Pegate la iat aqui a ver si vemos algo
slds
slds
Código:
-HEX ASCII/16 Bits:
006B9000 D9 E8 62 76 29 3F 63 76 71 EB 63 76 57 0D 64 76 bv)?cvqcvW.dv
006B9010 65 A5 63 76 62 D1 63 76 9B D4 64 76 B5 D7 64 76 ecvbcvdvdv
006B9020 65 E9 63 76 E0 E5 62 76 9C EC 63 76 74 B6 64 76 ecvbvcvtdv
006B9030 F6 E6 62 76 EC E5 63 76 8D E4 63 76 63 9D 63 76 bvcvcvccv
006B9040 E7 B5 63 76 F1 B8 63 76 E8 D4 64 76 29 F4 65 76 cvcvdv)ev
006B9050 39 D6 64 76 DA 52 64 76 A1 E6 63 76 00 00 00 00 9dvRdvcv....
006B9060 B3 35 B6 71 00 00 00 00 EC 16 3E 00 00 00 00 00 5q....>.....
006B9070 FC 49 EC 75 C6 E3 EC 75 C2 4F EC 75 4E F6 EC 75 IuuOuNu
006B9080 13 EC EC 75 43 E6 EC 75 E3 A2 EC 75 6D 50 EC 75 uCuumPu
006B9090 89 5C EC 75 18 51 EC 75 63 C1 EC 75 AE E8 ED 75 \uQucuu
006B90A0 82 C3 EC 75 C2 72 EC 75 E0 4E EC 75 06 4C EC 75 uruNuLu
006B90B0 49 56 EC 75 DE 4F EC 75 00 00 00 00 1F 23 49 76 IVuOu....#Iv
006B90C0 48 22 49 76 CA 41 49 76 FB 7C 49 76 20 77 49 76 H"IvAIv|Iv wIv
006B90D0 9A B4 49 76 81 3B 49 76 00 00 00 00 96 FD 0C 76 Iv;Iv.....v
006B90E0 16 17 0B 76 07 DE 0B 76 64 0F 0C 76 CC 5D 0B 76 vvd.v]v
006B90F0 A0 09 0C 76 A9 15 0B 76 C3 D6 0B 76 A4 44 7C 00 ..vvvD|.
006B9100 5B 45 7C 00 1C 45 7C 00 8E 23 0B 76 12 25 D1 77 [E|.E|.#v%w
006B9110 FE 27 D1 77 C0 35 D0 77 80 35 D0 77 7B 6B 0C 76 'w5w5w{k.v
006B9120 35 94 0B 76 9C 2E 0B 76 10 11 0B 76 50 08 0B 76 5v.vvPv
006B9130 A5 F1 0C 76 0D AC 12 76 44 0C 0B 76 6C 48 0B 76 .v.vD.vlHv
006B9140 54 2C 7C 00 E1 1E 0B 76 54 1E 0B 76 60 44 7C 00 T,|.vTv`D|.
006B9150 FE AD 0C 76 05 E3 0C 76 64 EB 0B 76 43 8D 0B 76 .v.vdvCv
006B9160 C1 49 0B 76 88 2C 0B 76 A2 08 0C 76 DB B9 0C 76 Iv,v.v۹.v
006B9170 0B 14 0B 76 68 49 0B 76 EE 87 0B 76 82 11 0B 76 vhIvvv
006B9180 4C 54 11 76 9F C3 0B 76 E4 AA 0D 76 C8 30 7C 00 LTvv.v0|.
006B9190 27 D9 0B 76 5E 3A 7C 00 66 44 0B 76 96 3E 7C 00 'v^:|.fDv>|.
006B91A0 D7 57 0C 76 21 99 12 76 D1 D2 0C 76 0D 36 12 76 W.v!v.v.6v
006B91B0 EE 53 0B 76 1F 2F D3 77 10 37 7C 00 06 3F 0B 76 Sv/w7|.?v
006B91C0 DC A6 0C 76 3C 70 0C 76 F3 1F 0B 76 B0 42 7C 00 ܦ.v<p.vvB|.
006B91D0 EC 39 7C 00 29 16 0B 76 FC 43 7C 00 D5 43 7C 00 9|.)vC|.C|.
006B91E0 64 2C 0B 76 D6 24 0B 76 D9 21 0B 76 44 8A 12 76 d,v$v!vDv
006B91F0 B1 D9 0B 76 18 0E 0B 76 D3 C8 D1 77 AD 2D 0B 76 vvw-v
006B9200 E0 13 0B 76 A7 09 D2 77 CF F2 0C 76 A5 F8 0C 76 v.w.v.v
006B9210 BA 48 0B 76 28 27 0B 76 A4 E2 0C 76 04 0E 0B 76 Hv('v.vv
006B9220 C6 11 0B 76 62 4A 0B 76 F0 0D 0B 76 8C 3F 7C 00 vbJv.v?|.
006B9230 24 3A 7C 00 FD 3E 0B 76 DF 2D 0B 76 19 C7 0B 76 $:|.>v-vv
006B9240 CC E2 0B 76 0B C6 0B 76 7B E4 0B 76 2A 81 0B 76 vv{v*v
006B9250 79 0C 0B 76 53 4A 0B 76 34 33 7C 00 FF 35 7C 00 y.vSJv43|.5|.
