# EF-CHEETO RECONSTRUCTION FEED — PART 3A/3
# This part: Named function hex dumps (actual machine code bytes)
# 33 key functions, all annotated with RVA and function name.
# Use with Parts 1, 2, and 3B.

# EF-Cheeto.dll — Named Function Hex Dumps
# All addresses are RVAs (add 0x180000000 for VA)
# Generated from .text section (raw offset 0x400)

========================================================================
FUNCTION: DllMain
RVA: 0x01000–0x02000  Size: 4096 bytes
180001000  48 8D 0D 89 ED 0A 00 E9 D8 AB 0A 00 CC CC CC CC  H...............
180001010  48 89 5C 24 08 48 89 74 24 10 48 89 7C 24 18 4C  H.\$.H.t$.H.|$.L
180001020  89 64 24 20 55 41 56 41 57 48 8D AC 24 70 FA FF  .d$ UAVAWH..$p..
180001030  FF 48 81 EC 90 06 00 00 C6 44 24 40 02 48 8D 05  .H.......D$@.H..
180001040  54 E6 3A 00 48 89 44 24 48 C6 44 24 50 04 48 8D  T.:.H.D$H.D$P.H.
180001050  05 4B E6 3A 00 48 89 44 24 58 C6 44 24 60 05 48  .K.:.H.D$X.D$`.H
180001060  8D 05 42 E6 3A 00 48 89 44 24 68 C6 44 24 70 06  ..B.:.H.D$h.D$p.
180001070  48 8D 05 39 E6 3A 00 48 89 44 24 78 C6 45 80 08  H..9.:.H.D$x.E..
180001080  48 8D 05 31 E6 3A 00 48 89 45 88 C6 45 90 09 48  H..1.:.H.E..E..H
180001090  8D 05 2E E6 3A 00 48 89 45 98 C6 45 A0 0C 48 8D  ....:.H.E..E..H.
1800010A0  05 23 E6 3A 00 48 89 45 A8 C6 45 B0 0D 48 8D 05  .#.:.H.E..E..H..
1800010B0  1C E6 3A 00 48 89 45 B8 C6 45 C0 10 48 8D 05 15  ..:.H.E..E..H...
1800010C0  E6 3A 00 48 89 45 C8 C6 45 D0 11 48 8D 05 0E E6  .:.H.E..E..H....
1800010D0  3A 00 48 89 45 D8 C6 45 E0 12 48 8D 05 07 E6 3A  :.H.E..E..H....:
1800010E0  00 48 89 45 E8 C6 45 F0 13 48 8D 05 FC E5 3A 00  .H.E..E..H....:.
1800010F0  48 89 45 F8 C6 45 00 14 48 8D 05 F9 E5 3A 00 48  H.E..E..H....:.H
180001100  89 45 08 C6 45 10 1B 48 8D 05 F6 E5 3A 00 48 89  .E..E..H....:.H.
180001110  45 18 C6 45 20 20 48 8D 05 EB E5 3A 00 48 89 45  E..E  H....:.H.E
180001120  28 C6 45 30 21 48 8D 05 E4 E5 3A 00 48 89 45 38  (.E0!H....:.H.E8
180001130  C6 45 40 22 48 8D 05 DD E5 3A 00 48 89 45 48 C6  .E@"H....:.H.EH.
180001140  45 50 23 48 8D 05 D6 E5 3A 00 48 89 45 58 C6 45  EP#H....:.H.EX.E
180001150  60 24 48 8D 05 CB E5 3A 00 48 89 45 68 C6 45 70  `$H....:.H.Eh.Ep
180001160  25 48 8D 05 C4 E5 3A 00 48 89 45 78 C6 85 80 00  %H....:.H.Ex....
180001170  00 00 26 48 8D 05 BA E5 3A 00 48 89 85 88 00 00  ..&H....:.H.....
180001180  00 C6 85 90 00 00 00 27 48 8D 05 A9 E5 3A 00 48  .......'H....:.H
180001190  89 85 98 00 00 00 C6 85 A0 00 00 00 28 48 8D 05  ............(H..
1800011A0  9C E5 3A 00 48 89 85 A8 00 00 00 C6 85 B0 00 00  ..:.H...........
1800011B0  00 2D 48 8D 05 8F E5 3A 00 48 89 85 B8 00 00 00  .-H....:.H......
1800011C0  C6 85 C0 00 00 00 2E 48 8D 05 7E E5 3A 00 48 89  .......H..~.:.H.
1800011D0  85 C8 00 00 00 C6 85 D0 00 00 00 2C 48 8D 05 6D  ...........,H..m
1800011E0  E5 3A 00 48 89 85 D8 00 00 00 C6 85 E0 00 00 00  .:.H............
1800011F0  30 48 8D 05 EC 03 0D 00 48 89 85 E8 00 00 00 C6  0H......H.......
180001200  85 F0 00 00 00 31 48 8D 05 27 B1 3A 00 48 89 85  .....1H..'.:.H..
180001210  F8 00 00 00 C6 85 00 01 00 00 32 48 8D 05 16 B1  ..........2H....
180001220  3A 00 48 89 85 08 01 00 00 C6 85 10 01 00 00 33  :.H............3
180001230  48 8D 05 05 B1 3A 00 48 89 85 18 01 00 00 C6 85  H....:.H........
180001240  20 01 00 00 34 48 8D 05 F4 B0 3A 00 48 89 85 28   ...4H....:.H..(
180001250  01 00 00 C6 85 30 01 00 00 35 48 8D 05 E3 B0 3A  .....0...5H....:
180001260  00 48 89 85 38 01 00 00 C6 85 40 01 00 00 36 48  .H..8.....@...6H
180001270  8D 05 D2 B0 3A 00 48 89 85 48 01 00 00 C6 85 50  ....:.H..H.....P
180001280  01 00 00 37 48 8D 05 C1 B0 3A 00 48 89 85 58 01  ...7H....:.H..X.
180001290  00 00 C6 85 60 01 00 00 38 48 8D 05 B0 B0 3A 00  ....`...8H....:.
1800012A0  48 89 85 68 01 00 00 C6 85 70 01 00 00 39 48 8D  H..h.....p...9H.
1800012B0  05 9F B0 3A 00 48 89 85 78 01 00 00 C6 85 80 01  ...:.H..x.......
1800012C0  00 00 41 48 8D 05 8E B0 3A 00 48 89 85 88 01 00  ..AH....:.H.....
1800012D0  00 C6 85 90 01 00 00 42 48 8D 05 7D B0 3A 00 48  .......BH..}.:.H
1800012E0  89 85 98 01 00 00 C6 85 A0 01 00 00 43 48 8D 05  ............CH..
