============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 3B 00 00 00 4F 00 73 00 32 00 4C 00 69 00 62 00 50 00 61 00 74 00 68 00 00 00 00 00 4C 00 69 00 ;...O.s.2.L.i.b.P.a.t.h.....L.i. 00000020 62 00 50 00 61 00 74 00 68 00 00 00 50 00 61 00 74 00 68 00 00 00 00 00 53 00 79 00 73 00 74 00 b.P.a.t.h...P.a.t.h.....S.y.s.t. 00000040 65 00 6D 00 44 00 72 00 69 00 76 00 65 00 00 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 e.m.D.r.i.v.e...S.y.s.t.e.m.R.o. 00000060 6F 00 74 00 00 00 00 00 53 00 59 00 53 00 54 00 45 00 4D 00 5C 00 43 00 75 00 72 00 72 00 65 00 o.t.....S.Y.S.T.E.M.\.C.u.r.r.e. 00000080 6E 00 74 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 53 00 65 00 74 00 5C 00 43 00 6F 00 6E 00 n.t.C.o.n.t.r.o.l.S.e.t.\.C.o.n. 000000A0 74 00 72 00 6F 00 6C 00 5C 00 53 00 65 00 73 00 73 00 69 00 6F 00 6E 00 20 00 4D 00 61 00 6E 00 t.r.o.l.\.S.e.s.s.i.o.n. .M.a.n. 000000C0 61 00 67 00 65 00 72 00 5C 00 45 00 6E 00 76 00 69 00 72 00 6F 00 6E 00 6D 00 65 00 6E 00 74 00 a.g.e.r.\.E.n.v.i.r.o.n.m.e.n.t. 000000E0 00 00 00 00 25 00 00 00 50 00 41 00 54 00 48 00 25 00 00 00 25 00 00 00 41 00 75 00 74 00 6F 00 ....%...P.A.T.H.%...%...A.u.t.o. 00000100 65 00 78 00 65 00 63 00 50 00 61 00 74 00 68 00 00 00 00 00 41 00 75 00 74 00 6F 00 65 00 78 00 e.x.e.c.P.a.t.h.....A.u.t.o.e.x. 00000120 65 00 63 00 50 00 61 00 74 00 68 00 00 00 00 00 50 00 61 00 74 00 68 00 00 00 00 00 00 00 00 00 e.c.P.a.t.h.....P.a.t.h......... 00000140 41 00 75 00 74 00 6F 00 65 00 78 00 65 00 63 00 50 00 61 00 74 00 68 00 00 00 00 00 00 00 00 00 A.u.t.o.e.x.e.c.P.a.t.h......... 00000160 50 00 61 00 74 00 68 00 00 00 00 00 53 45 54 00 50 61 74 68 00 00 00 00 63 00 3A 00 5C 00 61 00 P.a.t.h.....SET.Path....c.:.\.a. 00000180 75 00 74 00 6F 00 65 00 78 00 65 00 63 00 2E 00 62 00 61 00 74 00 00 00 26 0A 0D 00 50 00 61 00 u.t.o.e.x.e.c...b.a.t...&◙♪.P.a. 000001A0 74 00 68 00 00 00 00 00 41 00 75 00 74 00 6F 00 65 00 78 00 65 00 63 00 50 00 61 00 74 00 68 00 t.h.....A.u.t.o.e.x.e.c.P.a.t.h. 000001C0 00 00 00 00 56 00 6F 00 6C 00 61 00 74 00 69 00 6C 00 65 00 20 00 45 00 6E 00 76 00 69 00 72 00 ....V.o.l.a.t.i.l.e. .E.n.v.i.r. 000001E0 6F 00 6E 00 6D 00 65 00 6E 00 74 00 00 00 00 00 45 00 6E 00 76 00 69 00 72 00 6F 00 6E 00 6D 00 o.n.m.e.n.t.....E.n.v.i.r.o.n.m. 00000200 65 00 6E 00 74 00 00 00 50 00 61 00 74 00 68 00 00 00 00 00 50 00 61 00 72 00 73 00 65 00 41 00 e.n.t...P.a.t.h.....P.a.r.s.e.A. 00000220 75 00 74 00 6F 00 65 00 78 00 65 00 63 00 00 00 50 00 61 00 72 00 73 00 65 00 41 00 75 00 74 00 u.t.o.e.x.e.c...P.a.r.s.e.A.u.t. 00000240 6F 00 65 00 78 00 65 00 63 00 00 00 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 5C 00 4D 00 o.e.x.e.c...S.o.f.t.w.a.r.e.\.M. 00000260 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 i.c.r.o.s.o.f.t.\.W.i.n.d.o.w.s. 00000280 20 00 4E 00 54 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 56 00 65 00 72 00 73 00 69 00 .N.T.\.C.u.r.r.e.n.t.V.e.r.s.i. 000002A0 6F 00 6E 00 5C 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 31 00 00 00 48 00 4F 00 o.n.\.W.i.n.l.o.g.o.n...1...H.O. 000002C0 4D 00 45 00 50 00 41 00 54 00 48 00 00 00 00 00 48 00 4F 00 4D 00 45 00 50 00 41 00 54 00 48 00 M.E.P.A.T.H.....H.O.M.E.P.A.T.H. 000002E0 00 00 00 00 48 00 4F 00 4D 00 45 00 53 00 48 00 41 00 52 00 45 00 00 00 48 00 4F 00 4D 00 45 00 ....H.O.M.E.S.H.A.R.E...H.O.M.E. 00000300 53 00 48 00 41 00 52 00 45 00 00 00 48 00 4F 00 4D 00 45 00 44 00 52 00 49 00 56 00 45 00 00 00 S.H.A.R.E...H.O.M.E.D.R.I.V.E... 00000320 48 00 4F 00 4D 00 45 00 44 00 52 00 49 00 56 00 45 00 00 00 55 00 53 00 45 00 52 00 44 00 4F 00 H.O.M.E.D.R.I.V.E...U.S.E.R.D.O. 00000340 4D 00 41 00 49 00 4E 00 00 00 00 00 55 00 53 00 45 00 52 00 4E 00 41 00 4D 00 45 00 00 00 00 00 M.A.I.N.....U.S.E.R.N.A.M.E..... 00000360 43 00 4F 00 4D 00 50 00 55 00 54 00 45 00 52 00 4E 00 41 00 4D 00 45 00 00 00 00 00 25 00 6C 00 C.O.M.P.U.T.E.R.N.A.M.E.....