64 75 63 74 54 79 70 65 00 A7 00 4E 74 51 75 65 72 79 53 79 73 74 65 6D 49 6E 66 6F 72 ProductType.º.NtQuerySystemInfor 00000400 6D 61 74 69 6F 6E 00 00 99 00 4E 74 51 75 65 72 79 49 6E 66 6F 72 6D 61 74 69 6F 6E 50 72 6F 63 mation..Ö.NtQueryInformationProc 00000420 65 73 73 00 AF 00 4E 74 52 61 69 73 65 48 61 72 64 45 72 72 6F 72 00 00 6E 74 64 6C 6C 2E 64 6C ess.».NtRaiseHardError..ntdll.dl 00000440 6C 00 12 00 44 62 67 42 72 65 61 6B 50 6F 69 6E 74 00 09 01 52 74 6C 41 6C 6C 6F 63 61 74 65 48 l.↕.DbgBreakPoint.○☺RtlAllocateH 00000460 65 61 70 00 FA 01 52 74 6C 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 41 6E 73 69 53 74 72 69 eap.·☺RtlUnicodeStringToAnsiStri 00000480 6E 67 00 00 B8 01 52 74 6C 4E 6F 72 6D 61 6C 69 7A 65 50 72 6F 63 65 73 73 50 61 72 61 6D 73 00 ng..╕☺RtlNormalizeProcessParams. 000004A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................