1800012F0  6C B0 3A 00 48 89 85 A8 01 00 00 C6 85 B0 01 00  l.:.H...........
180001300  00 44 48 8D 05 5B B0 3A 00 48 89 85 B8 01 00 00  .DH..[.:.H......
180001310  C6 85 C0 01 00 00 45 48 8D 05 4A B0 3A 00 48 89  ......EH..J.:.H.
180001320  85 C8 01 00 00 C6 85 D0 01 00 00 46 48 8D 05 39  ...........FH..9
180001330  B0 3A 00 48 89 85 D8 01 00 00 C6 85 E0 01 00 00  .:.H............
180001340  47 48 8D 05 28 B0 3A 00 48 89 85 E8 01 00 00 C6  GH..(.:.H.......
180001350  85 F0 01 00 00 48 48 8D 05 17 B0 3A 00 48 89 85  .....HH....:.H..
180001360  F8 01 00 00 C6 85 00 02 00 00 49 48 8D 05 06 B0  ..........IH....
180001370  3A 00 48 89 85 08 02 00 00 C6 85 10 02 00 00 4A  :.H............J
180001380  48 8D 05 F5 AF 3A 00 48 89 85 18 02 00 00 C6 85  H....:.H........
180001390  20 02 00 00 4B 48 8D 05 E4 AF 3A 00 48 89 85 28   ...KH....:.H..(
1800013A0  02 00 00 C6 85 30 02 00 00 4C 48 8D 05 D3 AF 3A  .....0...LH....:
1800013B0  00 48 89 85 38 02 00 00 C6 85 40 02 00 00 4D 48  .H..8.....@...MH
1800013C0  8D 05 C2 AF 3A 00 48 89 85 48 02 00 00 C6 85 50  ....:.H..H.....P
1800013D0  02 00 00 4E 48 8D 05 B1 AF 3A 00 48 89 85 58 02  ...NH....:.H..X.
1800013E0  00 00 C6 85 60 02 00 00 4F 48 8D 05 A0 AF 3A 00  ....`...OH....:.
1800013F0  48 89 85 68 02 00 00 C6 85 70 02 00 00 50 48 8D  H..h.....p...PH.
180001400  05 8F AF 3A 00 48 89 85 78 02 00 00 C6 85 80 02  ...:.H..x.......
180001410  00 00 51 48 8D 05 7E AF 3A 00 48 89 85 88 02 00  ..QH..~.:.H.....
180001420  00 C6 85 90 02 00 00 52 48 8D 05 6D AF 3A 00 48  .......RH..m.:.H
180001430  89 85 98 02 00 00 C6 85 A0 02 00 00 53 48 8D 05  ............SH..
180001440  5C AF 3A 00 48 89 85 A8 02 00 00 C6 85 B0 02 00  \.:.H...........
180001450  00 54 48 8D 05 4B AF 3A 00 48 89 85 B8 02 00 00  .TH..K.:.H......
180001460  C6 85 C0 02 00 00 55 48 8D 05 3A AF 3A 00 48 89  ......UH..:.:.H.
180001470  85 C8 02 00 00 C6 85 D0 02 00 00 56 48 8D 05 29  ...........VH..)
180001480  AF 3A 00 48 89 85 D8 02 00 00 C6 85 E0 02 00 00  .:.H............
180001490  57 48 8D 05 18 AF 3A 00 48 89 85 E8 02 00 00 C6  WH....:.H.......
1800014A0  85 F0 02 00 00 58 48 8D 05 07 AF 3A 00 48 89 85  .....XH....:.H..
1800014B0  F8 02 00 00 C6 85 00 03 00 00 59 48 8D 05 F6 AE  ..........YH....
1800014C0  3A 00 48 89 85 08 03 00 00 C6 85 10 03 00 00 5A  :.H............Z
1800014D0  48 8D 05 E5 AE 3A 00 48 89 85 18 03 00 00 C6 85  H....:.H........
1800014E0  20 03 00 00 5B 48 8D 05 6C E2 3A 00 48 89 85 28   ...[H..l.:.H..(
1800014F0  03 00 00 C6 85 30 03 00 00 5C 48 89 85 38 03 00  .....0...\H..8..
180001500  00 C6 85 40 03 00 00 60 48 8D 05 51 E2 3A 00 48  ...@...`H..Q.:.H
180001510  89 85 48 03 00 00 C6 85 50 03 00 00 61 48 8D 05  ..H.....P...aH..
180001520  44 E2 3A 00 48 89 85 58 03 00 00 C6 85 60 03 00  D.:.H..X.....`..
180001530  00 62 48 8D 05 37 E2 3A 00 48 89 85 68 03 00 00  .bH..7.:.H..h...
180001540  C6 85 70 03 00 00 63 48 8D 05 2A E2 3A 00 48 89  ..p...cH..*.:.H.
180001550  85 78 03 00 00 C6 85 80 03 00 00 64 48 8D 05 1D  .x.........dH...
180001560  E2 3A 00 48 89 85 88 03 00 00 C6 85 90 03 00 00  .:.H............
180001570  65 48 8D 05 10 E2 3A 00 48 89 85 98 03 00 00 C6  eH....:.H.......
180001580  85 A0 03 00 00 66 48 8D 05 03 E2 3A 00 48 89 85  .....fH....:.H..
180001590  A8 03 00 00 C6 85 B0 03 00 00 67 48 8D 05 F6 E1  ..........gH....
1800015A0  3A 00 48 89 85 B8 03 00 00 C6 85 C0 03 00 00 68  :.H............h
1800015B0  48 8D 05 E9 E1 3A 00 48 89 85 C8 03 00 00 C6 85  H....:.H........
1800015C0  D0 03 00 00 69 48 8D 05 DC E1 3A 00 48 89 85 D8  ....iH....:.H...
1800015D0  03 00 00 C6 85 E0 03 00 00 6A 48 8D 05 CF E1 3A  .........jH....:
1800015E0  00 48 89 85 E8 03 00 00 C6 85 F0 03 00 00 6B 48  .H............kH
1800015F0  8D 05 C6 E1 3A 00 48 89 85 F8 03 00 00 C6 85 00  ....:.H.........
180001600  04 00 00 6C 48 8D 05 B5 E1 3A 00 48 89 85 08 04  ...lH....:.H....
180001610  00 00 C6 85 10 04 00 00 6D 48 8D 05 B0 E1 3A 00  ........mH....:.
180001620  48 89 85 18 04 00 00 C6 85 20 04 00 00 6E 48 8D  H........ ...nH.
180001630  05 AB E1 3A 00 48 89 85 28 04 00 00 C6 85 30 04  ...:.H..(.....0.
