============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 A2 56 FA 77 22 F3 F9 77 5C 04 FA 77 DE 4F F8 77 93 55 FA 77 A2 4E FA 77 B0 44 FA 77 14 55 FA 77 óV·w"≤∙w\♦·w▐O°wôU·wóN·w░D·w¶U·w 00000020 0F 56 FA 77 45 55 FA 77 D0 C5 F9 77 7A C1 F9 77 EE C2 F9 77 C6 C2 F9 77 E0 43 FA 77 25 45 FA 77 ☼V·wEU·w╨┼∙wz┴∙wε┬∙w╞┬∙wαC·w%E·w 00000040 8E 57 FA 77 1C 8E F9 77 A0 FC F9 77 A2 C3 F9 77 00 00 00 00 2A E4 F3 77 20 47 F3 77 46 4E F3 77 ÄW·w∟Ä∙wáⁿ∙wó├∙w....*Σ≤w G≤wFN≤w 00000060 65 E8 F2 77 0D 3F F2 77 BC 64 F3 77 0B 21 F2 77 3E 40 F3 77 C6 3B F2 77 05 3A F2 77 88 2E F3 77 eΦ≥w♪?≥w╝d≤w♂!≥w>@≤w╞;≥w♣:≥wê.≤w 00000080 9B 2E F3 77 39 5E F2 77 A9 6B F2 77 D6 A1 F3 77 A2 2D F5 77 DE 2D F3 77 30 1C F2 77 45 EC F2 77 ¢.≤w9^≥w⌐k≥w╓í≤wó-⌡w▐-≤w0∟≥wE∞≥w 000000A0 BB F5 F2 77 D2 10 F3 77 35 DF F2 77 1B 21 F2 77 8B A8 F3 77 E0 73 F2 77 1A D0 F4 77 39 CF F4 77 ╗⌡≥w╥►≤w5▀≥w←!≥wï¿≤wαs≥w→╨⌠w9╧⌠w 000000C0 30 26 F3 77 93 24 F3 77 3A 1A F3 77 06 45 F3 77 34 21 F3 77 80 1F F3 77 3F 2D F3 77 B1 34 F5 77 0&≤wô$≤w:→≤w♠E≤w4!≤wÇ▼≤w?-≤w▒4⌡w 000000E0 C3 43 F3 77 27 3C F3 77 49 9E F2 77 AC 3F F3 77 2C 9E F2 77 2B 5F F2 77 13 7D F2 77 0A 97 F2 77 ├C≤w'<≤wI₧≥w¼?≤w,₧≥w+_≥w‼}≥w◙ù≥w 00000100 E4 96 F2 77 C6 7A F2 77 1A 82 F3 77 35 C9 F3 77 38 7A F2 77 8F 4F F2 77 AF A2 F3 77 F3 A3 F3 77 Σû≥w╞z≥w→é≤w5╔≤w8z≥wÅO≥w»ó≤w≤ú≤w 00000120 3D 2B F3 77 CF EF F2 77 07 2D F3 77 01 1C F3 77 0E FC F2 77 AF 79 F2 77 50 78 F2 77 5A E2 F2 77 =+≤w╧∩≥w•-≤w☺∟≤w♫ⁿ≥w»y≥wPx≥wZΓ≥w 00000140 61 A2 F3 77 1D 40 F3 77 B4 2C F3 77 B0 47 F3 77 AC 2B F3 77 41 4E F3 77 2B 22 F3 77 19 3E F2 77 aó≤w↔@≤w┤,≤w░G≤w¼+≤wAN≤w+"≤w↓>≥w 00000160 1A 5E F2 77 85 3D F3 77 6F 1D F2 77 4C 5E F2 77 00 00 00 00 47 FB EA 77 66 AD EC 77 AD CF EA 77 →^≥wà=≤wo↔≥wL^≥w....G√Ωwf¡∞w¡╧Ωw 00000180 80 D5 EA 77 9C 13 EA 77 C5 7B EA 77 8A 5A EA 77 E8 3F EA 77 0E C3 EA 77 BD C1 EA 77 AB 4A EA 77 Ç╒Ωw£‼Ωw┼{ΩwèZΩwΦ?Ωw♫├Ωw╜┴Ωw½JΩw 000001A0 C9 C0 EA 77 E4 7E EA 77 93 6F EA 77 B5 71 EA 77 33 C2 EA 77 D7 71 EA 77 75 19 EB 77 22 AB EA 77 ╔└ΩwΣ~ΩwôoΩw╡qΩw3┬Ωw╫qΩwu↓δw"½Ωw 000001C0 33 25 EA 77 8D 1C EB 77 08 26 EA 77 51 73 EA 77 89 4A EA 77 62 7E EA 77 27 18 EC 77 DB 14 EC 77 3%Ωwì∟δw◘&ΩwQsΩwëJΩwb~Ωw'↑∞w█¶∞w 000001E0 A6 D5 EA 77 05 DC EA 77 00 10 EA 77 9A 57 EA 77 47 46 EA 77 BF 27 EB 77 CB 7A EA 77 1C 3F EA 77 ª╒Ωw♣▄Ωw.►ΩwÜWΩwGFΩw┐'δw╦zΩw∟?Ωw 00000200 FD D5 EA 77 4D BD EA 77 3E B5 EA 77 00 7E EA 77 54 76 EA 77 40 4A EA 77 07 BD EA 77 1B 07 EB 77 ²╒ΩwM╜Ωw>╡Ωw.~ΩwTvΩw@JΩw•╜Ωw←•δw 00000220 6B E0 EB 77 CE DD EA 77 26 7E EA 77 5A B5 EA 77 4C 06 EB 77 10 BC EA 77 CA BB EA 77 71 B1 EB 77 kαδw╬▌Ωw&~ΩwZ╡ΩwL♠δw►╝Ωw╩╗Ωwq▒δw 00000240 AB 35 EA 77 EB 89 EB 77 90 FB EA 77 2D 07 EB 77 57 F7 EA 77 D6 B3 EA 77 50 7C EA 77 BC 7F EA 77 ½5ΩwδëδwÉ√Ωw-•δwW≈Ωw╓│ΩwP|Ωw╝⌂Ωw 00000260 4E AE EA 77 00 00 00 00 6F 11 EE 77 EF 58 EE 77 00 59 EE 77 20 26 EE 77 79 2E EE 77 00 00 00 00 N«Ωw....o◄εw∩Xεw.Yεw &εwy.εw.... 00000280 49 39 E3 77 7D 54 E2 77 16 36 E3 77 FC 1D E3 77 4C 1B E3 77 01 3F E3 77 1E 3F E2 77 73 3F E2 77 I9πw}TΓw▬6πwⁿ↔πwL←πw☺?πw▲?Γws?Γw 000002A0 21 22 E3 77 BC 2A E3 77 00 00 00 00 00 00 00 00 FF FF FF FF B9 60 DE 77 BF 60 DE 77 00 00 00 00 !"πw╝*πw........ ╣`▐w┐`▐w.... 000002C0 FF FF FF FF EB 74 DE 77 F1 74 DE 77 00 00 00 00 FF FF FF FF CB 77 DE 77 D1 77 DE 77 00 00 00 00 δt▐w±t▐w.... ╦w▐w╤w▐w.... 000002E0 FF FF FF FF 8F 81 DE 77 95 81 DE 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Åü▐wòü▐w.................... 00000300 00 00 00 00 D4 D8 57 30 00 00 00 00 EC 97 00 00 01 00 00 00 7A 00 00 00 7A 00 00 00 28 93 00 00 ....╘╪W0....∞ù..☺...z...z...(ô.. 00000320 10 95 00 00 F8 96 00 00 ED 80 00 00 F5 16 00 00 01 2A 00 00 74 86 00 00 67 86 00 00 A8 86 00 00 ►ò..°û..φÇ..⌡▬..☺*..tå..gå..¿å.. 00000340 79 5F 00 00 D3 14 00 00 00 10 00 00 52 48 00 00 1A 48 00 00 1A 48 00 00 42 46 00 00 36 48 00 00 y_..╙¶...►..RH..→H..→H..BF..6H.. 00000360 0E 46 00 00 CF 5F 00 00 25 74 00 00 02 77 00 00 FD 74 00 00 FE 73 00 00 88 66 00 00 ED 84 00 00 ♫F..╧_..%t..☻w..²t..■s..êf..φä.. 00000380 ED 84 00 00 FC 84 00 00 57 73 00 00 20 6F 00 00 3F 64 00 00 C6 67 00 00 5F 48 00 00 7A 5B 00 00 φä..ⁿä..Ws.. o..?d..╞g.._H..z[.. 000003A0 B0 5C 00 00 3F 63 00 00 66 67 00 00 E8 66 00 00 81 86 00 00 8E 86 00 00 37 58 00 00 63 58 00 00 ░\..?c..fg..Φf..üå..Äå..7X..cX.. 000003C0 7D 19 00 00 0B 58 00 00 D9 39 00 00 F9 5D 00 00 0B 85 00 00 18 85 00 00 27 85 00 00 27 85 00 00 }↓..♂X..┘9..∙]..♂à..↑à..'à..'