============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 5C 90 00 00 00 00 00 00 00 00 00 00 8C 91 00 00 98 90 00 00 50 90 00 00 00 00 00 00 00 00 00 00 \É..........îæ..ÿÉ..PÉ.......... 00000020 BE 91 00 00 8C 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ╛æ..îÉ.......................... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AE 91 00 00 9A 91 00 00 00 00 00 00 EE 90 00 00 ................«æ..Üæ......εÉ.. 00000060 16 91 00 00 2A 91 00 00 D4 90 00 00 02 91 00 00 4C 91 00 00 62 91 00 00 70 91 00 00 36 91 00 00 ▬æ..*æ..╘É..☻æ..Læ..bæ..pæ..6æ.. 00000080 C8 90 00 00 3E 91 00 00 00 00 00 00 AE 91 00 00 9A 91 00 00 00 00 00 00 EE 90 00 00 16 91 00 00 ╚É..>æ......«æ..Üæ......εÉ..▬æ.. 000000A0 2A 91 00 00 D4 90 00 00 02 91 00 00 4C 91 00 00 62 91 00 00 70 91 00 00 36 91 00 00 C8 90 00 00 *æ..╘É..☻æ..Læ..bæ..pæ..6æ..╚É.. 000000C0 3E 91 00 00 00 00 00 00 7A 01 48 65 61 70 41 6C 6C 6F 63 00 EA 01 51 75 65 72 79 50 65 72 66 6F >æ......z☺HeapAlloc.Ω☺QueryPerfo 000000E0 72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 4E 02 53 65 74 50 72 69 6F 72 69 74 79 43 6C 61 73 73 rmanceCounter.N☻SetPriorityClass 00000100 00 00 18 01 47 65 74 50 72 69 6F 72 69 74 79 43 6C 61 73 73 00 00 DA 00 47 65 74 43 75 72 72 65 ..↑☺GetPriorityClass..┌.GetCurre 00000120 6E 74 50 72 6F 63 65 73 73 00 BD 02 6C 73 74 72 63 6D 70 41 00 00 BF 01 4D 61 70 53 4C 00 7D 01 ntProcess.╜☻lstrcmpA..┐☺MapSL.}☺ 00000140 48 65 61 70 44 65 73 74 72 6F 79 00 8A 01 49 6E 74 65 72 6C 6F 63 6B 65 64 45 78 63 68 61 6E 67 HeapDestroy.è☺InterlockedExchang 00000160 65 00 7C 01 48 65 61 70 43 72 65 61 74 65 00 00 5F 00 44 69 73 61 62 6C 65 54 68 72 65 61 64 4C e.|☺HeapCreate.._.DisableThreadL 00000180 69 62 72 61 72 79 43 61 6C 6C 73 00 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 00 9D 00 52 65 67 51 ibraryCalls.KERNEL32.dll..¥.RegQ 000001A0 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 95 00 52 65 67 4F 70 65 6E 4B 65 79 45 78 41 00 41 44 ueryValueExA..ò.RegOpenKeyExA.AD 000001C0 56 41 50 49 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 VAPI32.dll...................... 000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................