180001640  00 00 6F 48 8D 05 9E E1 3A 00 48 89 85 38 04 00  ..oH....:.H..8..
180001650  00 C6 85 40 04 00 00 70 48 8D 05 61 AD 3A 00 48  ...@...pH..a.:.H
180001660  89 85 48 04 00 00 C6 85 50 04 00 00 71 48 8D 05  ..H.....P...qH..
180001670  50 AD 3A 00 48 89 85 58 04 00 00 C6 85 60 04 00  P.:.H..X.....`..
180001680  00 72 48 8D 05 3F AD 3A 00 48 89 85 68 04 00 00  .rH..?.:.H..h...
180001690  C6 85 70 04 00 00 73 48 8D 05 2E AD 3A 00 48 89  ..p...sH....:.H.
1800016A0  85 78 04 00 00 C6 85 80 04 00 00 74 48 8D 05 1D  .x.........tH...
1800016B0  AD 3A 00 48 89 85 88 04 00 00 C6 85 90 04 00 00  .:.H............
1800016C0  75 48 8D 05 0C AD 3A 00 48 89 85 98 04 00 00 C6  uH....:.H.......
1800016D0  85 A0 04 00 00 76 48 8D 05 FB AC 3A 00 48 89 85  .....vH....:.H..
1800016E0  A8 04 00 00 C6 85 B0 04 00 00 77 48 8D 05 EA AC  ..........wH....
1800016F0  3A 00 48 89 85 B8 04 00 00 C6 85 C0 04 00 00 78  :.H............x
180001700  48 8D 05 D9 AC 3A 00 48 89 85 C8 04 00 00 C6 85  H....:.H........
180001710  D0 04 00 00 79 48 8D 05 C8 AC 3A 00 48 89 85 D8  ....yH....:.H...
180001720  04 00 00 C6 85 E0 04 00 00 7A 48 8D 05 B7 AC 3A  .........zH....:
180001730  00 48 89 85 E8 04 00 00 C6 85 F0 04 00 00 7B 48  .H............{H
180001740  8D 05 A6 AC 3A 00 48 89 85 F8 04 00 00 C6 85 00  ....:.H.........
180001750  05 00 00 A0 48 8D 05 95 E0 3A 00 48 89 85 08 05  ....H....:.H....
180001760  00 00 C6 85 10 05 00 00 A1 48 8D 05 88 E0 3A 00  .........H....:.
180001770  48 89 85 18 05 00 00 C6 85 20 05 00 00 A2 48 8D  H........ ....H.
180001780  05 7B E0 3A 00 48 89 85 28 05 00 00 C6 85 30 05  .{.:.H..(.....0.
180001790  00 00 A3 48 8D 05 6E E0 3A 00 48 89 85 38 05 00  ...H..n.:.H..8..
1800017A0  00 C6 85 40 05 00 00 A4 48 8D 05 61 E0 3A 00 48  ...@....H..a.:.H
1800017B0  89 85 48 05 00 00 C6 85 50 05 00 00 A5 48 8D 05  ..H.....P....H..
1800017C0  54 E0 3A 00 48 89 85 58 05 00 00 B9 30 00 00 00  T.:.H..X....0...
1800017D0  E8 1B 9F 0A 00 48 8B F0 48 89 00 48 89 40 08 48  .....H..H..H.@.H
1800017E0  89 40 10 66 C7 40 18 01 01 48 89 05 A8 56 3C 00  .@.f.@...H...V<.
1800017F0  48 8D 5C 24 40 49 BC 55 55 55 55 55 55 55 05 4C  H.\$@I.UUUUUUU.L
180001800  8D 35 92 56 3C 00 45 33 FF 0F 1F 80 00 00 00 00  .5.V<.E3........
180001810  4C 8B CB 4C 8B C6 48 8D 95 78 05 00 00 E8 9E 20  L..L..H..x..... 
180001820  08 00 0F 10 00 0F 11 44 24 20 F2 0F 10 40 10 F2  .......D$ ...@..
180001830  0F 11 85 70 05 00 00 80 BD 70 05 00 00 00 75 60  ...p.....p....u`
180001840  4C 39 25 59 56 3C 00 0F 84 93 00 00 00 48 8B 3D  L9%YV<.......H.=
180001850  44 56 3C 00 4C 89 74 24 30 4C 89 7C 24 38 B9 30  DV<.L.t$0L.|$8.0
180001860  00 00 00 E8 88 9E 0A 00 90 0F 10 03 0F 11 40 20  ..............@ 
180001870  48 89 38 48 89 78 08 48 89 78 10 66 C7 40 18 00  H.8H.x.H.x.f.@..
180001880  00 4C 89 7C 24 38 0F 10 44 24 20 0F 29 44 24 20  .L.|$8..D$ .)D$ 
180001890  4C 8B C0 48 8D 54 24 20 49 8B CE E8 90 22 08 00  L..H.T$ I...."..
1800018A0  48 83 C3 10 48 8D 85 60 05 00 00 48 3B D8 0F 85  H...H..`...H;...
1800018B0  5C FF FF FF 48 8D 0D A5 E5 0A 00 4C 8D 9C 24 90  \...H......L..$.
1800018C0  06 00 00 49 8B 5B 20 49 8B 73 28 49 8B 7B 30 4D  ...I.[ I.s(I.{0M
1800018D0  8B 63 38 49 8B E3 41 5F 41 5E 5D E9 04 A3 0A 00  .c8I..A_A^].....
1800018E0  E8 7B 1E 08 00 90 CC CC CC CC CC CC CC CC CC CC  .{..............
1800018F0  48 83 EC 28 B9 18 00 00 00 E8 F2 9D 0A 00 48 8D  H..(..........H.
180001900  0D DB E5 0A 00 48 89 00 48 89 40 08 48 89 05 BD  .....H..H.@.H...
180001910  5B 3C 00 48 83 C4 28 E9 C8 A2 0A 00 CC CC CC CC  [<.H..(.........
180001920  48 8D 0D 19 E6 0A 00 E9 B8 A2 0A 00 CC CC CC CC  H...............
180001930  48 8D 0D 19 E6 0A 00 E9 A8 A2 0A 00 CC CC CC CC  H...............
180001940  48 81 EC 88 00 00 00 8B 0D 8F 51 3C 00 65 48 8B  H.........Q<.eH.