à.. 000003E0 36 85 00 00 45 85 00 00 52 85 00 00 52 85 00 00 64 85 00 00 76 85 00 00 88 85 00 00 95 85 00 00 6à..Eà..Rà..Rà..dà..và..êà..òà.. 00000400 A7 85 00 00 A7 85 00 00 B6 85 00 00 C5 85 00 00 D7 85 00 00 E9 85 00 00 E9 85 00 00 F8 85 00 00 ºà..ºà..╢à..┼à..╫à..Θà..Θà..°à.. 00000420 07 86 00 00 9B 86 00 00 19 86 00 00 67 84 00 00 AA 84 00 00 D2 10 00 00 68 22 00 00 B6 17 00 00 •å..¢å..↓å..gä..¬ä..╥►..h"..╢↨.. 00000440 6B 82 00 00 44 83 00 00 09 82 00 00 16 84 00 00 CF 18 00 00 D6 21 00 00 88 10 00 00 C0 80 00 00 ké..Dâ..○é..▬ä..╧↑..╓!..ê►..└Ç.. 00000460 BE 18 00 00 2A 82 00 00 AA 81 00 00 C1 12 00 00 18 3C 00 00 E2 3C 00 00 FC 5A 00 00 2B 86 00 00 ╛↑..*é..¬ü..┴↕..↑<..Γ<..ⁿZ..+å.. 00000480 2B 86 00 00 3A 86 00 00 C6 5A 00 00 38 5D 00 00 49 86 00 00 49 86 00 00 58 86 00 00 6E 78 00 00 +å..:å..╞Z..8]..Iå..Iå..Xå..nx.. 000004A0 25 79 00 00 E8 78 00 00 0A 21 00 00 66 7A 00 00 20 7B 00 00 BD 7A 00 00 05 7A 00 00 77 7B 00 00 %y..Φx..◙!..fz.. {..╜z..♣z..w{.. 000004C0 9C 21 00 00 25 7C 00 00 1B 7D 00 00 A3 7C 00 00 AB 7B 00 00 99 7D 00 00 7F 14 00 00 96 78 00 00 £!..%|..←}..ú|..½{..Ö}..⌂¶..ûx.. 000004E0 BB 79 00 00 5E 79 00 00 29 14 00 00 C7 7E 00 00 36 80 00 00 A2 7F 00 00 6D 7E 00 00 2B 7E 00 00 ╗y..^y..)¶..╟~..6Ç..ó⌂..m~..+~.. 00000500 60 7F 00 00 1D 7F 00 00 E8 7D 00 00 32 5B 00 00 F8 97 00 00 06 98 00 00 14 98 00 00 27 98 00 00 `⌂..↔⌂..Φ}..2[..°ù..♠ÿ..¶ÿ..'ÿ.. 00000520 40 98 00 00 4F 98 00 00 61 98 00 00 75 98 00 00 89 98 00 00 99 98 00 00 A4 98 00 00 B2 98 00 00 @ÿ..Oÿ..aÿ..uÿ..ëÿ..Öÿ..ñÿ..▓ÿ.. 00000540 C1 98 00 00 D3 98 00 00 E2 98 00 00 F1 98 00 00 FF 98 00 00 16 99 00 00 2F 99 00 00 48 99 00 00 ┴ÿ..╙ÿ..Γÿ..±ÿ.. ÿ..▬Ö../Ö..HÖ.. 00000560 5F 99 00 00 6C 99 00 00 7A 99 00 00 89 99 00 00 98 99 00 00 AC 99 00 00 C0 99 00 00 CD 99 00 00 _Ö..lÖ..zÖ..ëÖ..ÿÖ..¼Ö..└Ö..═Ö.. 00000580 E7 99 00 00 F6 99 00 00 06 9A 00 00 16 9A 00 00 23 9A 00 00 3C 9A 00 00 55 9A 00 00 63 9A 00 00 τÖ..÷Ö..♠Ü..▬Ü..#Ü..<Ü..UÜ..cÜ.. 000005A0 7D 9A 00 00 8F 9A 00 00 A3 9A 00 00 B7 9A 00 00 C9 9A 00 00 E3 9A 00 00 F5 9A 00 00 07 9B 00 00 }Ü..ÅÜ..úÜ..╖Ü..╔Ü..πÜ..⌡Ü..•¢.. 000005C0 17 9B 00 00 29 9B 00 00 3C 9B 00 00 4F 9B 00 00 5E 9B 00 00 6E 9B 00 00 7F 9B 00 00 90 9B 00 00 ↨¢..)¢..<¢..O¢..^¢..n¢..⌂¢..É¢.. 000005E0 9E 9B 00 00 B1 9B 00 00 C4 9B 00 00 D2 9B 00 00 E1 9B 00 00 F0 9B 00 00 06 9C 00 00 12 9C 00 00 ₧¢..▒¢..─¢..╥¢..ߢ..≡¢..♠£..↕£.. 00000600 26 9C 00 00 3B 9C 00 00 50 9C 00 00 6B 9C 00 00 82 9C 00 00 8F 9C 00 00 9D 9C 00 00 AD 9C 00 00 &£..;£..P£..k£..é£..Å£..¥£..¡£.. 00000620 BD 9C 00 00 CB 9C 00 00 DB 9C 00 00 E8 9C 00 00 F5 9C 00 00 04 9D 00 00 0F 9D 00 00 1C 9D 00 00 ╜£..╦£..█£..Φ£..⌡£..♦¥..☼¥..∟¥.. 00000640 27 9D 00 00 39 9D 00 00 4A 9D 00 00 5B 9D 00 00 6A 9D 00 00 7A 9D 00 00 8A 9D 00 00 96 9D 00 00 '¥..9¥..J¥..[¥..j¥..z¥..è¥..û¥.. 00000660 A2 9D 00 00 B0 9D 00 00 BF 9D 00 00 CF 9D 00 00 DF 9D 00 00 ED 9D 00 00 FB 9D 00 00 0C 9E 00 00 ó¥..░¥..┐¥..╧¥..▀¥..φ¥..√¥..♀₧.. 00000680 1E 9E 00 00 30 9E 00 00 38 9E 00 00 41 9E 00 00 4A 9E 00 00 52 9E 00 00 5B 9E 00 00 65 9E 00 00 ▲₧..0₧..8₧..A₧..J₧..R₧..[₧..e₧.. 000006A0 6F 9E 00 00 78 9E 00 00 81 9E 00 00 8A 9E 00 00 93 9E 00 00 9D 9E 00 00 A7 9E 00 00 B0 9E 00 00 o₧..x₧..ü₧..è₧..ô₧..¥₧..º₧..░₧.. 000006C0 B9 9E 00 00 C2 9E 00 00 CB 9E 00 00 D5 9E 00 00 DF 9E 00 00 E8 9E 00 00 F1 9E 00 00 FB 9E 00 00 ╣₧..┬₧..╦₧..╒₧..▀₧..Φ₧..±₧..√₧.. 000006E0 05 9F 00 00 0E 9F 00 00 16 9F 00 00 1F 9F 00 00 28 9F 00 00 30 9F 00 00 00 00 01 00 02 00 03 00 ♣ƒ..♫ƒ..▬ƒ..▼ƒ..(ƒ..0ƒ....☺.☻.♥. 00000700 04 00 05 00 06 00 07 00 08 00 09 00 0A 00 0B 00 0C 00 0D 00 0E 00 0F 00 10 00 11 00 12 00 13 00 ♦.♣.♠.•.◘.○.◙.♂.♀.♪.♫.☼.►.◄.↕.‼. 00000720 14 00 15 00 16 00 17 00 18 00 19 00 1A 00 1B 00 1C 00 1D 00 1E 00 1F 00 20 00 21 00 22 00 23 00 ¶.§.▬.↨.↑.↓.→.←.∟.↔.▲.▼. .!.".#. 00000740 24 00 25 00 26 00 27 00 28 00 29 00 2A 00 2B 00 2C 00 2D 00 2E 00 2F 00 30 00 31 00 32 00 33 00 $.%.&.'.(.).*.+.,.-.../.0.1.2.3. 