============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 B8 90 00 00 00 00 00 00 00 00 00 00 D8 97 00 00 38 92 00 00 B8 91 00 00 00 00 00 00 00 00 00 00 ╕É..........╪ù..8Æ..╕æ.......... 00000020 C4 98 00 00 38 93 00 00 8C 90 00 00 00 00 00 00 00 00 00 00 7E 99 00 00 0C 92 00 00 FC 91 00 00 ─ÿ..8ô..îÉ..........~Ö..♀Æ..ⁿæ.. 00000040 00 00 00 00 00 00 00 00 CE 99 00 00 7C 93 00 00 F4 91 00 00 00 00 00 00 00 00 00 00 EC 99 00 00 ........╬Ö..|ô..⌠æ..........∞Ö.. 00000060 74 93 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 tô.............................. 00000080 00 00 00 00 00 00 00 00 00 00 00 00 DE 98 00 00 F2 98 00 00 D0 98 00 00 14 99 00 00 26 99 00 00 ............▐ÿ..≥ÿ..╨ÿ..¶Ö..&Ö.. 000000A0 02 99 00 00 4A 99 00 00 5A 99 00 00 38 99 00 00 6A 99 00 00 00 00 00 00 AE 94 00 00 50 94 00 00 ☻Ö..JÖ..ZÖ..8Ö..jÖ......«ö..Pö.. 000000C0 66 94 00 00 7E 94 00 00 94 94 00 00 34 94 00 00 40 94 00 00 C2 94 00 00 DA 94 00 00 E6 94 00 00 fö..~ö..öö..4ö..@ö..┬ö..┌ö..µö.. 000000E0 FC 94 00 00 08 95 00 00 A0 94 00 00 14 95 00 00 3E 95 00 00 4E 95 00 00 60 95 00 00 72 95 00 00 ⁿö..◘ò..áö..¶ò..>ò..Nò..`ò..rò.. 00000100 86 95 00 00 94 95 00 00 A2 95 00 00 B8 95 00 00 C6 95 00 00 D2 95 00 00 DC 95 00 00 EC 95 00 00 åò..öò..óò..╕ò..╞ò..╥ò..▄ò..∞ò.. 00000120 2C 95 00 00 06 94 00 00 16 96 00 00 28 96 00 00 36 96 00 00 46 96 00 00 58 96 00 00 70 96 00 00 ,ò..♠ö..▬û..(û..6û..Fû..Xû..pû.. 00000140 7C 96 00 00 86 96 00 00 92 96 00 00 AC 96 00 00 8C 93 00 00 DA 96 00 00 F4 96 00 00 0E 97 00 00 |û..åû..Æû..¼û..îô..┌û..⌠û..♫ù.. 00000160 1A 97 00 00 36 97 00 00 4E 97 00 00 66 97 00 00 72 97 00 00 7E 97 00 00 90 97 00 00 A2 97 00 00 →ù..6ù..Nù..fù..rù..~ù..Éù..óù.. 00000180 B6 97 00 00 C6 97 00 00 24 94 00 00 18 94 00 00 C8 93 00 00 F6 93 00 00 E0 93 00 00 9A 93 00 00 ╢ù..╞ù..$ö..↑ö..╚ô..÷ô..αô..Üô.. 000001A0 BA 93 00 00 AA 93 00 00 FA 95 00 00 08 96 00 00 C2 96 00 00 00 00 00 00 2A 98 00 00 A4 98 00 00 ║ô..¬ô..·ò..◘û..┬û......*ÿ..ñÿ.. 000001C0 B2 98 00 00 8C 98 00 00 7C 98 00 00 70 98 00 00 5A 98 00 00 48 98 00 00 3A 98 00 00 98 98 00 00 ▓ÿ..îÿ..|ÿ..pÿ..Zÿ..Hÿ..:ÿ..ÿÿ.. 000001E0 16 98 00 00 02 98 00 00 F4 97 00 00 E6 97 00 00 00 00 00 00 DA 99 00 00 00 00 00 00 B4 99 00 00 ▬ÿ..☻ÿ..⌠ù..µù......┌Ö......┤Ö.. 00000200 9E 99 00 00 8C 99 00 00 00 00 00 00 DE 98 00 00 F2 98 00 00 D0 98 00 00 14 99 00 00 26 99 00 00 ₧Ö..îÖ......▐ÿ..≥ÿ..╨ÿ..¶Ö..&Ö.. 00000220 02 99 00 00 4A 99 00 00 5A 99 00 00 38 99 00 00 6A 99 00 00 00 00 00 00 AE 94 00 00 50 94 00 00 ☻Ö..JÖ..ZÖ..8Ö..jÖ......«ö..Pö.. 00000240 66 94 00 00 7E 94 00 00 94 94 00 00 34 94 00 00 40 94 00 00 C2 94 00 00 DA 94 00 00 E6 94 00 00 fö..~ö..öö..4ö..@ö..┬ö..┌ö..µö.. 00000260 FC 94 00 00 08 95 00 00 A0 94 00 00 14 95 00 00 3E 95 00 00 4E 95 00 00 60 95 00 00 72 95 00 00 ⁿö..◘ò..áö..¶ò..>ò..Nò..