006B9260 26 36 7C 00 AE C9 0B 76 D4 0D 0B 76 8D 41 7C 00 &6|.v.vA|.
006B9270 83 3E 7C 00 76 40 7C 00 54 EA 0B 76 97 15 0B 76 >|.v@|.Tvv
006B9280 B3 6F 0C 76 36 1B 0B 76 50 0E 0B 76 B8 1B 0D 76 o.v6vPv.v
006B9290 28 4A 0B 76 89 6C 0C 76 2D 14 0B 76 19 83 0B 76 (Jvl.v-vv
006B92A0 44 DA 0B 76 E5 1C 0B 76 3B 5C 0B 76 FE 42 7C 00 Dvv;\vB|.
006B92B0 98 5E 0C 76 90 8C 0B 76 13 5C 0B 76 13 5C 0B 76 ^.vv\v\v
006B92C0 1B 8E 0B 76 10 2D 0B 76 3D 86 0B 76 7F FF 0C 76 v-v=v.v
006B92D0 AF 37 7C 00 83 0D 0D 76 71 E3 0C 76 51 F5 0B 76 7|...vq.vQv
006B92E0 FF 08 0B 76 12 D5 0C 76 D0 08 0B 76 E7 59 D4 77 v.vvYw
006B92F0 D7 09 0B 76 B5 25 0B 76 9E 47 0B 76 88 A0 12 76 .v%vGv v
006B9300 49 0C 0D 76 8B 8F 0E 76 D6 5E 0B 76 00 C8 0B 76 I..vv^v.v
006B9310 EC 60 0C 76 A5 BB 0B 76 10 54 0B 76 21 BD 0B 76 `.vvTv!v
006B9320 92 F6 0C 76 B7 4A 0B 76 1B 15 0B 76 56 6A 0C 76 .vJvvVj.v
006B9330 AB C4 13 76 16 21 0B 76 7D 7F 0B 76 80 4E 0B 76 v!v}vNv
006B9340 70 5E 0B 76 C1 1E 0B 76 4D 34 D1 77 00 00 00 00 p^vvM4w....
006B9350 99 44 B0 73 00 00 00 00 05 8B B4 76 00 00 00 00 Ds....v....
006B9360 96 EA 61 77 6E EF 61 77 B3 94 61 77 30 1A 62 77 awnawaw0bw
006B9370 1F 85 62 77 BD D3 66 77 BA E8 61 77 8B EF 61 77 bwfwawaw
006B9380 1E 95 61 77 FD 83 61 77 0D B9 61 77 4E E8 61 77 awaw.awNaw
006B9390 34 27 65 77 B2 9A 61 77 A1 99 61 77 EE 1D 67 77 4'ewawawgw
006B93A0 25 1E 67 77 28 8C 61 77 87 AB 61 77 E2 E5 61 77 %gw(awawaw
006B93B0 DF BE 61 77 16 48 62 77 BE 25 62 77 D6 00 62 77 ߾awHbw%bw.bw
006B93C0 C7 AF 61 77 9A FD 61 77 A9 50 62 77 05 E9 61 77 ǯawawPbwaw
006B93D0 29 FE 61 77 A2 14 62 77 7B BA 61 77 53 7D 61 77 )awbw{awS}aw
006B93E0 C6 7C 61 77 F0 80 61 77 28 92 61 77 42 3D D5 77 |awaw(awB=w
006B93F0 3E E4 61 77 C0 95 61 77 09 8B 61 77 F1 90 61 77 >awaw.awaw
006B9400 DF 79 63 77 7C B3 61 77 A4 05 63 77 95 FB 61 77 ycw|awcwaw
006B9410 C4 79 63 77 02 7C 63 77 7A FB 61 77 75 68 63 77 ycw|cwzawuhcw
006B9420 36 EB 61 77 00 00 00 00 C2 4E 22 75 AC 41 22 75 6aw....N"uA"u
006B9430 1E 42 22 75 D0 40 22 75 00 00 00 00 0C 33 E5 75 B"u@"u.....3u
006B9440 35 30 E5 75 D9 40 E5 75 10 30 E5 75 EB 61 E5 75 50u@u0uau
006B9450 E7 3C E5 75 D1 36 E5 75 F4 15 E5 75 3A 34 E5 75 <u6uu:4u
006B9460 9B 65 E5 75 E4 D4 E5 75 39 A6 E5 75 D3 7D E5 75 euu9u}u
006B9470 C5 67 E5 75 D4 62 E6 75 EB 75 E5 75 D0 2F E5 75 gubuuu/u
006B9480 96 44 E5 75 00 00 00 00 40 5F 00 30 C0 51 00 30 Du....@_.0Q.0
006B9490 D0 39 00 30 30 6B 00 30 B0 6D 00 30 90 67 00 30 9.00k.0m.0g.0
006B94A0 50 69 00 30 50 87 00 30 B0 3C 00 30 90 3D 00 30 Pi.0P.0<.0=.0
006B94B0 30 65 00 30 00 00 00 00 90 6A 00 10 30 11 00 10 0e.0....j.0.