00000760 34 00 35 00 36 00 37 00 38 00 39 00 3A 00 3B 00 3C 00 3D 00 3E 00 3F 00 40 00 41 00 42 00 43 00 4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C. 00000780 44 00 45 00 46 00 47 00 48 00 49 00 4A 00 4B 00 4C 00 4D 00 4E 00 4F 00 50 00 51 00 52 00 53 00 D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S. 000007A0 54 00 55 00 56 00 57 00 58 00 59 00 5A 00 5B 00 5C 00 5D 00 5E 00 5F 00 60 00 61 00 62 00 63 00 T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c. 000007C0 64 00 65 00 66 00 67 00 68 00 69 00 6A 00 6B 00 6C 00 6D 00 6E 00 6F 00 70 00 71 00 72 00 73 00 d.e.f.g.h.i.j.k.l.m.n.o.p.q.r.s. 000007E0 74 00 75 00 76 00 77 00 78 00 79 00 53 48 45 4C 4C 33 32 2E 64 6C 6C 00 43 68 65 63 6B 45 73 63 t.u.v.w.x.y.SHELL32.dll.CheckEsc 00000800 61 70 65 73 41 00 43 68 65 63 6B 45 73 63 61 70 65 73 57 00 43 6F 6D 6D 61 6E 64 4C 69 6E 65 54 apesA.CheckEscapesW.CommandLineT 00000820 6F 41 72 67 76 57 00 43 6F 6E 74 72 6F 6C 5F 46 69 6C 6C 43 61 63 68 65 5F 52 75 6E 44 4C 4C 00 oArgvW.Control_FillCache_RunDLL. 00000840 43 6F 6E 74 72 6F 6C 5F 52 75 6E 44 4C 4C 00 44 6C 6C 47 65 74 43 6C 61 73 73 4F 62 6A 65 63 74 Control_RunDLL.DllGetClassObject 00000860 00 44 6F 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 75 62 73 74 41 00 44 6F 45 6E 76 69 72 6F 6E 6D 65 .DoEnvironmentSubstA.DoEnvironme 00000880 6E 74 53 75 62 73 74 57 00 44 72 61 67 41 63 63 65 70 74 46 69 6C 65 73 00 44 72 61 67 46 69 6E ntSubstW.DragAcceptFiles.DragFin 000008A0 69 73 68 00 44 72 61 67 51 75 65 72 79 46 69 6C 65 00 44 72 61 67 51 75 65 72 79 46 69 6C 65 41 ish.DragQueryFile.DragQueryFileA 000008C0 00 44 72 61 67 51 75 65 72 79 46 69 6C 65 41 6F 72 57 00 44 72 61 67 51 75 65 72 79 46 69 6C 65 .DragQueryFileAorW.DragQueryFile 000008E0 57 00 44 72 61 67 51 75 65 72 79 50 6F 69 6E 74 00 44 75 70 6C 69 63 61 74 65 49 63 6F 6E 00 45 W.DragQueryPoint.DuplicateIcon.E 00000900 78 74 72 61 63 74 41 73 73 6F 63 69 61 74 65 64 49 63 6F 6E 41 00 45 78 74 72 61 63 74 41 73 73 xtractAssociatedIconA.ExtractAss 00000920 6F 63 69 61 74 65 64 49 63 6F 6E 45 78 41 00 45 78 74 72 61 63 74 41 73 73 6F 63 69 61 74 65 64 ociatedIconExA.ExtractAssociated 00000940 49 63 6F 6E 45 78 57 00 45 78 74 72 61 63 74 41 73 73 6F 63 69 61 74 65 64 49 63 6F 6E 57 00 45 IconExW.ExtractAssociatedIconW.E 00000960 78 74 72 61 63 74 49 63 6F 6E 41 00 45 78 74 72 61 63 74 49 63 6F 6E 45 78 00 45 78 74 72 61 63 xtractIconA.ExtractIconEx.Extrac 00000980 74 49 63 6F 6E 45 78 41 00 45 78 74 72 61 63 74 49 63 6F 6E 45 78 57 00 45 78 74 72 61 63 74 49 tIconExA.ExtractIconExW.ExtractI 000009A0 63 6F 6E 52 65 73 49 6E 66 6F 41 00 45 78 74 72 61 63 74 49 63 6F 6E 52 65 73 49 6E 66 6F 57 00 conResInfoA.ExtractIconResInfoW. 000009C0 45 78 74 72 61 63 74 49 63 6F 6E 57 00 45 78 74 72 61 63 74 56 65 72 73 69 6F 6E 52 65 73 6F 75 ExtractIconW.ExtractVersionResou 000009E0 72 63 65 31 36 57 00 46 69 6E 64 45 78 65 44 6C 67 50 72 6F 63 00 46 69 6E 64 45 78 65 63 75 74 rce16W.FindExeDlgProc.FindExecut 00000A00 61 62 6C 65 41 00 46 69 6E 64 45 78 65 63 75 74 61 62 6C 65 57 00 46 72 65 65 49 63 6F 6E 4C 69 ableA.FindExecutableW.FreeIconLi 00000A20 73 74 00 49 6E 74 65 72 6E 61 6C 45 78 74 72 61 63 74 49 63 6F 6E 4C 69 73 74 41 00 49 6E 74 65 st.InternalExtractIconListA.Inte 00000A40 72 6E 61 6C 45 78 74 72 61 63 74 49 63 6F 6E 4C 69 73 74 57 00 4F 70 65 6E 41 73 5F 52 75 6E 44 rnalExtractIconListW.OpenAs_RunD 00000A60 4C 4C 00 50 72 69 6E 74 65 72 73 47 65 74 43 6F 6D 6D 61 6E 64 5F 52 75 6E 44 4C 4C 00 52 65 61 LL.PrintersGetCommand_RunDLL.Rea 00000A80 6C 53 68 65 6C 6C 45 78 65 63 75 74 65 41 00 52 65 61 6C 53 68 65 6C 6C 45 78 65 63 75 74 65 45 lShellExecuteA.RealShellExecuteE 00000AA0 78 41 00 52 65 61 6C 53 68 65 6C 6C 45 78 65 63 75 74 65 45 78 57 00 52 65 61 6C 53 68 65 6C 6C xA.RealShellExecuteExW.RealShell 00000AC0 45 78 65 63 75 74 65 57 00 52 65 67 65 6E 65 72 61 74 65 55 73 65 72 45 6E 76 69 72 6F 6E 6D 65 ExecuteW.RegenerateUserEnvironme 00000AE0 6E 74 00 52 65 67 69 73 74 65 72 53 68 65 6C 6C 48 6F 6F 6B 00 53 48 41 64 64 54 6F 52 65 63 65 nt.RegisterShellHook.SHAddToRece 00000B00 6E 74 44 6F 63 73 00 53 48 41 70 70 42 61 72 4D 65 73 73 61 67 65 00 53 48 42 72 6F 77 73 65 46 ntDocs.SHAppBarMessage.SHBrowseF 00000B20 6F 72 46 6F 6C 64 65 72 00 53 48 42 72 6F 77 73 65 46 6F 72 46 6F 6C 64 65 72 41 00 53 48 42 72 orFolder.SHBrowseForFolderA.SHBr 00000B40 6F 77 73 65 46 6F 72 46 6F 6C 64 65 72 57 00 53 48 43 68 61 6E 67 65 4E 6F 74 69 66 79 00 53 48 owseForFolderW.SHChangeNotify.SH 00000B60 46 69 6C 65 4F 70 65 72 61 74 69 6F 6E 00 53 48 46 69 6C 65 4F 70 65 72 61 74 69 6F 6E 41 00 53 FileOperation.SHFileOperationA.S 00000B80 48 46 69 6C 65 4F 70 65 72 61 74 69 6F 6E 57 00 53 48 46 6F 72 6D 61 74 44 72 69 76 65 00 53 48 HFileOperationW.SHFormatDrive.SH 00000BA0 46 72 65 65 4E 61 6D 65 4D 61 70 70 69 6E 