`ò..rò.. 00000280 86 95 00 00 94 95 00 00 A2 95 00 00 B8 95 00 00 C6 95 00 00 D2 95 00 00 DC 95 00 00 EC 95 00 00 åò..öò..óò..╕ò..╞ò..╥ò..▄ò..∞ò.. 000002A0 2C 95 00 00 06 94 00 00 16 96 00 00 28 96 00 00 36 96 00 00 46 96 00 00 58 96 00 00 70 96 00 00 ,ò..♠ö..▬û..(û..6û..Fû..Xû..pû.. 000002C0 7C 96 00 00 86 96 00 00 92 96 00 00 AC 96 00 00 8C 93 00 00 DA 96 00 00 F4 96 00 00 0E 97 00 00 |û..åû..Æû..¼û..îô..┌û..⌠û..♫ù.. 000002E0 1A 97 00 00 36 97 00 00 4E 97 00 00 66 97 00 00 72 97 00 00 7E 97 00 00 90 97 00 00 A2 97 00 00 →ù..6ù..Nù..fù..rù..~ù..Éù..óù.. 00000300 B6 97 00 00 C6 97 00 00 24 94 00 00 18 94 00 00 C8 93 00 00 F6 93 00 00 E0 93 00 00 9A 93 00 00 ╢ù..╞ù..$ö..↑ö..╚ô..÷ô..αô..Üô.. 00000320 BA 93 00 00 AA 93 00 00 FA 95 00 00 08 96 00 00 C2 96 00 00 00 00 00 00 2A 98 00 00 A4 98 00 00 ║ô..¬ô..·ò..◘û..┬û......*ÿ..ñÿ.. 00000340 B2 98 00 00 8C 98 00 00 7C 98 00 00 70 98 00 00 5A 98 00 00 48 98 00 00 3A 98 00 00 98 98 00 00 ▓ÿ..îÿ..|ÿ..pÿ..Zÿ..Hÿ..:ÿ..ÿÿ.. 00000360 16 98 00 00 02 98 00 00 F4 97 00 00 E6 97 00 00 00 00 00 00 DA 99 00 00 00 00 00 00 B4 99 00 00 ▬ÿ..☻ÿ..⌠ù..µù......┌Ö......┤Ö.. 00000380 9E 99 00 00 8C 99 00 00 00 00 00 00 27 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 06 01 47 65 74 4C ₧Ö..îÖ......'.CloseHandle.♠☺GetL 000003A0 61 73 74 45 72 72 6F 72 00 00 48 00 43 72 65 61 74 65 4D 75 74 65 78 41 00 00 BA 00 46 72 65 65 astError..H.CreateMutexA..║.Free 000003C0 4C 69 62 72 61 72 79 00 44 02 53 65 74 43 75 72 72 65 6E 74 44 69 72 65 63 74 6F 72 79 41 00 00 Library.D☻SetCurrentDirectoryA.. 000003E0 E5 01 4F 75 74 70 75 74 44 65 62 75 67 53 74 72 69 6E 67 41 00 00 17 02 52 74 6C 5A 65 72 6F 4D σ☺OutputDebugStringA..↨☻RtlZeroM 00000400 65 6D 6F 72 79 00 28 01 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 DC 02 6C 73 74 72 63 70 emory.(☺GetProcAddress..▄☻lstrcp 00000420 79 41 00 00 AE 01 4C 6F 61 64 4C 69 62 72 61 72 79 41 00 00 D3 02 6C 73 74 72 63 61 74 41 00 00 yA..«☺LoadLibraryA..╙☻lstrcatA.. 00000440 62 01 47 65 74 56 65 72 73 69 6F 6E 45 78 41 00 47 01 47 65 74 53 79 73 74 65 6D 44 69 72 65 63 b☺GetVersionExA.G☺GetSystemDirec 00000460 74 6F 72 79 41 00 DD 00 47 65 74 43 75 72 72 65 6E 74 44 69 72 65 63 74 6F 72 79 41 00 00 10 01 toryA.▌.GetCurrentDirectoryA..►☺ 00000480 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 41 00 00 B8 01 4C 6F 63 61 6C 46 72 65 65 00 GetModuleFileNameA..╕☺LocalFree. 000004A0 B4 01 4C 6F 63 61 6C 41 6C 6C 6F 63 00 00 E9 00 47 65 74 44 69 73 6B 46 72 65 65 53 70 61 63 65 ┤☺LocalAlloc..Θ.GetDiskFreeSpace 000004C0 41 00 66 01 47 65 74 57 69 6E 64 6F 77 73 44 69 72 65 63 74 6F 72 79 41 00 00 E2 02 6C 73 74 72 A.f☺GetWindowsDirectoryA..Γ☻lstr 000004E0 6C 65 6E 41 00 00 AD 02 57 69 64 65 43 68 61 72 54 6F 4D 75 6C 74 69 42 79 74 65 00 E3 02 6C 73 lenA..¡☻WideCharToMultiByte.