006B94C0 00 00 00 00 00 64 4A 02 D0 63 4A 02 60 7F 4A 02 .....dJcJ`J
006B94D0 20 7F 4A 02 A0 7E 4A 02 E0 7E 4A 02 84 60 4B 02 J ~J~J`K
006B94E0 B0 7E 4A 02 90 7E 4A 02 40 83 4A 02 40 63 4A 02 ~J~J@J@cJ
006B94F0 B0 63 4A 02 A0 90 4A 02 B0 87 4A 02 CC 5F 4B 02 cJ JJ_K
006B9500 40 91 4A 02 60 83 4A 02 C0 63 4A 02 B0 90 4A 02 @J`JcJJ
006B9510 B0 6B 4A 02 00 6F 4A 02 A0 6C 4A 02 70 6D 4A 02 kJ.oJ lJpmJ
006B9520 30 8F 4A 02 30 72 4A 02 20 76 4A 02 B0 79 4A 02 0J0rJ vJyJ
006B9530 70 72 4A 02 F0 7E 4A 02 C0 79 4A 02 E0 72 4A 02 prJ~JyJrJ
006B9540 30 64 4A 02 70 87 4A 02 E0 63 4A 02 C0 86 4A 02 0dJpJcJJ
006B9550 50 6D 4A 02 80 86 4A 02 20 8E 4A 02 70 63 4A 02 PmJJ JpcJ
006B9560 80 7E 4A 02 10 7F 4A 02 20 91 4A 02 D0 7E 4A 02 ~JJ J~J
006B9570 70 83 4A 02 00 7F 4A 02 80 7F 4A 02 00 00 00 00 pJ.JJ....
006B9580 60 3D 03 60 C0 29 03 60 D0 33 03 60 00 23 03 60 `=`)`3`.#`
006B9590 00 00 00 00 A0 44 10 21 70 45 10 21 40 52 10 21 .... D!pE!@R!
006B95A0 70 4E 10 21 E0 50 10 21 E0 E5 10 21 F0 A9 10 21 pN!P!!!
006B95B0 40 B3 10 21 90 AC 10 21 60 AD 10 21 50 AF 10 21 @!!`!P!
006B95C0 30 AE 10 21 E0 E2 10 21 70 FC 10 21 90 54 10 21 0!!p!T!
006B95D0 D0 43 10 21 50 38 10 21 30 27 10 21 E0 62 11 21 C!P8!0'!b!
006B95E0 00 24 10 21 60 2A 10 21 50 36 10 21 00 AB 10 21 .$!`*!P6!.!
006B95F0 F0 DA 10 21 A0 DB 10 21 20 FA 10 21 C0 FA 10 21 ! ! !!
006B9600 80 FB 10 21 F0 E1 10 21 A0 E3 10 21 60 F5 10 21 !! !`!
006B9610 80 E8 10 21 90 DC 10 21 90 01 11 21 E0 FE 10 21 !!!!
006B9620 60 ED 10 21 90 E7 10 21 A0 F1 10 21 60 F9 10 21 `!! !`!
006B9630 D0 29 10 21 A0 CC 10 21 50 CD 10 21 90 11 13 21 )! !P!!
006B9640 F0 CD 10 21 C0 F8 10 21 C0 41 10 21 00 00 00 00 !!A!....
006B9650 6B 45 72 76 A9 C9 73 76 00 00 00 00 00 00 00 00 kErvsv........
-Long adress with ascii dump:
006B9000 7662E8D9 bv ADVAPI32.CryptDecrypt
006B9004 76633F29 )?cv ADVAPI32.CryptGetHashParam
006B9008 7663EB71 qcv ADVAPI32.CryptVerifySignatureA
006B900C 76640D57 W.dv ADVAPI32.RegEnumValueA
006B9010 7663A565 ecv ADVAPI32.RegDeleteValueA
006B9014 7663D162 bcv ADVAPI32.GetUserNameA
006B9018 7664D49B dv ADVAPI32.InitializeSecurityDescriptor
006B901C 7664D7B5 dv ADVAPI32.SetSecurityDescriptorDacl
006B9020 7663E965 ecv ADVAPI32.CryptImportKey
006B9024 7662E5E0 bv ADVAPI32.CryptEncrypt
006B9028 7663EC9C cv ADVAPI32.CryptHashData
006B902C 7664B674 tdv ADVAPI32.CryptReleaseContext
006B9030 7662E6F6 bv ADVAPI32.CryptDeriveKey
006B9034 7663E5EC cv ADVAPI32.CryptDestroyHash
006B9038 7663E48D cv ADVAPI32.CryptDestroyKey
006B903C 76639D63 ccv ADVAPI32.RegDeleteKeyA
006B9040 7663B5E7 cv ADVAPI32.RegCreateKeyExA
006B9044 7663B8F1 cv ADVAPI32.RegSetValueExA
006B9048 7664D4E8 dv ADVAPI32.RegOpenKeyExA
006B904C 7665F429 )ev ADVAPI32.RegCloseKey
006B9050 7664D639 9dv ADVAPI32.RegQueryValueExA
006B9054 766452DA Rdv ADVAPI32.CryptAcquireContextA
006B9058 7663E6A1 cv ADVAPI32.CryptCreateHash
006B905C 00000000 ....
006B9060 71B635B3 5q DDRAW.DirectDrawCreateEx
006B9064 00000000 ....
006B9068 003E16EC >. DINPUT.DirectInputCreateA
006B906C 00000000 ....