67 73 00 53 48 47 65 74 44 65 73 6B 74 6F 70 46 6F 6C FreeNameMappings.SHGetDesktopFol 00000BC0 64 65 72 00 53 48 47 65 74 46 69 6C 65 49 6E 66 6F 00 53 48 47 65 74 46 69 6C 65 49 6E 66 6F 41 der.SHGetFileInfo.SHGetFileInfoA 00000BE0 00 53 48 47 65 74 46 69 6C 65 49 6E 66 6F 57 00 53 48 47 65 74 49 6E 73 74 61 6E 63 65 45 78 70 .SHGetFileInfoW.SHGetInstanceExp 00000C00 6C 6F 72 65 72 00 53 48 47 65 74 4D 61 6C 6C 6F 63 00 53 48 47 65 74 50 61 74 68 46 72 6F 6D 49 lorer.SHGetMalloc.SHGetPathFromI 00000C20 44 4C 69 73 74 00 53 48 47 65 74 50 61 74 68 46 72 6F 6D 49 44 4C 69 73 74 41 00 53 48 47 65 74 DList.SHGetPathFromIDListA.SHGet 00000C40 50 61 74 68 46 72 6F 6D 49 44 4C 69 73 74 57 00 53 48 47 65 74 53 70 65 63 69 61 6C 46 6F 6C 64 PathFromIDListW.SHGetSpecialFold 00000C60 65 72 4C 6F 63 61 74 69 6F 6E 00 53 48 48 65 6C 70 53 68 6F 72 74 63 75 74 73 5F 52 75 6E 44 4C erLocation.SHHelpShortcuts_RunDL 00000C80 4C 00 53 48 4C 6F 61 64 49 6E 50 72 6F 63 00 53 68 65 43 68 61 6E 67 65 44 69 72 41 00 53 68 65 L.SHLoadInProc.SheChangeDirA.She 00000CA0 43 68 61 6E 67 65 44 69 72 45 78 41 00 53 68 65 43 68 61 6E 67 65 44 69 72 45 78 57 00 53 68 65 ChangeDirExA.SheChangeDirExW.She 00000CC0 43 68 61 6E 67 65 44 69 72 57 00 53 68 65 43 6F 6E 76 65 72 74 50 61 74 68 57 00 53 68 65 46 75 ChangeDirW.SheConvertPathW.SheFu 00000CE0 6C 6C 50 61 74 68 41 00 53 68 65 46 75 6C 6C 50 61 74 68 57 00 53 68 65 47 65 74 43 75 72 44 72 llPathA.SheFullPathW.SheGetCurDr 00000D00 69 76 65 00 53 68 65 47 65 74 44 69 72 41 00 53 68 65 47 65 74 44 69 72 45 78 57 00 53 68 65 47 ive.SheGetDirA.SheGetDirExW.SheG 00000D20 65 74 44 69 72 57 00 53 68 65 47 65 74 50 61 74 68 4F 66 66 73 65 74 57 00 53 68 65 52 65 6D 6F etDirW.SheGetPathOffsetW.SheRemo 00000D40 76 65 51 75 6F 74 65 73 41 00 53 68 65 52 65 6D 6F 76 65 51 75 6F 74 65 73 57 00 53 68 65 53 65 veQuotesA.SheRemoveQuotesW.SheSe 00000D60 74 43 75 72 44 72 69 76 65 00 53 68 65 53 68 6F 72 74 65 6E 50 61 74 68 41 00 53 68 65 53 68 6F tCurDrive.SheShortenPathA.SheSho 00000D80 72 74 65 6E 50 61 74 68 57 00 53 68 65 6C 6C 41 62 6F 75 74 41 00 53 68 65 6C 6C 41 62 6F 75 74 rtenPathW.ShellAboutA.ShellAbout 00000DA0 57 00 53 68 65 6C 6C 45 78 65 63 75 74 65 41 00 53 68 65 6C 6C 45 78 65 63 75 74 65 45 78 00 53 W.ShellExecuteA.ShellExecuteEx.S 00000DC0 68 65 6C 6C 45 78 65 63 75 74 65 45 78 41 00 53 68 65 6C 6C 45 78 65 63 75 74 65 45 78 57 00 53 hellExecuteExA.ShellExecuteExW.S 00000DE0 68 65 6C 6C 45 78 65 63 75 74 65 57 00 53 68 65 6C 6C 48 6F 6F 6B 50 72 6F 63 00 53 68 65 6C 6C hellExecuteW.ShellHookProc.Shell 00000E00 5F 4E 6F 74 69 66 79 49 63 6F 6E 00 53 68 65 6C 6C 5F 4E 6F 74 69 66 79 49 63 6F 6E 41 00 53 68 _NotifyIcon.Shell_NotifyIconA.Sh 00000E20 65 6C 6C 5F 4E 6F 74 69 66 79 49 63 6F 6E 57 00 53 74 72 43 68 72 41 00 53 74 72 43 68 72 49 41 ell_NotifyIconW.StrChrA.StrChrIA 00000E40 00 53 74 72 43 68 72 49 57 00 53 74 72 43 68 72 57 00 53 74 72 43 6D 70 4E 41 00 53 74 72 43 6D .StrChrIW.StrChrW.StrCmpNA.StrCm 00000E60 70 4E 49 41 00 53 74 72 43 6D 70 4E 49 57 00 53 74 72 43 6D 70 4E 57 00 53 74 72 43 70 79 4E 41 pNIA.StrCmpNIW.StrCmpNW.StrCpyNA 00000E80 00 53 74 72 43 70 79 4E 57 00 53 74 72 4E 43 6D 70 41 00 53 74 72 4E 43 6D 70 49 41 00 53 74 72 .StrCpyNW.StrNCmpA.StrNCmpIA.Str 00000EA0 4E 43 6D 70 49 57 00 53 74 72 4E 43 6D 70 57 00 53 74 72 4E 43 70 79 41 00 53 74 72 4E 43 70 79 NCmpIW.StrNCmpW.StrNCpyA.StrNCpy 00000EC0 57 00 53 74 72 52 43 68 72 41 00 53 74 72 52 43 68 72 49 41 00 53 74 72 52 43 68 72 49 57 00 53 W.StrRChrA.StrRChrIA.StrRChrIW.S 00000EE0 74 72 52 43 68 72 57 00 53 74 72 52 53 74 72 41 00 53 74 72 52 53 74 72 49 41 00 53 74 72 52 53 trRChrW.StrRStrA.StrRStrIA.StrRS 00000F00 74 72 49 57 00 53 74 72 52 53 74 72 57 00 53 74 72 53 74 72 41 00 53 74 72 53 74 72 49 41 00 53 trIW.StrRStrW.StrStrA.StrStrIA.S 00000F20 74 72 53 74 72 49 57 00 53 74 72 53 74 72 57 00 57 4F 57 53 68 65 6C 6C 45 78 65 63 75 74 65 00 trStrIW.StrStrW.WOWShellExecute. 00000F40 00 00 00 00 D9 D8 57 30 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 00 D0 00 00 00 00 00 00 ....┘╪W0....♦...►☺.......╨...... 00000F60 D9 D8 57 30 00 00 00 00 02 00 00 00 2C A9 00 00 00 00 00 00 50 49 E7 FF 00 00 00 00 D9 D8 57 30 ┘╪W0....☻...,⌐......PIτ ....┘╪W0 00000F80 00 00 00 00 03 00 00 00 F0 06 00 00 00 00 00 00 C0 95 01 00 00 00 00 00 D9 D8 57 30 00 00 00 00 ....