180001950  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001960  0C 02 39 0D 68 5A 3C 00 7E 2D 48 8D 0D 5F 5A 3C  ..9.hZ<.~-H.._Z<
180001970  00 E8 9A 9E 0A 00 83 3D 53 5A 3C 00 FF 75 18 48  .......=SZ<..u.H
180001980  8D 0D 0A E6 0A 00 E8 59 A2 0A 00 48 8D 0D 3E 5A  .......Y...H..>Z
180001990  3C 00 E8 0D 9E 0A 00 48 8D 44 24 40 48 89 84 24  <......H.D$@H..$
1800019A0  90 00 00 00 48 8D 05 FD F4 3A 00 48 89 44 24 40  ....H....:.H.D$@
1800019B0  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
1800019C0  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 0B 00 00  $ .W....L$0A....
1800019D0  00 48 8D 15 40 F3 3A 00 48 8D 4C 24 20 E8 CE E2  .H..@.:.H.L$ ...
1800019E0  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
1800019F0  C4 59 3C 00 E8 C7 98 09 00 90 48 8D 4C 24 20 E8  .Y<.......H.L$ .
180001A00  5C E0 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  \...H...........
180001A10  48 81 EC 88 00 00 00 8B 0D BF 50 3C 00 65 48 8B  H.........P<.eH.
180001A20  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001A30  0C 02 39 0D 98 59 3C 00 7E 2D 48 8D 0D 8F 59 3C  ..9..Y<.~-H...Y<
180001A40  00 E8 CA 9D 0A 00 83 3D 83 59 3C 00 FF 75 18 48  .......=.Y<..u.H
180001A50  8D 0D 3A E5 0A 00 E8 89 A1 0A 00 48 8D 0D 6E 59  ..:........H..nY
180001A60  3C 00 E8 3D 9D 0A 00 48 8D 44 24 40 48 89 84 24  <..=...H.D$@H..$
180001A70  90 00 00 00 48 8D 05 9D F4 3A 00 48 89 44 24 40  ....H....:.H.D$@
180001A80  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001A90  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00  $ .W....L$0A....
180001AA0  00 48 8D 15 80 DD 3A 00 48 8D 4C 24 20 E8 FE E1  .H....:.H.L$ ...
180001AB0  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001AC0  F4 58 3C 00 E8 F7 97 09 00 90 48 8D 4C 24 20 E8  .X<.......H.L$ .
180001AD0  8C DF 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  ....H...........
180001AE0  48 81 EC 88 00 00 00 8B 0D EF 4F 3C 00 65 48 8B  H.........O<.eH.
180001AF0  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001B00  0C 02 39 0D C8 58 3C 00 7E 2D 48 8D 0D BF 58 3C  ..9..X<.~-H...X<
180001B10  00 E8 FA 9C 0A 00 83 3D B3 58 3C 00 FF 75 18 48  .......=.X<..u.H
180001B20  8D 0D 6A E4 0A 00 E8 B9 A0 0A 00 48 8D 0D 9E 58  ..j........H...X
180001B30  3C 00 E8 6D 9C 0A 00 48 8D 44 24 40 48 89 84 24  <..m...H.D$@H..$
180001B40  90 00 00 00 48 8D 05 05 F4 3A 00 48 89 44 24 40  ....H....:.H.D$@
180001B50  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001B60  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00  $ .W....L$0A....
180001B70  00 48 8D 15 C8 F1 3A 00 48 8D 4C 24 20 E8 2E E1  .H....:.H.L$ ...
180001B80  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001B90  24 58 3C 00 E8 27 97 09 00 90 48 8D 4C 24 20 E8  $X<..'....H.L$ .
180001BA0  BC DE 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  ....H...........
180001BB0  48 81 EC 88 00 00 00 8B 0D 1F 4F 3C 00 65 48 8B  H.........O<.eH.
180001BC0  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001BD0  0C 02 39 0D F8 57 3C 00 7E 2D 48 8D 0D EF 57 3C  ..9..W<.~-H...W<
180001BE0  00 E8 2A 9C 0A 00 83 3D E3 57 3C 00 FF 75 18 48  ..*....=.W<..u.H
180001BF0  8D 0D 9A E3 0A 00 E8 E9 9F 0A 00 48 8D 0D CE 57  ...........H...W
180001C00  3C 00 E8 9D 9B 0A 00 48 8D 44 24 40 48 89 84 24  <......H.D$@H..$
180001C10  90 00 00 00 48 8D 05 E5 F1 3A 00 48 89 44 24 40  ....H....:.H.D$@
180001C20  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001C30  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00  $ .W....L$0A....
180001C40  00 48 8D 15 40 E5 3A 00 48 8D 4C 24 20 E8 5E E0  .H..@.:.H.L$ .^.
180001C50  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001C60  54 57 3C 00 E8 57 96 09 00 90 48 8D 4C 24 20 E8  TW<..W....H.L$ .
180001C70  EC DD 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  ....H...........
180001C80  48 81 EC 88 00 00 00 8B 0D 4F 4E 3C 00 65 48 8B  H........ON<.eH.
180001C90  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001CA0  0C 02 39 0D 28 57 3C 00 7E 2D 48 8D 0D 1F 57 3C  ..9.(W<.~-H...W<
180001CB0  00 E8 5A 9B 0A 00 83 3D 13 57 3C 00 FF 75 18 48  ..Z....=.W<..u.H
180001CC0  8D 0D CA E2 0A 00 E8 19 9F 0A 00 48 8D 0D FE 56  ...........H...V
180001CD0  3C 00 E8 CD 9A 0A 00 48 8D 44 24 40 48 89 84 24  <......H.D$@H..$
180001CE0  90 00 00 00 48 8D 05 6D F0 3A 00 48 89 44 24 40  ....H..m.:.H.D$@
180001CF0  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001D00  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 07 00 00  $ .W....L$0A....
180001D10  00 48 8D 15 90 DF 3A 00 48 8D 4C 24 20 E8 8E DF  .H....:.H.L$ ...
180001D20  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001D30  84 56 3C 00 E8 87 95 09 00 90 48 8D 4C 24 20 E8  .V<.......H.L$ .
180001D40  1C DD 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  ....H...........
180001D50  48 81 EC 88 00 00 00 8B 0D 7F 4D 3C 00 65 48 8B  H.........M<.eH.
180001D60  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001D70  0C 02 39 0D 58 56 3C 00 7E 2D 48 8D 0D 4F 56 3C  ..9.XV<.~-H..OV<
180001D80  00 E8 8A 9A 0A 00 83 3D 43 56 3C 00 FF 75 18 48  .......=CV<..u.H
180001D90  8D 0D FA E1 0A 00 E8 49 9E 0A 00 48 8D 0D 2E 56  .......I...H...V
180001DA0  3C 00 E8 FD 99 0A 00 48 8D 44 24 40 48 89 84 24  <......H.D$@H..$
180001DB0  90 00 00 00 48 8D 05 B5 F0 3A 00 48 89 44 24 40  ....H....:.H.D$@
180001DC0  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001DD0  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 09 00 00  $ .W....L$0A....