006B9070 75EC49FC Iu GDI32.GetStockObject
006B9074 75ECE3C6 u GDI32.CreatePolygonRgn
006B9078 75EC4FC2 Ou GDI32.CreateSolidBrush
006B907C 75ECF64E Nu GDI32.FillRgn
006B9080 75ECEC13 u GDI32.TextOutA
006B9084 75ECE643 Cu GDI32.TextOutW
006B9088 75ECA2E3 u GDI32.GetTextExtentPoint32W
006B908C 75EC506D mPu GDI32.SetTextColor
006B9090 75EC5C89 \u GDI32.GetCurrentObject
006B9094 75EC5118 Qu GDI32.SetBkMode
006B9098 75ECC163 cu GDI32.CreateFontIndirectA
006B909C 75EDE8AE u GDI32.EnumFontFamiliesExA
006B90A0 75ECC382 u GDI32.CreateFontA
006B90A4 75EC72C2 ru GDI32.CreateDIBSection
006B90A8 75EC4EE0 Nu GDI32.SelectObject
006B90AC 75EC4C06 Lu GDI32.DeleteObject
006B90B0 75EC5649 IVu GDI32.DeleteDC
006B90B4 75EC4FDE Ou GDI32.CreateCompatibleDC
006B90B8 00000000 ....
006B90BC 7649231F #Iv IMM32.ImmReleaseContext
006B90C0 76492248 H"Iv IMM32.ImmGetContext
006B90C4 764941CA AIv IMM32.ImmGetCompositionStringW
006B90C8 76497CFB |Iv IMM32.ImmGetCompositionStringA
006B90CC 76497720 wIv IMM32.ImmGetCandidateListW
006B90D0 7649B49A Iv IMM32.ImmGetVirtualKey
006B90D4 76493B81 ;Iv IMM32.ImmNotifyIME
006B90D8 00000000 ....
006B90DC 760CFD96 .v kernel32.lstrcatA
006B90E0 760B1716 v kernel32.LocalFree
006B90E4 760BDE07 v kernel32.LocalLock
006B90E8 760C0F64 d.v kernel32.FormatMessageA
006B90EC 760B5DCC ]v kernel32.GetVersionExA
006B90F0 760C09A0 ..v kernel32.GetSystemDirectoryA
006B90F4 760B15A9 v kernel32.GetCurrentProcessId
006B90F8 760BD6C3 v kernel32.OpenProcess
006B90FC 007C44A4 D|. Blackout.007C44A4
006B9100 007C455B [E|. Blackout.007C455B
006B9104 007C451C E|. Blackout.007C451C
006B9108 760B238E #v kernel32.GetSystemInfo
006B910C 77D12512 %w ntdll.RtlInitializeCriticalSection
006B9110 77D127FE 'w ntdll.RtlDeleteCriticalSection
006B9114 77D035C0 5w ntdll.RtlLeaveCriticalSection
006B9118 77D03580 5w ntdll.RtlEnterCriticalSection
006B911C 760C6B7B {k.v kernel32.GetCurrentDirectoryA
006B9120 760B9435 5v kernel32.FileTimeToSystemTime
006B9124 760B2E9C .v kernel32.IsDBCSLeadByte
006B9128 760B1110 v kernel32.GetTickCount
006B912C 760B0850 Pv kernel32.GetSystemTime
006B9130 760CF1A5 .v kernel32.GlobalMemoryStatus
006B9134 7612AC0D .v kernel32.SetPriorityClass
006B9138 760B0C44 D.v kernel32.CreateProcessA
006B913C 760B486C lHv kernel32.CreateMutexA
006B9140 007C2C54 T,|. Blackout.007C2C54
006B9144 760B1EE1 v kernel32.TlsAlloc
006B9148 760B1E54 Tv kernel32.TlsFree
006B914C 007C4460 `D|. Blackout.007C4460
006B9150 760CADFE .v kernel32.SetEndOfFile
006B9154 760CE305 .v kernel32.ResumeThread
006B9158 760BEB64 dv kernel32.ResetEvent
006B915C 760B8D43 Cv kernel32.GetExitCodeProcess
006B9160 760B49C1 Iv kernel32.WaitForMultipleObjects
006B9164 760B2C88 ,v kernel32.CreateEventA
006B9168 760C08A2 .v kernel32.OpenEventA
006B916C 760CB9DB ۹.v kernel32.CreateDirectoryA
006B9170 760B140B v kernel32.GetCurrentThreadId
006B9174 760B4968 hIv kernel32.OpenMutexA
006B9178 760B87EE v kernel32.TerminateThread
006B917C 760B1182 v kernel32.ReleaseMutex
006B9180 7611544C LTv kernel32.GetComputerNameA
006B9184 760BC39F v kernel32.lstrlenA
006B9188 760DAAE4 .v kernel32.lstrcmpA
006B918C 007C30C8 0|. Blackout.007C30C8
006B9190 760BD927 'v kernel32.IsBadReadPtr
006B9194 007C3A5E ^:|. Blackout.007C3A5E
006B9198 760B4466 fDv kernel32.OpenFileMappingA
006B919C 007C3E96 >|. Blackout.007C3E96
006B91A0 760C57D7 W.v kernel32.CopyFileA
006B91A4 76129921 !v kernel32.GetTempFileNameA
006B91A8 760CD2D1 .v kernel32.GetTempPathA