π☻ls 00000500 74 72 6C 65 6E 57 00 00 D6 02 6C 73 74 72 63 6D 70 41 00 00 45 01 47 65 74 53 79 73 74 65 6D 44 trlenW..╓☻lstrcmpA..E☺GetSystemD 00000520 65 66 61 75 6C 74 4C 43 49 44 00 00 9B 01 49 73 42 61 64 53 74 72 69 6E 67 50 74 72 41 00 9A 01 efaultLCID..¢☺IsBadStringPtrA.Ü☺ 00000540 49 73 42 61 64 52 65 61 64 50 74 72 00 00 9C 01 49 73 42 61 64 53 74 72 69 6E 67 50 74 72 57 00 IsBadReadPtr..£☺IsBadStringPtrW. 00000560 CE 00 47 65 74 43 6F 6D 6D 61 6E 64 4C 69 6E 65 41 00 12 01 47 65 74 4D 6F 64 75 6C 65 48 61 6E ╬.GetCommandLineA.↕☺GetModuleHan 00000580 64 6C 65 41 00 00 61 01 47 65 74 56 65 72 73 69 6F 6E 00 00 7F 00 45 78 69 74 50 72 6F 63 65 73 dleA..a☺GetVersion..⌂.ExitProces 000005A0 73 00 E2 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 49 64 00 00 89 02 54 6C 73 53 65 74 s.Γ.GetCurrentThreadId..ë☻TlsSet 000005C0 56 61 6C 75 65 00 84 02 54 6C 73 41 6C 6C 6F 63 00 00 86 02 54 6C 73 46 72 65 65 00 57 02 53 65 Value.ä☻TlsAlloc..å☻TlsFree.W☻Se 000005E0 74 4C 61 73 74 45 72 72 6F 72 00 00 88 02 54 6C 73 47 65 74 56 61 6C 75 65 00 84 01 48 65 61 70 tLastError..ê☻TlsGetValue.ä☺Heap 00000600 43 72 65 61 74 65 00 00 85 01 48 65 61 70 44 65 73 74 72 6F 79 00 55 02 53 65 74 48 61 6E 64 6C Create..à☺HeapDestroy.U☻SetHandl 00000620 65 43 6F 75 6E 74 00 00 FE 00 47 65 74 46 69 6C 65 54 79 70 65 00 40 01 47 65 74 53 74 64 48 61 eCount..■.GetFileType.@☺GetStdHa 00000640 6E 64 6C 65 00 00 3E 01 47 65 74 53 74 61 72 74 75 70 49 6E 66 6F 41 00 5D 00 44 65 6C 65 74 65 ndle..>☺GetStartupInfoA.].Delete 00000660 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 C5 00 47 65 74 43 50 49 6E 66 6F 00 BF 00 47 65 CriticalSection.┼.GetCPInfo.┐.Ge 00000680 74 41 43 50 00 00 1B 01 47 65 74 4F 45 4D 43 50 00 00 B7 00 46 72 65 65 45 6E 76 69 72 6F 6E 6D tACP..←☺GetOEMCP..╖.FreeEnvironm 000006A0 65 6E 74 53 74 72 69 6E 67 73 41 00 D5 01 4D 75 6C 74 69 42 79 74 65 54 6F 57 69 64 65 43 68 61 entStringsA.╒☺MultiByteToWideCha 000006C0 72 00 EF 00 47 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 00 B8 00 46 72 65 65 r.∩.GetEnvironmentStrings.╕.Free 000006E0 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 57 00 F1 00 47 65 74 45 6E 76 69 72 6F 6E EnvironmentStringsW.±.GetEnviron 00000700 6D 65 6E 74 53 74 72 69 6E 67 73 57 00 00 B8 02 57 72 69 74 65 46 69 6C 65 00 8F 01 49 6E 69 74 mentStringsW..╕☻WriteFile.Å☺Init 00000720 69 61 6C 69 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 68 00 45 6E 74 65 72 43 72 69 ializeCriticalSection.h.EnterCri 00000740 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 AD 01 4C 65 61 76 65 43 72 69 74 69 63 61 6C 53 65 63 ticalSection..¡☺LeaveCriticalSec 00000760 74 69 6F 6E 00 00 82 01 48 65 61 70 41 6C 6C 6F 63 00 86 01 48 65 61 70 46 72 65 65 00 00 41 01 tion..é☺HeapAlloc.