♥...≡♠......└ò☺.....┘╪W0.... 00000FA0 04 00 00 00 10 01 00 00 00 00 00 00 C0 9C 01 00 00 00 00 00 00 00 00 00 01 00 00 00 07 00 00 00 ♦...►☺......└£☺.........☺...•... 00000FC0 C8 20 00 00 00 00 00 00 E0 9D 01 00 00 00 00 00 00 00 00 00 01 00 00 00 08 00 00 00 C8 16 00 00 ╚ ......α¥☺.........☺...◘...╚▬.. 00000FE0 00 00 00 00 C0 BE 01 00 00 00 00 00 00 00 00 00 70 A0 00 00 FF FF FF FF FF FF FF FF 20 A3 00 00 ....└╛☺.........pá.. ú.. 00001000 00 90 00 00 C4 A0 00 00 FF FF FF FF FF FF FF FF A0 A4 00 00 54 90 00 00 E4 A1 00 00 FF FF FF FF .É..─á.. áñ..TÉ..Σí.. 00001020 FF FF FF FF 98 A9 00 00 74 91 00 00 D8 A2 00 00 FF FF FF FF FF FF FF FF C8 AD 00 00 68 92 00 00 ÿ⌐..tæ..╪ó.. ╚¡..hÆ.. 00001040 F0 A2 00 00 FF FF FF FF FF FF FF FF 28 AE 00 00 80 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ≡ó.. («..ÇÆ.............. 00001060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 A3 00 00 3A A3 00 00 54 A3 00 00 60 A3 00 00 ................0ú..:ú..Tú..`ú.. 00001080 74 A3 00 00 80 A3 00 00 88 A3 00 00 94 A3 00 00 A0 A3 00 00 AA A3 00 00 B4 A3 00 00 D0 A3 00 00 tú..Çú..êú..öú..áú..¬ú..┤ú..╨ú.. 000010A0 E8 A3 00 00 04 A4 00 00 20 A4 00 00 2C A4 00 00 38 A4 00 00 42 A4 00 00 62 A4 00 00 7A A4 00 00 Φú..♦ñ.. ñ..,ñ..8ñ..Bñ..bñ..zñ.. 000010C0 00 00 00 00 B0 A4 00 00 C4 A4 00 00 D4 A4 00 00 E4 A4 00 00 F0 A4 00 00 00 A5 00 00 18 A5 00 00 ....░ñ..─ñ..╘ñ..Σñ..≡ñ...Ñ..↑Ñ.. 000010E0 28 A5 00 00 40 A5 00 00 50 A5 00 00 5E A5 00 00 6A A5 00 00 76 A5 00 00 82 A5 00 00 8E A5 00 00 (Ñ..@Ñ..PÑ..^Ñ..jÑ..vÑ..éÑ..ÄÑ.. 00001100 A8 A5 00 00 BE A5 00 00 CA A5 00 00 D8 A5 00 00 E4 A5 00 00 F2 A5 00 00 00 A6 00 00 10 A6 00 00 ¿Ñ..╛Ñ..╩Ñ..╪Ñ..ΣÑ..≥Ñ...ª..►ª.. 00001120 20 A6 00 00 34 A6 00 00 48 A6 00 00 5A A6 00 00 70 A6 00 00 86 A6 00 00 94 A6 00 00 A2 A6 00 00 ª..4ª..Hª..Zª..pª..åª..öª..óª.. 00001140 B2 A6 00 00 C2 A6 00 00 D0 A6 00 00 DC A6 00 00 F2 A6 00 00 04 A7 00 00 14 A7 00 00 2A A7 00 00 ▓ª..┬ª..╨ª..▄ª..≥ª..♦º..¶º..*º.. 00001160 40 A7 00 00 54 A7 00 00 62 A7 00 00 72 A7 00 00 84 A7 00 00 98 A7 00 00 B0 A7 00 00 C2 A7 00 00 @º..Tº..bº..rº..äº..ÿº..░º..┬º.. 00001180 D8 A7 00 00 F0 A7 00 00 00 A8 00 00 1C A8 00 00 38 A8 00 00 42 A8 00 00 54 A8 00 00 60 A8 00 00 ╪º..≡º...¿..∟¿..8¿..B¿..T¿..`¿.. 000011A0 70 A8 00 00 88 A8 00 00 A0 A8 00 00 B4 A8 00 00 C6 A8 00 00 E0 A8 00 00 FC A8 00 00 08 A9 00 00 p¿..ê¿..á¿..┤¿..╞¿..α¿..ⁿ¿..◘⌐.. 000011C0 1A A9 00 00 24 A9 00 00 34 A9 00 00 44 A9 00 00 52 A9 00 00 60 A9 00 00 72 A9 00 00 88 A9 00 00 →⌐..$⌐..4⌐..D⌐..R⌐..`⌐..r⌐..ê⌐.. 000011E0 00 00 00 00 A4 A9 00 00 B6 A9 00 00 C8 A9 00 00 D6 A9 00 00 F0 A9 00 00 00 AA 00 00 0E AA 00 00 ....ñ⌐..╢⌐..╚⌐..╓⌐..≡⌐...¬..♫¬.. 00001200 20 AA 00 00 2C AA 00 00 40 AA 00 00 52 AA 00 00 66 AA 00 00 7C AA 00 00 8A AA 00 00 98 AA 00 00 ¬..,¬..@¬..R¬..f¬..|¬..è¬..ÿ¬.. 00001220 A6 AA 00 00 B8 AA 00 00 CA AA 00 00 DC AA 00 00 E8 AA 00 00 F4 AA 00 00 02 AB 00 00 10 AB 00 00 ª¬..╕¬..╩¬..▄¬..Φ¬..⌠¬..☻½..►½.. 00001240 22 AB 00 00 34 AB 00 00 44 AB 00 00 50 AB 00 00 5E AB 00 00 6A AB 00 00 84 AB 00 00 98 AB 00 00 "½..4½..D½..P½..^½..j½..ä½..ÿ½.. 00001260 A8 AB 00 00 B8 AB 00 00 C8 AB 00 00 D4 AB 00 00 E0 AB 00 00 00 AC 00 00 14 AC 00 00 20 AC 00 00 ¿½..╕½..╚½..╘½..α½...¼..¶¼.. ¼.. 00001280 36 AC 00 00 42 AC 00 00 4E AC 00 00 60 AC 00 00 72 AC 00 00 90 AC 00 00 A2 AC 00 00 B4 AC 00 00 6¼..B¼..N¼..`¼..r¼..ɼ..ó¼..┤¼.. 000012A0 C6 AC 00 00 DA AC 00 00 F6 AC 00 00 0C AD 00 00 28 AD 00 00 38 AD 00 00 50 AD 00 00 5E AD 00 00 ╞¼..┌¼..÷¼..♀¡..(¡..8¡..P¡..^¡.. 000012C0 78 AD 00 00 88 AD 00 00 9A AD 00 00 A6 AD 00 00 B4 AD 00 00 00 00 00 00 D4 AD 00 00 E8 AD 00 00 x¡..ê¡..Ü¡..ª¡..┤¡......╘¡..Φ¡.. 000012E0 F4 AD 00 00 0C AE 00 00 18 AE 00 00 00 00 00 00 38 AE 00 00 4C AE 00 00 60 AE 00 00 80 AE 00 00 ⌠¡..♀«..↑«......8«..L«..`«..Ç«.. 00001300 92 AE 00 00 A0 AE 00 00 B2 AE 00 00 D0 AE 00 00 E8 AE 00 00 F8 AE 00 00 00 00 00 00 00 00 00 00 Æ«..á«..▓«..╨«..Φ«..°«.......... 00001320 6E 74 64 6C 6C 2E 64 6C 6C 00 00 00 00 00 00 00 AD 03 77 63 73 6E 63 70 79 00 9F 01 52 74 6C 49 ntdll.dll.......¡♥wcsncpy.ƒ☺RtlI 00001340 73 4E 61 6D 65 4C 65 67 61 6C 44 4F 53 38 44 6F 74 33 00 00 05 02 52 74 6C 55 6E 77 69 6E 64 00 sNameLegalDOS8Dot3..♣☻RtlUnwind. 00001360 09 01 52 74 6C 41 6C 6C 6F 63 61 74 65 48 65 61 70 00 00 00 A7 03 77 63 73 63 6D 70 00 00 00 00 ○☺RtlAllocateHeap...º♥wcscmp.... 