006B91AC 7612360D .6v kernel32.HeapFree
006B91B0 760B53EE Sv kernel32.DeleteFileA
006B91B4 77D32F1F /w ntdll.RtlAllocateHeap
006B91B8 007C3710 7|. Blackout.007C3710
006B91BC 760B3F06 ?v kernel32.DuplicateHandle
006B91C0 760CA6DC ܦ.v kernel32.SetStdHandle
006B91C4 760C703C <p.v kernel32.CreatePipe
006B91C8 760B1FF3 v kernel32.WriteFile
006B91CC 007C42B0 B|. Blackout.007C42B0
006B91D0 007C39EC 9|. Blackout.007C39EC
006B91D4 760B1629 )v kernel32.VirtualAlloc
006B91D8 007C43FC C|. Blackout.007C43FC
006B91DC 007C43D5 C|. Blackout.007C43D5
006B91E0 760B2C64 d,v kernel32.SetEvent
006B91E4 760B24D6 $v kernel32.VirtualFree
006B91E8 760B21D9 !v kernel32.GetStdHandle
006B91EC 76128A44 Dv kernel32.PeekNamedPipe
006B91F0 760BD9B1 v kernel32.lstrcpyA
006B91F4 760B0E18 v kernel32.InterlockedExchange
006B91F8 77D1C8D3 w ntdll.RtlUnwind
006B91FC 760B2DAD -v kernel32.TlsSetValue
006B9200 760B13E0 v kernel32.TlsGetValue
006B9204 77D209A7 .w ntdll.RtlExitUserThread
006B9208 760CF2CF .v kernel32.RaiseException
006B920C 760CF8A5 .v kernel32.QueryPerformanceFrequency
006B9210 760B48BA Hv kernel32.QueryPerformanceCounter
006B9214 760B2728 ('v kernel32.WideCharToMultiByte
006B9218 760CE2A4 .v kernel32.GetUserDefaultLangID
006B921C 760B0E04 v kernel32.InterlockedDecrement
006B9220 760B11C6 v kernel32.WaitForSingleObject
006B9224 760B4A62 bJv kernel32.SetThreadPriority
006B9228 760B0DF0 .v kernel32.InterlockedIncrement
006B922C 007C3F8C ?|. Blackout.007C3F8C
006B9230 007C3A24 $:|. Blackout.007C3A24
006B9234 760B3EFD >v kernel32.GetCurrentProcess
006B9238 760B2DDF -v kernel32.GetCurrentThread
006B923C 760BC719 v kernel32.GlobalAlloc
006B9240 760BE2CC v kernel32.GlobalLock
006B9244 760BC60B v kernel32.GlobalFree
006B9248 760BE47B {v kernel32.GlobalUnlock
006B924C 760B812A *v kernel32.CreateThread
006B9250 760B0C79 y.v kernel32.Sleep
006B9254 760B4A53 SJv kernel32.GetLastError
006B9258 007C3334 43|. Blackout.007C3334
006B925C 007C35FF 5|. Blackout.007C35FF
006B9260 007C3626 &6|. Blackout.007C3626
006B9264 760BC9AE v kernel32.lstrcmpiA
006B9268 760B0DD4 .v kernel32.VirtualProtect
006B926C 007C418D A|. Blackout.007C418D
006B9270 007C3E83 >|. Blackout.007C3E83
006B9274 007C4076 v@|. Blackout.007C4076
006B9278 760BEA54 Tv kernel32.GetLocalTime
006B927C 760B1597 v kernel32.GetProcessHeap
006B9280 760C6FB3 o.v kernel32.HeapCompact
006B9284 760B1B36 6v kernel32.MultiByteToWideChar
006B9288 760B0E50 Pv kernel32.MulDiv
006B928C 760D1BB8 .v kernel32.OutputDebugStringA
006B9290 760B4A28 (Jv kernel32.IsBadCodePtr
006B9294 760C6C89 l.v kernel32.SetEnvironmentVariableA
006B9298 760B142D -v kernel32.SetLastError
006B929C 760B8319 v kernel32.GetEnvironmentVariableA
006B92A0 760BDA44 Dv kernel32.GetOEMCP
006B92A4 760B1CE5 v kernel32.GetACP
006B92A8 760B5C3B ;\v kernel32.GetEnvironmentStringsW
006B92AC 007C42FE B|. Blackout.007C42FE
006B92B0 760C5E98 ^.v kernel32.GetLocaleInfoW
006B92B4 760B8C90 v kernel32.GetEnvironmentStringsA
006B92B8 760B5C13 \v kernel32.FreeEnvironmentStringsW
006B92BC 760B5C13 \v kernel32.FreeEnvironmentStringsW
006B92C0 760B8E1B v kernel32.SetConsoleCtrlHandler
006B92C4 760B2D10 -v kernel32.GetUserDefaultLCID
006B92C8 760B863D =v kernel32.GetFullPathNameA
006B92CC 760CFF7F .v kernel32.GetDriveTypeA
006B92D0 007C37AF 7|. Blackout.007C37AF
006B92D4 760D0D83 ..v kernel32.RemoveDirectoryA
006B92D8 760CE371 q.v kernel32.SetFileAttributesA
006B92DC 760BF551 Qv kernel32.GetTimeZoneInformation