%.l. 00000380 64 00 00 00 3A 00 20 00 25 00 73 00 00 00 00 00 70 00 72 00 6F 00 67 00 6D 00 61 00 6E 00 2E 00 d...:. .%.s.....p.r.o.g.m.a.n... 000003A0 68 00 6C 00 70 00 00 00 63 00 6F 00 6D 00 6D 00 64 00 6C 00 67 00 5F 00 68 00 65 00 6C 00 70 00 h.l.p...c.o.m.m.d.l.g._.h.e.l.p. 000003C0 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 47 65 74 4F 70 65 6E 46 69 6C 65 4E 61 6D 65 57 .........♦......GetOpenFileNameW 000003E0 00 00 00 00 00 00 00 00 63 00 6F 00 6D 00 64 00 6C 00 67 00 33 00 32 00 2E 00 64 00 6C 00 6C 00 ........c.o.m.d.l.g.3.2...d.l.l. 00000400 00 00 00 00 41 00 00 00 3F 00 2E 00 3F 00 00 00 00 00 00 00 2E 00 65 00 78 00 65 00 00 00 00 00 ....A...?...?.........e.x.e..... 00000420 6F 00 70 00 65 00 6E 00 00 00 00 00 00 00 00 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 00 00 o.p.e.n.........w.i.n.d.o.w.s... 00000440 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 73 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 65 00 p.r.o.g.r.a.m.s.........e.x.t.e. 00000460 6E 00 73 00 69 00 6F 00 6E 00 73 00 00 00 00 00 5C 00 63 00 6F 00 6D 00 6D 00 61 00 6E 00 64 00 n.s.i.o.n.s.....\.c.o.m.m.a.n.d. 00000480 00 00 00 00 00 00 00 00 5C 00 64 00 64 00 65 00 65 00 78 00 65 00 63 00 00 00 00 00 00 00 00 00 ........\.d.d.e.e.x.e.c......... 000004A0 53 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 5C 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 S.o.f.t.w.a.r.e.\.M.i.c.r.o.s.o. 000004C0 66 00 74 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 43 00 75 00 f.t.\.W.i.n.d.o.w.s. .N.T.\.C.u. 000004E0 72 00 72 00 65 00 6E 00 74 00 56 00 65 00 72 00 73 00 69 00 6F 00 6E 00 5C 00 45 00 78 00 74 00 r.r.e.n.t.V.e.r.s.i.o.n.\.E.x.t. 00000500 65 00 6E 00 73 00 69 00 6F 00 6E 00 73 00 5C 00 00 00 00 00 00 00 00 00 64 00 64 00 65 00 63 00 e.n.s.i.o.n.s.\.........d.d.e.c. 00000520 6F 00 6E 00 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 o.n.v........................... 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2E 00 00 00 73 00 74 00 61 00 74 00 69 00 63 00 ....................s.t.a.t.i.c. 00000560 00 00 00 00 5C 00 69 00 66 00 65 00 78 00 65 00 63 00 00 00 53 00 79 00 73 00 74 00 65 00 6D 00 ....\.i.f.e.x.e.c...S.y.s.t.e.m. 00000580 00 00 00 00 5C 00 74 00 6F 00 70 00 69 00 63 00 00 00 00 00 5C 00 61 00 70 00 70 00 6C 00 69 00 ....\.t.o.p.i.c.....\.a.p.p.l.i. 000005A0 63 00 61 00 74 00 69 00 6F 00 6E 00 00 00 00 00 5C 00 73 00 68 00 65 00 6C 00 6C 00 5C 00 00 00 c.a.t.i.o.n.....\.s.h.e.l.l.\... 000005C0 00 00 00 00 64 00 6C 00 6C 00 00 00 20 00 00 00 00 00 00 00 41 00 43 00 54 00 49 00 56 00 41 00 ....d.l.l... .......A.C.T.I.V.A. 000005E0 54 00 45 00 53 00 48 00 45 00 4C 00 4C 00 57 00 49 00 4E 00 44 00 4F 00 57 00 00 00 4F 00 54 00 T.E.S.H.E.L.L.W.I.N.D.O.W...O.T. 00000600 48 00 45 00 52 00 57 00 49 00 4E 00 44 00 4F 00 57 00 44 00 45 00 53 00 54 00 52 00 4F 00 59 00 H.E.R.W.I.N.D.O.W.D.E.S.T.R.O.Y. 00000620 45 00 44 00 00 00 00 00 4F 00 54 00 48 00 45 00 52 00 57 00 49 00 4E 00 44 00 4F 00 57 00 43 00 E.D.....O.T.H.E.R.W.I.N.D.O.W.C. 00000640 52 00 45 00 41 00 54 00 45 00 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 R.E.A.T.E.D..................... 00000660 2E 00 45 00 58 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..E.X.E......................... 00000680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5C 00 00 00 00 00 00 00 ........................\....... 00000880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................