180001DE0  00 48 8D 15 18 E4 3A 00 48 8D 4C 24 20 E8 BE DE  .H....:.H.L$ ...
180001DF0  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001E00  B4 55 3C 00 E8 B7 94 09 00 90 48 8D 4C 24 20 E8  .U<.......H.L$ .
180001E10  4C DC 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  L...H...........
180001E20  48 81 EC 88 00 00 00 8B 0D AF 4C 3C 00 65 48 8B  H.........L<.eH.
180001E30  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001E40  0C 02 39 0D 88 55 3C 00 7E 2D 48 8D 0D 7F 55 3C  ..9..U<.~-H...U<
180001E50  00 E8 BA 99 0A 00 83 3D 73 55 3C 00 FF 75 18 48  .......=sU<..u.H
180001E60  8D 0D 2A E1 0A 00 E8 79 9D 0A 00 48 8D 0D 5E 55  ..*....y...H..^U
180001E70  3C 00 E8 2D 99 0A 00 48 8D 44 24 40 48 89 84 24  <..-...H.D$@H..$
180001E80  90 00 00 00 48 8D 05 55 F0 3A 00 48 89 44 24 40  ....H..U.:.H.D$@
180001E90  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001EA0  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 0D 00 00  $ .W....L$0A....
180001EB0  00 48 8D 15 08 E0 3A 00 48 8D 4C 24 20 E8 EE DD  .H....:.H.L$ ...
180001EC0  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001ED0  E4 54 3C 00 E8 E7 93 09 00 90 48 8D 4C 24 20 E8  .T<.......H.L$ .
180001EE0  7C DB 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  |...H...........
180001EF0  48 81 EC 88 00 00 00 8B 0D DF 4B 3C 00 65 48 8B  H.........K<.eH.
180001F00  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001F10  0C 02 39 0D B8 54 3C 00 7E 2D 48 8D 0D AF 54 3C  ..9..T<.~-H...T<
180001F20  00 E8 EA 98 0A 00 83 3D A3 54 3C 00 FF 75 18 48  .......=.T<..u.H
180001F30  8D 0D 5A E0 0A 00 E8 A9 9C 0A 00 48 8D 0D 8E 54  ..Z........H...T
180001F40  3C 00 E8 5D 98 0A 00 48 8D 44 24 40 48 89 84 24  <..]...H.D$@H..$
180001F50  90 00 00 00 48 8D 05 35 EE 3A 00 48 89 44 24 40  ....H..5.:.H.D$@
180001F60  48 8D 44 24 40 48 89 44 24 78 0F 57 C0 0F 11 44  H.D$@H.D$x.W...D
180001F70  24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8 06 00 00  $ .W....L$0A....
180001F80  00 48 8D 15 D8 DE 3A 00 48 8D 4C 24 20 E8 1E DD  .H....:.H.L$ ...
180001F90  00 00 90 4C 8D 44 24 40 48 8D 54 24 20 48 8D 0D  ...L.D$@H.T$ H..
180001FA0  14 54 3C 00 E8 17 93 09 00 90 48 8D 4C 24 20 E8  .T<.......H.L$ .
180001FB0  AC DA 00 00 48 81 C4 88 00 00 00 C3 CC CC CC CC  ....H...........
180001FC0  48 81 EC 88 00 00 00 8B 0D 0F 4B 3C 00 65 48 8B  H.........K<.eH.
180001FD0  04 25 58 00 00 00 BA 04 00 00 00 48 8B 04 C8 8B  .%X........H....
180001FE0  0C 02 39 0D E8 53 3C 00 7E 2D 48 8D 0D DF 53 3C  ..9..S<.~-H...S<
180001FF0  00 E8 1A 98 0A 00 83 3D D3 53 3C 00 FF 75 18 48  .......=.S<..u.H

========================================================================
FUNCTION: LoaderThread
RVA: 0x05000–0x06000  Size: 4096 bytes
180005000  8D 4D 00 48 89 4D B0 48 8D 4D 20 48 89 4D B8 48  .M.H.M.H.M H.M.H
180005010  8D 4D 40 48 89 4D C0 48 8D 4D 3C 48 89 4D C8 48  .M@H.M.H.M<H.M.H
180005020  8D 4D 28 48 89 4D D0 48 8D 4D 10 48 89 4D D8 48  .M(H.M.H.M.H.M.H
180005030  8D 4D 31 48 89 4D E0 48 8D 4D 08 48 89 4D E8 48  .M1H.M.H.M.H.M.H
180005040  8D 4D 38 48 89 4D F0 84 C0 74 13 4C 8B C3 48 8B  .M8H.M...t.L..H.
180005050  54 24 50 48 8D 4D 80 E8 04 F7 FF FF EB 1D 48 8D  T$PH.M........H.
180005060  45 80 48 89 44 24 28 4D 8B CD 45 8B C2 48 8B D3  E.H.D$(M..E..H..
180005070  48 8B 4C 24 50 E8 D6 2B 00 00 90 48 8D 4D 40 E8  H.L$P..+...H.M@.
180005080  DC A9 00 00 48 8B 44 24 50 48 8B 8D D0 05 00 00  ....H.D$PH......
180005090  48 33 CC E8 38 66 0A 00 48 8B 9C 24 38 07 00 00  H3..8f..H..$8...
1800050A0  0F 28 B4 24 E0 06 00 00 48 81 C4 F0 06 00 00 41  .(.$....H......A
1800050B0  5F 41 5E 41 5D 41 5C 5F 5E 5D C3 90 4D 4B 00 00  _A^A]A\_^]..MK..
1800050C0  5C 4B 00 00 70 4B 00 00 87 4B 00 00 51 4B 00 00  \K..pK...K..QK..
1800050D0  60 4B 00 00 74 4B 00 00 8B 4B 00 00 9F 4B 00 00  `K..tK...K...K..
1800050E0  00 08 08 08 01 02 03 08 08 08 08 08 08 08 08 08  ................
1800050F0  08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08  ................
180005100  04 08 08 08 05 06 07 CC CC CC CC CC CC CC CC CC  ................
180005110  48 89 5C 24 10 55 56 57 41 54 41 55 41 56 41 57  H.\$.UVWATAUAVAW
180005120  48 8D AC 24 10 FA FF FF 48 81 EC F0 06 00 00 0F  H..$....H.......