006B92E0 760B08FF v kernel32.TerminateProcess
006B92E4 760CD512 .v kernel32.MoveFileA
006B92E8 760B08D0 v kernel32.GetSystemTimeAsFileTime
006B92EC 77D459E7 Yw ntdll.RtlReAllocateHeap
006B92F0 760B09D7 .v kernel32.GetStartupInfoA
006B92F4 760B25B5 %v kernel32.GetCommandLineA
006B92F8 760B479E Gv kernel32.GetVersion
006B92FC 7612A088 v kernel32.FatalAppExitA
006B9300 760D0C49 I..v kernel32.LCMapStringA
006B9304 760E8F8B v kernel32.LCMapStringW
006B9308 760B5ED6 ^v kernel32.GetCPInfo
006B930C 760BC800 .v kernel32.CompareStringA
006B9310 760C60EC `.v kernel32.EnumSystemLocalesA
006B9314 760BBBA5 v kernel32.GetLocaleInfoA
006B9318 760B5410 Tv kernel32.IsValidCodePage
006B931C 760BBD21 !v kernel32.IsValidLocale
006B9320 760CF692 .v kernel32.FlushFileBuffers
006B9324 760B4AB7 Jv kernel32.GetStringTypeW
006B9328 760B151B v kernel32.CompareStringW
006B932C 760C6A56 Vj.v kernel32.GetStringTypeA
006B9330 7613C4AB v kernel32.UnhandledExceptionFilter
006B9334 760B2116 !v kernel32.GetFileType
006B9338 760B7F7D }v kernel32.SetHandleCount
006B933C 760B4E80 Nv kernel32.IsBadWritePtr
006B9340 760B5E70 p^v kernel32.HeapCreate
006B9344 760B1EC1 v kernel32.HeapDestroy
006B9348 77D1344D M4w ntdll.RtlSizeHeap
006B934C 00000000 ....
006B9350 73B04499 Ds NETAPI32.Netbios
006B9354 00000000 ....
006B9358 76B48B05 v SHELL32.ShellExecuteA
006B935C 00000000 ....
006B9360 7761EA96 aw USER32.SendMessageA
006B9364 7761EF6E naw USER32.MoveWindow
006B9368 776194B3 aw USER32.GetWindowRect
006B936C 77621A30 0bw USER32.SetWindowTextA
006B9370 7762851F bw USER32.EndDialog
006B9374 7766D3BD fw USER32.MessageBoxA
006B9378 7761E8BA aw USER32.ShowWindow
006B937C 7761EF8B aw USER32.SetWindowLongA
006B9380 7761951E aw USER32.ClientToScreen
006B9384 776183FD aw USER32.GetClientRect
006B9388 7761B90D .aw USER32.SetRect
006B938C 7761E84E Naw USER32.RedrawWindow
006B9390 77652734 4'ew USER32.DrawMenuBar
006B9394 77619AB2 aw USER32.GetDC
006B9398 776199A1 aw USER32.GetSystemMetrics
006B939C 77671DEE gw USER32.CharNextExA
006B93A0 77671E25 %gw USER32.CharPrevExA
006B93A4 77618C28 (aw USER32.GetKeyState
006B93A8 7761AB87 aw USER32.wsprintfA
006B93AC 7761E5E2 aw USER32.ShowCursor
006B93B0 7761BEDF ߾aw USER32.DestroyWindow
006B93B4 77624816 Hbw USER32.FindWindowA
006B93B8 776225BE %bw USER32.LoadIconA
006B93BC 776200D6 .bw USER32.LoadCursorA
006B93C0 7761AFC7 ǯaw USER32.RegisterClassA
006B93C4 7761FD9A aw USER32.AdjustWindowRect
006B93C8 776250A9 Pbw USER32.CreateWindowExA
006B93CC 7761E905 aw USER32.UpdateWindow
006B93D0 7761FE29 )aw USER32.GetKeyboardType
006B93D4 776214A2 bw USER32.ValidateRect
006B93D8 7761BA7B {aw USER32.SetCursor
006B93DC 77617D53 S}aw USER32.GetActiveWindow
006B93E0 77617CC6 |aw USER32.IsIconic
006B93E4 776180F0 aw USER32.GetCursorPos
006B93E8 77619228 (aw USER32.ScreenToClient
006B93EC 77D53D42 B=w ntdll.NtdllDefWindowProc_A
006B93F0 7761E43E >aw USER32.SetFocus
006B93F4 776195C0 aw USER32.PeekMessageA
006B93F8 77618B09 .aw USER32.TranslateMessage
006B93FC 776190F1 aw USER32.DispatchMessageA
006B9400 776379DF ycw USER32.GetClipboardData
006B9404 7761B37C |aw USER32.GetKeyboardLayout
006B9408 776305A4 cw USER32.DialogBoxParamA
006B940C 7761FB95 aw USER32.OpenClipboard
006B9410 776379C4 ycw USER32.EmptyClipboard
006B9414 77637C02 |cw USER32.SetClipboardData
006B9418 7761FB7A zaw USER32.CloseClipboard
006B941C 77636875 uhcw USER32.GetDlgItem
006B9420 7761EB36 6aw USER32.GetAsyncKeyState
006B9424 00000000 ....