00001380 8C 03 71 73 6F 72 74 00 6E 03 5F 77 63 73 69 63 6D 70 00 00 A5 03 77 63 73 63 61 74 00 00 00 00 î♥qsort.n♥_wcsicmp..Ñ♥wcscat.... 000013A0 AA 03 77 63 73 6C 65 6E 00 00 A8 03 77 63 73 63 70 79 00 00 E3 01 52 74 6C 53 65 74 45 6E 76 69 ¬♥wcslen..¿♥wcscpy..π☺RtlSetEnvi 000013C0 72 6F 6E 6D 65 6E 74 56 61 72 69 61 62 6C 65 00 33 01 52 74 6C 43 72 65 61 74 65 45 6E 76 69 72 ronmentVariable.3☺RtlCreateEnvir 000013E0 6F 6E 6D 65 6E 74 00 00 E1 01 52 74 6C 53 65 74 43 75 72 72 65 6E 74 45 6E 76 69 72 6F 6E 6D 65 onment..ß☺RtlSetCurrentEnvironme 00001400 6E 74 00 00 4B 01 52 74 6C 44 65 73 74 72 6F 79 45 6E 76 69 72 6F 6E 6D 65 6E 74 00 00 00 00 00 nt..K☺RtlDestroyEnvironment..... 00001420 6A 03 5F 73 74 72 6E 69 63 6D 70 00 70 03 5F 77 63 73 6E 69 63 6D 70 00 B1 03 77 63 73 73 74 72 j♥_strnicmp.p♥_wcsnicmp.▒♥wcsstr 00001440 00 00 63 01 52 74 6C 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 5F ..c☺RtlExpandEnvironmentStrings_ 00001460 55 00 92 01 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 C5 01 52 74 6C 51 U.Æ☺RtlInitUnicodeString..┼☺RtlQ 00001480 75 65 72 79 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 69 61 62 6C 65 5F 55 00 00 00 00 00 00 00 ueryEnvironmentVariable_U....... 000014A0 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 00 00 97 00 47 65 74 42 69 6E 61 72 79 54 79 70 65 57 KERNEL32.dll....ù.GetBinaryTypeW 000014C0 00 00 00 00 7D 01 4C 6F 61 64 52 65 73 6F 75 72 63 65 00 00 8B 01 4C 6F 63 6B 52 65 73 6F 75 72 ....}☺LoadResource..ï☺LockResour 000014E0 63 65 00 00 75 00 46 69 6E 64 43 6C 6F 73 65 00 84 01 4C 6F 63 61 6C 4C 6F 63 6B 00 00 00 00 00 ce..u.FindClose.ä☺LocalLock..... 00001500 3D 01 47 65 74 57 69 6E 64 6F 77 73 44 69 72 65 63 74 6F 72 79 57 00 00 FD 01 53 65 74 4C 61 73 =☺GetWindowsDirectoryW..²☺SetLas 00001520 74 45 72 72 6F 72 00 00 EA 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 57 00 00 00 00 tError..Ω.GetModuleFileNameW.... 00001540 82 01 4C 6F 63 61 6C 46 72 65 65 00 00 00 00 00 7E 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 67 02 é☺LocalFree.....~☺LocalAlloc..g☻ 00001560 6C 73 74 72 63 61 74 57 00 00 76 02 6C 73 74 72 6C 65 6E 57 00 00 70 02 6C 73 74 72 63 70 79 57 lstrcatW..v☻lstrlenW..p☻lstrcpyW 00001580 00 00 6D 02 6C 73 74 72 63 6D 70 69 57 00 D4 00 47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 ..m☻lstrcmpiW.╘.GetEnvironmentVa 000015A0 72 69 61 62 6C 65 57 00 93 01 4D 75 6C 74 69 42 79 74 65 54 6F 57 69 64 65 43 68 61 72 00 75 02 riableW.ô☺MultiByteToWideChar.u☻ 000015C0 6C 73 74 72 6C 65 6E 41 00 00 16 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 B8 01 52 65 61 64 46 69 lstrlenA..▬.CloseHandle.╕☺ReadFi 000015E0 6C 65 00 00 DA 00 47 65 74 46 69 6C 65 53 69 7A 65 00 2E 00 43 72 65 61 74 65 46 69 6C 65 57 00 le..┌.GetFileSize...CreateFileW. 00001600 F2 01 53 65 74 45 72 72 6F 72 4D 6F 64 65 00 00 E1 00 47 65 74 4C 61 73 74 45 72 72 6F 72 00 00 ≥☺SetErrorMode..ß.GetLastError.. 00001620 C4 00 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73 73 00 A4 00 47 65 74 43 6F 6D 70 75 74 65 ─.GetCurrentProcess.ñ.GetCompute 00001640 72 4E 61 6D 65 57 00 00 E4 00 47 65 74 4C 6F 63 61 6C 65 49 6E 66 6F 57 00 00 34 01 47 65 74 55 rNameW..Σ.GetLocaleInfoW..4☺GetU 00001660 73 65 72 44 65 66 61 75 6C 74 4C 43 49 44 00 00 4C 01 47 6C 6F 62 61 6C 4D 65 6D 6F 72 79 53 74 serDefaultLCID..L☺GlobalMemorySt 00001680 61 74 75 73 00 00 47 01 47 6C 6F 62 61 6C 46 72 65 65 00 00 40 01 47 6C 6F 62 61 6C 41 6C 6C 6F atus..G☺GlobalFree..@☺GlobalAllo 000016A0 63 00 39 01 47 65 74 56 65 72 73 69 6F 6E 45 78 57 00 51 01 47 6C 6F 62 61 6C 55 6E 6C 6F 63 6B c.9☺GetVersionExW.Q☺GlobalUnlock 000016C0 00 00 4B 01 47 6C 6F 62 61 6C 4C 6F 63 6B 00 00 6F 02 6C 73 74 72 63 70 79 41 00 00 42 02 57 69 ..K☺GlobalLock..o☻lstrcpyA..B☻Wi 000016E0 64 65 43 68 61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 03 01 47 65 74 50 72 6F 63 41 64 64 72 65 deCharToMultiByte.♥☺GetProcAddre 00001700 73 73 00 00 7B 01 4C 6F 61 64 4C 69 62 72 61 72 79 57 00 00 5B 02 57 72 69 74 65 50 72 6F 66 69 ss..{☺LoadLibraryW..[☻WriteProfi 00001720 6C 65 53 74 72 69 6E 67 57 00 8D 00 46 72 65 65 4C 69 62 72 61 72 79 00 00 00 00 00 00 00 00 00 leStringW.ì.FreeLibrary......... 00001740 10 01 47 65 74 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 57 00 CC 01 53 65 61 72 63 68 50 61 74 68 ►☺GetProfileStringW.