180005130  29 B4 24 E0 06 00 00 48 8B 05 02 FF 3B 00 48 33  ).$....H....;.H3
180005140  C4 48 89 85 D0 05 00 00 4D 8B E9 0F 28 F2 48 8B  .H......M...(.H.
180005150  DA 48 89 4C 24 50 33 FF 41 0F B6 41 0A 88 45 30  .H.L$P3.A..A..E0
180005160  84 C0 75 04 C6 45 30 02 40 32 F6 41 BE 03 00 00  ..u..E0.@2.A....
180005170  00 41 B4 65 41 8B 51 04 45 32 FF 41 0F BE 41 08  .A.eA.Q.E2.A..A.
180005180  83 C0 BF 41 B9 01 00 00 00 83 F8 26 77 71 48 98  ...A.......&wqH.
180005190  4C 8D 05 69 AE FF FF 41 0F B6 84 00 40 57 00 00  L..i...A....@W..
1800051A0  41 8B 8C 80 1C 57 00 00 49 03 C8 FF E1 41 0F B6  A....W..I....A..
1800051B0  F1 41 BE 04 00 00 00 41 B4 70 EB 47 41 0F B6 F1  .A.....A.p.GA...
1800051C0  B8 06 00 00 00 83 FA FF 0F 44 D0 45 8B F1 EB 33  .........D.E...3
1800051D0  41 0F B6 F1 B8 06 00 00 00 83 FA FF 0F 44 D0 41  A............D.A
1800051E0  BE 02 00 00 00 EB 1C 41 0F B6 F1 83 FA FF 75 07  .......A......u.
1800051F0  BA 06 00 00 00 EB 0C 85 D2 41 0F 44 D1 EB 04 45  .........A.D...E
180005200  0F B6 F9 8B C2 B9 32 04 00 00 3B D1 0F 4F C1 89  ......2...;..O..
180005210  44 24 38 8D 82 CE FB FF FF 0F 4E C7 89 44 24 34  D$8.......N..D$4
180005220  0F 28 C6 FF 15 3F C5 0A 00 8B D0 85 C0 0F 95 45  .(...?.........E
180005230  32 66 0F 2E F6 0F 9A C0 3C 01 75 33 48 8D 45 60  2f......<.u3H.E`
180005240  48 8D 4D 61 85 D2 48 0F 44 C8 48 89 4D 10 8B 05  H.Ma..H.D.H.M...
180005250  D8 F0 0C 00 66 89 01 0F B6 05 D0 F0 0C 00 88 41  ....f..........A
180005260  02 48 8B 55 10 48 83 C2 03 48 89 55 10 EB 50 8B  .H.U.H...H.U..P.
180005270  44 24 38 0F 28 DE 4C 8D 85 C9 05 00 00 48 8D 55  D$8.(.L......H.U
180005280  60 48 8D 4C 24 40 83 F8 FF 75 18 45 84 FF 74 07  `H.L$@...u.E..t.
180005290  E8 9B 5C 00 00 EB 1A 44 89 74 24 20 E8 9F 4B 00  ..\....D.t$ ..K.
1800052A0  00 EB 0E 89 44 24 28 44 89 74 24 20 E8 AF 49 00  ....D$(D.t$ ..I.
1800052B0  00 0F 28 44 24 40 0F 29 45 10 66 48 0F 7E C2 4C  ..(D$@.)E.fH.~.L
1800052C0  8D 45 60 4C 89 45 00 44 8B D2 45 2B D0 44 89 55  .E`L.E.D..E+.D.U
1800052D0  34 40 38 7D 32 74 0A 4C 8D 45 61 4C 89 45 00 EB  4@8}2t.L.EaL.E..
1800052E0  0D 80 7D 30 02 74 07 41 FF C2 44 89 55 34 40 84  ..}0.t.A..D.U4@.
1800052F0  F6 74 2E 4C 3B C2 74 25 41 0F B6 00 3C 61 7C 09  .t.L;.t%A...<a|.
180005300  3C 7A 7F 05 2C 20 41 88 00 49 FF C0 4C 3B C2 75  <z.., A..I..L;.u
180005310  E7 48 8B 55 10 4C 8B 45 00 44 8B 55 34 41 80 C4  .H.U.L.E.D.U4A..
180005320  E0 66 48 0F 7E F0 48 C1 E8 34 25 FF 07 00 00 3D  .fH.~.H..4%....=
180005330  FF 07 00 00 0F 95 C0 34 01 88 44 24 30 40 0F B6  .......4..D$0@..
180005340  F7 40 88 7D 31 48 8B CA 48 89 55 08 4C 8B DA 48  .@.}1H..H.U.L..H
180005350  89 55 28 48 89 55 20 89 7D 38 89 7D 3C 0F 57 C0  .U(H.U .}8.}<.W.
180005360  0F 11 45 40 48 89 7D 50 48 C7 45 58 0F 00 00 00  ..E@H.}PH.EX....
180005370  40 88 7D 40 0F 85 94 02 00 00 45 0F B6 7D 0B 45  @.}@......E..}.E
180005380  84 FF 75 0A 45 38 7D 0C 0F 84 AC 01 00 00 49 8B  ..u.E8}.......I.
180005390  C0 4C 3B C2 73 27 44 0F B6 08 41 80 F9 2E 75 09  .L;.s'D...A...u.
1800053A0  4C 8B D8 48 89 45 28 EB 0C 45 3A CC 75 07 48 8B  L..H.E(..E:.u.H.
1800053B0  C8 48 89 45 08 48 FF C0 48 3B C2 72 D9 49 8B C3  .H.E.H..H;.r.I..
1800053C0  49 3B CB 48 0F 42 C1 48 89 45 20 45 84 FF 74 13  I;.H.B.H.E E..t.
1800053D0  4C 3B DA 75 0E 41 FF C2 44 89 55 34 40 B6 01 40  L;.u.A..D.U4@..@
1800053E0  88 75 31 41 80 7D 0C 00 0F 84 4C 01 00 00 48 8B  .u1A.}....L...H.
1800053F0  85 50 06 00 00 48 85 C0 74 11 48 8B 48 08 48 89  .P...H..t.H.H.H.
180005400  4C 24 48 48 8B 01 FF 50 08 EB 0D B1 01 FF 15 85  L$HH...P........
180005410  BF 0A 00 48 89 44 24 48 48 8D 4C 24 40 E8 DE 89  ...H.D$HH.L$@...
180005420  00 00 48 8B C8 48 8B 00 48 8D 54 24 58 FF 50 28  ..H..H..H.T$X.P(
180005430  48 8B 55 58 48 83 FA 0F 76 43 48 FF C2 48 8B 4D  H.UXH...vCH..H.M
180005440  40 48 8B C1 48 81 FA 00 10 00 00 72 2B 48 83 C2  @H..H......r+H..