006B9428 75224EC2 N"u WINMM.timeGetDevCaps
006B942C 752241AC A"u WINMM.timeBeginPeriod
006B9430 7522421E B"u WINMM.timeEndPeriod
006B9434 752240D0 @"u WINMM.timeGetTime
006B9438 00000000 ....
006B943C 75E5330C .3u WS2_32.closesocket
006B9440 75E53035 50u JMP to kernel32.GetLastError
006B9444 75E540D9 @u WS2_32.connect
006B9448 75E53010 0u WS2_32.ntohs
006B944C 75E561EB au WS2_32.inet_addr
006B9450 75E53CE7 <u WS2_32.ioctlsocket
006B9454 75E536D1 6u WS2_32.socket
006B9458 75E515F4 u WS2_32.select
006B945C 75E5343A :4u WS2_32.recv
006B9460 75E5659B eu WS2_32.send
006B9464 75E5D4E4 u WS2_32.WSACleanup
006B9468 75E5A639 9u WS2_32.WSAStartup
006B946C 75E57DD3 }u WS2_32.inet_ntoa
006B9470 75E567C5 gu WS2_32.sendto
006B9474 75E662D4 bu WS2_32.gethostbyname
006B9478 75E575EB uu WS2_32.gethostname
006B947C 75E52FD0 /u WS2_32.ntohl
006B9480 75E54496 Du WS2_32.WSASend
006B9484 00000000 ....
006B9488 30005F40 @_.0 binkw32._BinkDoFrame@4
006B948C 300051C0 Q.0 binkw32._BinkCopyToBuffer@28
006B9490 300039D0 9.0 binkw32._BinkDDSurfaceType@4
006B9494 30006B30 0k.0 binkw32._BinkWait@4
006B9498 30006DB0 m.0 binkw32._BinkPause@8
006B949C 30006790 g.0 binkw32._BinkGoto@12
006B94A0 30006950 Pi.0 binkw32._BinkClose@4
006B94A4 30008750 P.0 binkw32._BinkOpenDirectSound@4
006B94A8 30003CB0 <.0 binkw32._BinkSetSoundSystem@8
006B94AC 30003D90 =.0 binkw32._BinkOpen@8
006B94B0 30006530 0e.0 binkw32._BinkNextFrame@4
006B94B4 00000000 ....
006B94B8 10006A90 j. cps.uncompress
006B94BC 10001130 0. cps.compress
006B94C0 00000000 ....
006B94C4 024A6400 .dJ granny2._GrannyFreeCompletedModelControls@4
006B94C8 024A63D0 cJ granny2._GrannyGetSourceSkeleton@4
006B94CC 024A7F60 `J granny2._GrannyNewMeshBinding@12
006B94D0 024A7F20 J granny2._GrannyCopyMeshIndices@12
006B94D4 024A7EA0 ~J granny2._GrannyGetMeshVertexCount@4
006B94D8 024A7EE0 ~J granny2._GrannyMeshIsRigid@4
006B94DC 024B6084 `K OFFSET granny2.GrannyPNT332VertexType
006B94E0 024A7EB0 ~J granny2._GrannyCopyMeshVertices@12
006B94E4 024A7E90 ~J granny2._GrannyGetMeshVertexType@4
006B94E8 024A8340 @J granny2._GrannyNewMeshDeformer@12
006B94EC 024A6340 @cJ granny2._GrannyGetMaterialTextureByType@8
006B94F0 024A63B0 cJ granny2._GrannyInstantiateModel@4
006B94F4 024A90A0 J granny2._GrannyNewWorldPose@4
006B94F8 024A87B0 J granny2._GrannyTextureHasAlpha@4
006B94FC 024B5FCC _K OFFSET granny2.GrannyRGBA8888PixelFormat
006B9500 024A9140 @J granny2._GrannyBuildWorldPose@24
006B9504 024A8360 `J granny2._GrannyFreeMeshDeformer@4
006B9508 024A63C0 cJ granny2._GrannyFreeModelInstance@4
006B950C 024A90B0 J granny2._GrannyFreeWorldPose@4
006B9510 024A6BB0 kJ granny2._GrannyFreeControl@4
006B9514 024A6F00 .oJ granny2._GrannyPlayControlledAnimation@12
006B9518 024A6CA0 lJ granny2._GrannySetControlLoopCount@8
006B951C 024A6D70 pmJ granny2._GrannySetControlActive@8
006B9520 024A8F30 0J granny2._GrannyVersionsMatch_@16
006B9524 024A7230 0rJ granny2._GrannyReadEntireFileFromMemory@8
006B9528 024A7620 vJ granny2._GrannyGetFileInfo@4
006B952C 024A79B0 yJ granny2._GrannyNewLocalPose@4
006B9530 024A7270 prJ granny2._GrannyFreeFileSection@8
006B9534 024A7EF0 ~J granny2._GrannyGetMeshIndexCount@4
006B9538 024A79C0 yJ granny2._GrannyFreeLocalPose@4
006B953C 024A72E0 rJ granny2._GrannyFreeFile@4
006B9540 024A6430 0dJ granny2._GrannySampleModelAnimations@16
006B9544 024A8770 pJ granny2._GrannyCopyTextureImage@32
006B9548 024A63E0 cJ granny2._GrannySetModelClock@8
006B954C 024A86C0 J granny2._GrannyGetSecondsElapsed@8
006B9550 024A6D50 PmJ granny2._GrannyGetControlDurationLeft@4
006B9554 024A8680 J granny2._GrannyGetSystemSeconds@0
006B9558 024A8E20 J granny2._GrannyGetWorldPoseComposite4x4Array@4
006B955C 024A6370 pcJ granny2._GrannyModelControlsNext@4
006B9560 024A7E80 ~J granny2._GrannyGetMeshTriangleGroups@4
006B9564 024A7F10 J granny2._GrannyGetMeshIndices@4
006B9568 024A9120 J granny2._GrannyGetWorldPoseComposite4x4@8
006B956C 024A7ED0 ~J granny2._GrannyGetMeshVertices@4
006B9570 024A8370 pJ granny2._GrannyDeformVertices@24
006B9574 024A7F00 .J granny2._GrannyGetMeshBytesPerIndex@4
006B9578 024A7F80 J granny2._GrannyFreeMeshBinding@4
006B957C 00000000 ....