å☺HeapFree..A☺ 00000780 47 65 74 53 74 72 69 6E 67 54 79 70 65 41 00 00 44 01 47 65 74 53 74 72 69 6E 67 54 79 70 65 57 GetStringTypeA..D☺GetStringTypeW 000007A0 00 00 AF 00 46 6C 75 73 68 46 69 6C 65 42 75 66 66 65 72 73 00 00 62 02 53 65 74 53 74 64 48 61 ..».FlushFileBuffers..b☻SetStdHa 000007C0 6E 64 6C 65 00 00 52 02 53 65 74 46 69 6C 65 50 6F 69 6E 74 65 72 00 00 4B 45 52 4E 45 4C 33 32 ndle..R☻SetFilePointer..KERNEL32 000007E0 2E 64 6C 6C 00 00 9D 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 22 01 47 65 74 4D 65 73 73 61 67 65 .dll..¥☺LoadStringA."☺GetMessage 00000800 41 00 92 00 44 69 73 70 61 74 63 68 4D 65 73 73 61 67 65 41 00 00 5B 02 54 72 61 6E 73 6C 61 74 A.Æ.DispatchMessageA..[☻Translat 00000820 65 4D 65 73 73 61 67 65 00 00 CA 01 50 65 65 6B 4D 65 73 73 61 67 65 41 00 00 AB 01 4D 65 73 73 eMessage..╩☺PeekMessageA..½☺Mess 00000840 61 67 65 42 6F 78 41 00 0C 02 53 65 74 44 6C 67 49 74 65 6D 54 65 78 74 41 00 50 00 43 72 65 61 ageBoxA.♀☻SetDlgItemTextA.P.Crea 00000860 74 65 44 69 61 6C 6F 67 50 61 72 61 6D 41 00 00 0F 02 53 65 74 46 6F 63 75 73 00 00 8D 00 44 65 teDialogParamA..☼☻SetFocus..ì.De 00000880 73 74 72 6F 79 57 69 6E 64 6F 77 00 81 02 77 73 70 72 69 6E 74 66 41 00 82 02 77 73 70 72 69 6E stroyWindow.ü☻wsprintfA.é☻wsprin 000008A0 74 66 57 00 9E 01 4C 6F 61 64 53 74 72 69 6E 67 57 00 11 01 47 65 74 4B 65 79 62 6F 61 72 64 54 tfW.₧☺LoadStringW.◄☺GetKeyboardT 000008C0 79 70 65 00 55 53 45 52 33 32 2E 64 6C 6C 00 00 7E 00 52 65 67 43 6C 6F 73 65 4B 65 79 00 9D 00 ype.USER32.dll..~.RegCloseKey.¥. 000008E0 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 41 00 00 95 00 52 65 67 4F 70 65 6E 4B 65 79 45 78 RegQueryValueExA..ò.RegOpenKeyEx 00000900 41 00 A9 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 41 00 00 82 00 52 65 67 43 72 65 61 74 65 4B A.⌐.RegSetValueExA..é.RegCreateK 00000920 65 79 45 78 41 00 AA 00 52 65 67 53 65 74 56 61 6C 75 65 45 78 57 00 00 83 00 52 65 67 43 72 65 eyExA.¬.RegSetValueExW..â.RegCre 00000940 61 74 65 4B 65 79 45 78 57 00 85 00 52 65 67 44 65 6C 65 74 65 4B 65 79 41 00 8A 00 52 65 67 45 ateKeyExW.à.RegDeleteKeyA.è.RegE 00000960 6E 75 6D 4B 65 79 45 78 41 00 98 00 52 65 67 51 75 65 72 79 49 6E 66 6F 4B 65 79 41 00 00 41 44 numKeyExA.ÿ.RegQueryInfoKeyA..AD 00000980 56 41 50 49 33 32 2E 64 6C 6C 00 00 0A 00 56 65 72 51 75 65 72 79 56 61 6C 75 65 41 00 00 00 00 VAPI32.dll..◙.VerQueryValueA.... 000009A0 47 65 74 46 69 6C 65 56 65 72 73 69 6F 6E 49 6E 66 6F 41 00 01 00 47 65 74 46 69 6C 65 56 65 72 GetFileVersionInfoA.☺.GetFileVer 000009C0 73 69 6F 6E 49 6E 66 6F 53 69 7A 65 41 00 56 45 52 53 49 4F 4E 2E 64 6C 6C 00 97 00 53 74 72 69 sionInfoSizeA.VERSION.dll.ù.Stri 000009E0 6E 67 46 72 6F 6D 47 55 49 44 32 00 6F 6C 65 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 ngFromGUID2.ole32.dll...........