180005450  27 48 8B 49 F8 48 2B C1 48 83 E8 08 48 83 F8 1F  'H.I.H+.H...H...
180005460  76 16 48 89 7C 24 20 45 33 C9 45 33 C0 33 D2 33  v.H.|$ E3.E3.3.3
180005470  C9 FF 15 C9 C3 0A 00 CC E8 DB 62 0A 00 0F 10 44  ..........b....D
180005480  24 58 0F 11 45 40 0F 10 4C 24 68 0F 11 4D 50 48  $X..E@..L$h..MPH
180005490  89 7C 24 68 48 C7 44 24 70 0F 00 00 00 C6 44 24  .|$hH.D$p.....D$
1800054A0  58 00 48 8D 4C 24 58 E8 B4 A5 00 00 90 48 8B 4C  X.H.L$X......H.L
1800054B0  24 48 48 85 C9 74 18 48 8B 01 FF 50 10 48 8B C8  $HH..t.H...P.H..
1800054C0  48 85 C0 74 0A 48 8B 00 BA 01 00 00 00 FF 10 48  H..t.H.........H
1800054D0  8D 45 40 48 83 7D 58 0F 48 0F 47 45 40 4C 8B 4D  .E@H.}X.H.GE@L.M
1800054E0  20 4C 8B 45 00 4D 2B C8 48 8B 55 50 48 85 D2 74   L.E.M+.H.UPH..t
1800054F0  2C 4C 0F BE 10 4D 3B CA 76 23 48 8D 0C 02 66 90  ,L...M;.v#H...f.
180005500  49 0F BE D2 4C 2B CA FF C7 48 8D 50 01 48 3B D1  I...L+...H.P.H;.
180005510  48 0F 45 C2 4C 0F BE 10 4D 3B CA 77 E3 89 7D 3C  H.E.L...M;.w..}<
180005520  44 8B 55 34 44 03 D7 44 89 55 34 48 8B 55 10 0F  D.U4D..D.U4H.U..
180005530  B6 75 31 48 8B 4D 08 8B 7D 38 41 83 EE 01 0F 84  .u1H.M..}8A.....
180005540  9A 00 00 00 41 83 EE 01 0F 84 B4 00 00 00 41 83  ....A.........A.
180005550  FE 01 0F 85 86 00 00 00 41 80 7D 0B 00 0F 84 A6  ........A.}.....
180005560  00 00 00 41 0F B6 45 08 3C 67 74 08 3C 47 0F 85  ...A..E.<gt.<G..
180005570  95 00 00 00 8B C1 41 2B C0 40 84 F6 75 02 FF C8  ......A+.@..u...
180005580  44 8B 4C 24 34 44 2B C8 44 03 4C 24 38 41 8B F9  D.L$4D+.D.L$8A..
180005590  44 89 4D 38 48 3B CA 75 70 0F 28 CE 0F 54 0D 4D  D.M8H;.up.(..T.M
1800055A0  E0 3A 00 F2 0F 10 05 DD DC 3A 00 66 0F 2F C1 76  .:.......:.f./.v
1800055B0  58 0F 57 C0 66 0F 2E F0 7A 02 74 4D 4C 3B C2 73  X.W.f...z.tML;.s
1800055C0  48 41 0F B6 00 3C 30 75 07 FF C7 89 7D 38 EB 04  HA...<0u....}8..
1800055D0  3C 2E 75 35 49 FF C0 4C 3B C2 72 E5 EB 2B 8B 7C  <.u5I..L;.r..+.|
1800055E0  24 34 85 FF 74 20 41 80 7D 0B 00 75 19 41 80 7D  $4..t A.}..u.A.}
1800055F0  0C 00 75 12 48 FF C9 48 89 4D 08 44 38 21 75 F4  ..u.H..H.M.D8!u.
180005600  EB 04 8B 7C 24 34 89 7D 38 0F B6 44 24 30 44 03  ...|$4.}8..D$0D.
180005610  D7 44 89 55 34 41 80 7D 0D 00 74 0F 41 80 7D 09  .D.U4A.}..t.A.}.
180005620  00 75 08 84 C0 75 04 B0 01 EB 02 32 C0 88 45 33  .u...u.....2..E3
180005630  48 8D 4D 30 48 89 4D 80 48 8D 4D 32 48 89 4D 88  H.M0H.M.H.M2H.M.
180005640  48 8D 4D 33 48 89 4D 90 48 8D 4D 34 48 89 4D 98  H.M3H.M.H.M4H.M.
180005650  4C 89 6D A0 48 8D 8D 50 06 00 00 48 89 4D A8 48  L.m.H..P...H.M.H
180005660  8D 4D 00 48 89 4D B0 48 8D 4D 20 48 89 4D B8 48  .M.H.M.H.M H.M.H
180005670  8D 4D 40 48 89 4D C0 48 8D 4D 3C 48 89 4D C8 48  .M@H.M.H.M<H.M.H
180005680  8D 4D 28 48 89 4D D0 48 8D 4D 10 48 89 4D D8 48  .M(H.M.H.M.H.M.H
180005690  8D 4D 31 48 89 4D E0 48 8D 4D 08 48 89 4D E8 48  .M1H.M.H.M.H.M.H
1800056A0  8D 4D 38 48 89 4D F0 84 C0 74 13 4C 8B C3 48 8B  .M8H.M...t.L..H.
1800056B0  54 24 50 48 8D 4D 80 E8 A4 F0 FF FF EB 1D 48 8D  T$PH.M........H.
1800056C0  45 80 48 89 44 24 28 4D 8B CD 45 8B C2 48 8B D3  E.H.D$(M..E..H..
1800056D0  48 8B 4C 24 50 E8 76 25 00 00 90 48 8D 4D 40 E8  H.L$P.v%...H.M@.
1800056E0  7C A3 00 00 48 8B 44 24 50 48 8B 8D D0 05 00 00  |...H.D$PH......
1800056F0  48 33 CC E8 D8 5F 0A 00 48 8B 9C 24 38 07 00 00  H3..._..H..$8...
180005700  0F 28 B4 24 E0 06 00 00 48 81 C4 F0 06 00 00 41  .(.$....H......A
180005710  5F 41 5E 41 5D 41 5C 5F 5E 5D C3 90 AD 51 00 00  _A^A]A\_^]...Q..
180005720  BC 51 00 00 D0 51 00 00 E7 51 00 00 B1 51 00 00  .Q...Q...Q...Q..
180005730  C0 51 00 00 D4 51 00 00 EB 51 00 00 FF 51 00 00  .Q...Q...Q...Q..
180005740  00 08 08 08 01 02 03 08 08 08 08 08 08 08 08 08  ................