006B9580 60033D60 `=` ijl15.ijlWrite
006B9584 600329C0 )` ijl15.ijlFree
006B9588 600333D0 3` ijl15.ijlRead
006B958C 60032300 .#` ijl15.ijlInit
006B9590 00000000 ....
006B9594 211044A0 D! mss32._AIL_init_sample@4
006B9598 21104570 pE! mss32._AIL_set_sample_file@12
006B959C 21105240 @R! mss32._AIL_set_sample_volume@8
006B95A0 21104E70 pN! mss32._AIL_start_sample@4
006B95A4 211050E0 P! mss32._AIL_end_sample@4
006B95A8 2110E5E0 ! mss32._AIL_end_3D_sample@4
006B95AC 2110A9F0 ! mss32._AIL_open_stream@12
006B95B0 2110B340 @! mss32._AIL_set_stream_loop_count@8
006B95B4 2110AC90 ! mss32._AIL_start_stream@4
006B95B8 2110AD60 `! mss32._AIL_pause_stream@8
006B95BC 2110AF50 P! mss32._AIL_stream_volume@4
006B95C0 2110AE30 0! mss32._AIL_set_stream_volume@8
006B95C4 2110E2E0 ! mss32._AIL_release_3D_sample_handle@4
006B95C8 2110FC70 p! mss32._AIL_close_3D_listener@4
006B95CC 21105490 T! mss32._AIL_sample_status@4
006B95D0 211043D0 C! mss32._AIL_release_sample_handle@4
006B95D4 21103850 P8! mss32._AIL_close_digital_driver@4
006B95D8 21102730 0'! mss32._AIL_shutdown@0
006B95DC 211162E0 b! mss32._AIL_set_redist_directory@4
006B95E0 21102400 .$! mss32._AIL_startup@0
006B95E4 21102A60 `*! mss32._AIL_set_preference@8
006B95E8 21103650 P6! mss32._AIL_open_digital_driver@16
006B95EC 2110AB00 .! mss32._AIL_close_stream@4
006B95F0 2110DAF0 ! mss32._AIL_enumerate_3D_providers@12
006B95F4 2110DBA0 ! mss32._AIL_open_3D_provider@4
006B95F8 2110FA20 ! mss32._AIL_3D_speaker_type@4
006B95FC 2110FAC0 ! mss32._AIL_set_3D_speaker_type@8
006B9600 2110FB80 ! mss32._AIL_open_3D_listener@4
006B9604 2110E1F0 ! mss32._AIL_allocate_3D_sample_handle@4
006B9608 2110E3A0 ! mss32._AIL_start_3D_sample@4
006B960C 2110F560 `! mss32._AIL_set_3D_sample_distances@12
006B9610 2110E880 ! mss32._AIL_set_3D_sample_volume@8
006B9614 2110DC90 ! mss32._AIL_close_3D_provider@4
006B9618 21110190 ! mss32._AIL_set_3D_orientation@28
006B961C 2110FEE0 ! mss32._AIL_set_3D_position@16
006B9620 2110ED60 `! mss32._AIL_set_3D_sample_effects_level@8
006B9624 2110E790 ! mss32._AIL_set_3D_sample_file@8
006B9628 2110F1A0 ! mss32._AIL_3D_sample_status@4
006B962C 2110F960 `! mss32._AIL_set_3D_room_type@8
006B9630 211029D0 )! mss32._AIL_mem_free_lock@4
006B9634 2110CCA0 ! mss32._AIL_decompress_ADPCM@12
006B9638 2110CD50 P! mss32._AIL_WAV_info@8
006B963C 21131190 ! mss32._AIL_decompress_ASI@24
006B9640 2110CDF0 ! mss32._AIL_file_type@8
006B9644 2110F8C0 ! mss32._AIL_3D_room_type@4
006B9648 211041C0 A! mss32._AIL_allocate_sample_handle@4
006B964C 00000000 ....
006B9650 7672456B kErv ole32.CoInitialize
006B9654 7673C9A9 sv ole32.CoUninitialize
006B9658 00000000 ....
006B965C 00000000 ....
En fin, esa es la IAT xD
Salu2!!