╠☺SearchPath 00001760 57 00 30 01 47 65 74 54 69 63 6B 43 6F 75 6E 74 00 00 3F 01 47 6C 6F 62 61 6C 41 64 64 41 74 6F W.0☺GetTickCount..?☺GlobalAddAto 00001780 6D 57 00 00 42 01 47 6C 6F 62 61 6C 44 65 6C 65 74 65 41 74 6F 6D 00 00 EC 01 53 65 74 43 75 72 mW..B☺GlobalDeleteAtom..∞☺SetCur 000017A0 72 65 6E 74 44 69 72 65 63 74 6F 72 79 57 00 00 38 00 43 72 65 61 74 65 50 72 6F 63 65 73 73 57 rentDirectoryW..8.CreateProcessW 000017C0 00 00 C7 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 49 64 00 00 C3 00 47 65 74 43 75 72 ..╟.GetCurrentThreadId..├.GetCur 000017E0 72 65 6E 74 44 69 72 65 63 74 6F 72 79 57 00 00 85 01 4C 6F 63 61 6C 52 65 41 6C 6C 6F 63 00 00 rentDirectoryW..à☺LocalReAlloc.. 00001800 65 00 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 41 00 66 00 45 78 e.ExpandEnvironmentStringsA.f.Ex 00001820 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 57 00 63 02 5F 6C 72 65 61 64 pandEnvironmentStringsW.c☻_lread 00001840 00 00 F8 01 53 65 74 46 69 6C 65 50 6F 69 6E 74 65 72 00 00 6C 02 6C 73 74 72 63 6D 70 69 41 00 ..°☺SetFilePointer..l☻lstrcmpiA. 00001860 4D 01 47 6C 6F 62 61 6C 52 65 41 6C 6C 6F 63 00 D8 00 47 65 74 46 69 6C 65 41 74 74 72 69 62 75 M☺GlobalReAlloc.╪.GetFileAttribu 00001880 74 65 73 57 00 00 00 00 DE 00 47 65 74 46 75 6C 6C 50 61 74 68 4E 61 6D 65 57 00 00 00 00 00 00 tesW....▐.GetFullPathNameW...... 000018A0 DD 00 47 65 74 46 75 6C 6C 50 61 74 68 4E 61 6D 65 41 00 00 7A 00 46 69 6E 64 46 69 72 73 74 46 ▌.GetFullPathNameA..z.FindFirstF 000018C0 69 6C 65 57 00 00 F1 01 53 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 69 61 62 6C 65 57 00 ileW..±☺SetEnvironmentVariableW. 000018E0 48 00 44 69 73 61 62 6C 65 54 68 72 65 61 64 4C 69 62 72 61 72 79 43 61 6C 6C 73 00 69 02 6C 73 H.DisableThreadLibraryCalls.i☻ls 00001900 74 72 63 6D 70 41 00 00 17 02 53 69 7A 65 6F 66 52 65 73 6F 75 72 63 65 00 00 5F 02 5F 6C 63 6C trcmpA..↨☻SizeofResource.._☻_lcl 00001920 6F 73 65 00 8F 00 46 72 65 65 52 65 73 6F 75 72 63 65 00 00 4E 01 47 6C 6F 62 61 6C 53 69 7A 65 ose.Å.FreeResource..N☺GlobalSize 00001940 00 00 00 00 88 01 4C 6F 63 61 6C 55 6E 6C 6F 63 6B 00 6A 02 6C 73 74 72 63 6D 70 57 00 00 00 00 ....ê☺LocalUnlock.j☻lstrcmpW.... 00001960 7A 01 4C 6F 61 64 4C 69 62 72 61 72 79 45 78 57 00 00 57 00 45 6E 75 6D 52 65 73 6F 75 72 63 65 z☺LoadLibraryExW..W.EnumResource 00001980 4E 61 6D 65 73 57 00 00 81 00 46 69 6E 64 52 65 73 6F 75 72 63 65 57 00 55 53 45 52 33 32 2E 64 NamesW..ü.FindResourceW.USER32.d 000019A0 6C 6C 00 00 8B 00 44 69 61 6C 6F 67 42 6F 78 50 61 72 61 6D 57 00 5E 01 49 73 57 69 6E 64 6F 77 ll..ï.DialogBoxParamW.^☺IsWindow 000019C0 55 6E 69 63 6F 64 65 00 F2 00 47 65 74 49 63 6F 6E 49 6E 66 6F 00 6C 01 4C 6F 61 64 49 63 6F 6E Unicode.≥.GetIconInfo.l☺LoadIcon 000019E0 57 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CB 01 53 65 6E 64 4D 65 73 73 61 67 65 57 00 00 W...............╦☺SendMessageW.. 00001A00 BC 01 52 65 6D 6F 76 65 50 72 6F 70 57 00 7E 00 44 65 66 57 69 6E 64 6F 77 50 72 6F 63 57 00 00 ╝☺RemovePropW.~.DefWindowProcW.. 00001A20 4A 02 77 73 70 72 69 6E 74 66 57 00 AD 00 45 6E 64 44 69 61 6C 6F 67 00 00 00 00 00 00 00 00 00 J☻wsprintfW.¡.EndDialog......... 00001A40 DF 01 53 65 74 44 6C 67 49 74 65 6D 54 65 78 74 57 00 23 01 47 65 74 53 79 73 74 65 6D 4D 65 74 ▀☺SetDlgItemTextW.#☺GetSystemMet 00001A60 72 69 63 73 00 00 C5 01 53 65 6E 64 44 6C 67 49 74 65 6D 4D 65 73 73 61 67 65 57 00 16 02 53 68 rics..┼☺SendDlgItemMessageW.▬☻Sh 00001A80 6F 77 57 69 6E 64 6F 77 00 00 EB 00 47 65 74 44 6C 67 49 74 65 6D 00 00 78 01 4C 6F 61 64 53 74 owWindow..δ.GetDlgItem..x☺LoadSt 00001AA0 72 69 6E 67 57 00 EE 00 47 65 74 44 6C 67 49 74 65 6D 54 65 78 74 57 00 0B 02 53 65 74 57 69 6E ringW.ε.GetDlgItemTextW.♂☻SetWin 00001AC0 64 6F 77 54 65 78 74 57 00 00 38 01 47 65 74 57 69 6E 64 6F 77 54 65 78 74 57 00 00 20 00 43 68 dowTextW..8☺GetWindowTextW.. .Ch 00001AE0 61 72 4E 65 78 74 57 00 AF 00 45 6E 64 50 61 69 6E 74 00 00 66 01 4C 6F 61 64 42 69 74 6D 61 70 arNextW.».EndPaint..f☺LoadBitmap 00001B00 57 00 09 00 42 65 67 69 6E 50 61 69 6E 74 00 00 05 02 53 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 W.○.BeginPaint..♣☻SetWindowLongW 00001B20 00 00 31 01 47 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 00 00 A4 01 50 6F 73 74 4D 65 73 73 61 67 ..1☺GetWindowLongW..ñ☺PostMessag 00001B40 65 57 00 00 44 02 57 69 6E 48 65 6C 70 57 00 00 8D 01 4D 65 73 73 61 67 65 42 6F 78 57 00 23 00 eW..D☻WinHelpW..ì☺MessageBoxW.#. 00001B60 43 68 61 72 50 72 65 76 57 00 B7 01 52 65 67 69 73 74 65 72 57 69 6E 64 6F 77 4D 65 73 73 61 67 CharPrevW.╖☺RegisterWindowMessag 00001B80 65 57 00 00 8D 00 44 69 73 70 61 74 63 68 4D 65 73 73 61 67 65 57 00 00 A2 01 50 65 65 6B 4D 65 eW..ì.DispatchMessageW..ó☺PeekMe 00001BA0 73 73 61 67 65 57 00 00 86 00 44 65 73 74 72 6F 79 57 69 6E 64 6F 77 00 CC 00 46 72 65 65 44 44 ssageW..å.DestroyWindow.╠.FreeDD 00001BC0 45 6C 50 61 72 61 6D 00 F2 01 53 65 74 50 72 6F 70 57 00 00 19 01 47 65 74 50 72 6F 70 57 00 00 ElParam.≥☺SetPropW..↓☺GetPropW.. 00001BE0 10 00 43 61 6C 6C 4E 65 78 74 48 6F 6F 6B 45 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ►.CallNextHookEx................ 00001C00 0A 00 42 72 69 6E 67 57 69 6E 64 6F 77 54 6F 54 6F 70 00 00 59 01 49 73 49 63 6F 6E 69 63 00 00 ◙.BringWindowToTop..Y☺IsIconic.. 00001C20 00 01 47 65 74 4C 61 73 74 41 63 74 69 76 65 50 6F 70 75 70 00 00 2D 01 47 65 74 57 69 6E 64 6F .☺GetLastActivePopup..-☺GetWindo 00001C40 77 00 15 01 47 65 74 50 61 72 65 6E 74 00 A3 01 50 6F 73 74 4D 65 73 73 61 67 65 41 00 00 00 00 w.§☺GetParent.ú☺PostMessageA.... 00001C60 10 02 53 65 74 57 69 6E 64 6F 77 73 48 6F 6F 6B 57 00 4D 00 43 72 65 61 74 65 49 63 6F 6E 49 6E ►☻SetWindowsHookW.M.CreateIconIn 00001C80 64 69 72 65 63 74 00 00 00 00 00 00 00 00 00 00 53 00 43 72 65 61 74 65 57 69 6E 64 6F 77 45 78 direct..........S.CreateWindowEx 00001CA0 57 00 CF 01 53 65 74 41 63 74 69 76 65 57 69 6E 64 6F 77 00 CD 00 47 65 74 41 63 74 69 76 65 57 W.╧☺SetActiveWindow.═.GetActiveW 00001CC0 69 6E 64 6F 77 00 41 02 57 61 69 74 46 6F 72 49 6E 70 75 74 49 64 6C 65 00 00 2B 01 47 65 74 55 indow.A☻WaitForInputIdle..+☺GetU 00001CE0 73 65 72 4F 62 6A 65 63 74 49 6E 66 6F 72 6D 61 74 69 6F 6E 57 00 26 01 47 65 74 54 68 72 65 61 serObjectInformationW.&☺GetThrea 00001D00 64 44 65 73 6B 74 6F 70 00 00 00 00 7B 01 4C 6F 6F 6B 75 70 49 63 6F 6E 49 64 46 72 6F 6D 44 69 dDesktop....{☺LookupIconIdFromDi 00001D20 72 65 63 74 6F 72 79 00 5C 01 49 73 57 69 6E 64 6F 77 00 00 00 00 00 00 2D 02 55 6E 68 6F 6F 6B rectory.\☺IsWindow......-☻Unhook 00001D40 57 69 6E 64 6F 77 73 48 6F 6F 6B 00 00 00 00 00 84 00 44 65 73 74 72 6F 79 49 63 6F 6E 00 4B 00 WindowsHook.....ä.DestroyIcon.K. 00001D60 43 72 65 61 74 65 49 63 6F 6E 46 72 6F 6D 52 65 73 6F 75 72 63 65 00 00 4E 01 49 73 43 68 61 72 CreateIconFromResource..N☺IsChar 00001D80 41 6C 70 68 61 57 00 00 E5 01 53 65 74 4C 61 73 74 45 72 72 6F 72 45 78 00 00 1E 00 43 68 61 72 AlphaW..σ☺SetLastErrorEx..▲.Char 00001DA0 4E 65 78 74 41 00 28 00 43 68 61 72 55 70 70 65 72 41 00 00 2B 00 43 68 61 72 55 70 70 65 72 57 NextA.(.CharUpperA..+.CharUpperW 00001DC0 00 00 00 00 00 00 00 00 47 44 49 33 32 2E 64 6C 6C 00 00 00 3C 01 53 65 6C 65 63 74 4F 62 6A 65 ........GDI32.dll...<☺SelectObje 00001DE0 63 74 00 00 00 00 00 00 43 00 44 65 6C 65 74 65 44 43 00 00 1F 00 43 72 65 61 74 65 43 6F 6D 70 ct......C.DeleteDC..▼.CreateComp 00001E00 61 74 69 62 6C 65 44 43 00 00 00 00 0A 00 42 69 74 42 6C 74 00 00 00 00 46 00 44 65 6C 65 74 65 atibleDC....◙.BitBlt....F.Delete 00001E20 4F 62 6A 65 63 74 00 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 00 00 E2 00 52 65 67 51 75 65 Object..ADVAPI32.dll....Γ.RegQue 00001E40 72 79 56 61 6C 75 65 45 78 57 00 00 6C 00 4C 6F 6F 6B 75 70 41 63 63 6F 75 6E 74 53 69 64 57 00 ryValueExW..l.LookupAccountSidW. 00001E60 E3 00 52 65 67 51 75 65 72 79 56 61 6C 75 65 57 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 π.RegQueryValueW................ 00001E80 C7 00 52 65 67 43 72 65 61 74 65 4B 65 79 45 78 57 00 C2 00 52 65 67 43 6C 6F 73 65 4B 65 79 00 ╟.RegCreateKeyExW.┬.RegCloseKey. 00001EA0 ED 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 57 00 00 B0 00 4F 70 65 6E 50 72 6F 63 65 73 73 54 φ.RegSetValueExW..░.OpenProcessT 00001EC0 6F 6B 65 6E 00 00 00 00 00 00 00 00 00 00 00 00 55 00 47 65 74 54 6F 6B 65 6E 49 6E 66 6F 72 6D oken............U.GetTokenInform 00001EE0 61 74 69 6F 6E 00 00 00 DA 00 52 65 67 4F 70 65 6E 4B 65 79 45 78 57 00 D2 00 52 65 67 45 6E 75 ation...┌.RegOpenKeyExW.╥.RegEnu 00001F00 6D 56 61 6C 75 65 57 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 mValueW......................... 00001F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00001FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................