180005750  08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08  ................
180005760  04 08 08 08 05 06 07 CC CC CC CC CC CC CC CC CC  ................
180005770  40 53 56 57 41 54 41 57 48 83 EC 30 48 8B 05 BD  @SVWATAWH..0H...
180005780  F8 3B 00 48 33 C4 48 89 44 24 20 48 8B 39 49 8B  .;.H3.H.D$ H.9I.
180005790  D8 4C 89 74 24 78 4C 8B E2 4C 8B F9 4C 8D 77 02  .L.t$xL..L..L.w.
1800057A0  49 3B FE 74 40 48 89 6C 24 70 66 0F 1F 44 00 00  I;.t@H.l$pf..D..
1800057B0  48 8B 53 10 0F B6 2F 48 FF C2 48 3B 53 18 76 08  H.S.../H..H;S.v.
1800057C0  48 8B 03 48 8B CB FF 10 48 8B 4B 10 48 FF C7 48  H..H....H.K.H..H
1800057D0  8B 43 08 40 88 2C 01 48 FF 43 10 49 3B FE 75 D0  .C.@.,.H.C.I;.u.
1800057E0  48 8B 6C 24 70 49 8B 47 08 4C 8B 74 24 78 80 38  H.l$pI.G.L.t$x.8
1800057F0  00 74 4B 49 8B 47 18 8B 08 49 8B 47 10 8B 10 3B  .tKI.G...I.G...;
180005800  D1 7D 3B 2B CA 48 63 F9 85 C9 7E 32 0F 1F 40 00  .};+.Hc...~2..@.
180005810  48 8B 53 10 48 FF C2 48 3B 53 18 76 08 48 8B 03  H.S.H..H;S.v.H..
180005820  48 8B CB FF 10 4C 8B 43 10 48 FF CF 48 8B 4B 08  H....L.C.H..H.K.
180005830  41 C6 04 08 30 48 FF 43 10 48 85 FF 7F D2 4D 8B  A...0H.C.H....M.
180005840  47 28 4C 8B CB 49 8B 57 20 49 8B CC 4D 8B 00 E8  G(L..I.W I..M...
180005850  6C 23 00 00 49 8B C4 48 8B 4C 24 20 48 33 CC E8  l#..I..H.L$ H3..
180005860  6C 5E 0A 00 48 83 C4 30 41 5F 41 5C 5F 5E 5B C3  l^..H..0A_A\_^[.
180005870  40 53 55 56 57 41 55 41 56 41 57 48 81 EC 80 00  @SUVWAUAVAWH....
180005880  00 00 48 8B 05 B7 F7 3B 00 48 33 C4 48 89 44 24  ..H....;.H3.H.D$
180005890  70 41 8B 71 04 4D 8B E9 48 8B DA 4C 8B F9 85 F6  pA.q.M..H..L....
1800058A0  79 56 41 83 39 00 7F 50 49 8B 38 49 8B 68 08 48  yVA.9..PI.8I.h.H
1800058B0  03 EF 48 3B FD 74 39 66 0F 1F 84 00 00 00 00 00  ..H;.t9f........
1800058C0  48 8B 53 10 0F B6 37 48 FF C2 48 3B 53 18 76 08  H.S...7H..H;S.v.
1800058D0  48 8B 03 48 8B CB FF 10 48 8B 53 10 48 FF C7 48  H..H....H.S.H..H
1800058E0  8B 4B 08 40 88 34 0A 48 FF 43 10 48 3B FD 75 D0  .K.@.4.H.C.H;.u.
1800058F0  49 89 1F E9 83 01 00 00 41 0F 10 08 33 FF 4C 89  I.......A...3.L.
180005900  A4 24 C8 00 00 00 4D 8B 60 08 44 8B CF 66 49 0F  .$....M.`.D..fI.
180005910  7E CA 48 89 7C 24 64 4D 03 E2 89 7C 24 6C 4C 89  ~.H.|$dM...|$lL.
180005920  54 24 48 49 8B C4 48 89 44 24 50 48 89 7C 24 58  T$HI..H.D$PH.|$X
180005930  89 7C 24 60 4D 3B D4 74 2C 4C 8D 4C 24 60 4D 8B  .|$`M;.t,L.L$`M.
180005940  C4 49 8B D2 48 8D 4C 24 30 E8 C2 85 00 00 44 8B  .I..H.L$0.....D.
180005950  4C 24 60 4C 8B 54 24 48 48 8B 08 48 8B 44 24 50  L$`L.T$HH..H.D$P
180005960  48 89 4C 24 58 40 88 7C 24 68 4C 3B D0 0F 84 D6  H.L$X@.|$hL;....
180005970  00 00 00 BD FF FF FF 7F 48 8D 15 59 E2 0C 00 44  ........H..Y...D
180005980  8B DF 48 8D 0D 27 DF 0C 00 3B FE 75 08 85 F6 0F  ..H..'...;.u....
180005990  89 B4 00 00 00 41 81 F9 FD 25 00 00 73 1D B8 01  .....A...%..s...
1800059A0  00 00 00 44 3B 09 72 66 83 F0 03 48 83 C1 04 48  ...D;.rf...H...H
1800059B0  3B CA 75 EF B8 01 00 00 00 EB 53 48 8B C1 BA CA  ;.u.......SH....
1800059C0  00 00 00 0F 1F 40 00 66 0F 1F 84 00 00 00 00 00  .....@.f........
1800059D0  4C 8B C2 49 D1 E8 46 3B 0C 80 4A 8D 0C 80 73 05  L..I..F;..J...s.
1800059E0  49 8B D0 EB 11 48 8D 41 04 48 C7 C1 FF FF FF FF  I....H.A.H......
1800059F0  49 2B C8 48 03 D1 48 85 D2 7F D5 48 8D 0D AE DE  I+.H..H....H....
180005A00  0C 00 48 2B C1 48 C1 F8 02 83 E0 01 FF C0 8B CD  ..H+.H..........
180005A10  2B C8 3B CF 7C 2F 03 F8 3B FE 7E 04 85 F6 79 20  +.;.|/..;.~...y 
180005A20  48 8D 4C 24 48 E8 86 2E 00 00 4C 8B 54 24 48 4C  H.L$H.....L.T$HL
180005A30  3B 54 24 50 74 13 44 8B 4C 24 60 E9 38 FF FF FF  ;T$Pt.D.L$`.8...
180005A40  41 8B FB EB 04 85 F6 78 05 8B EF 4D 8B E2 48 8D  A......x...M..H.
180005A50  44 24 30 4C 89 64 24 40 4D 8B CD 48 89 44 24 28  D$0L.d$@M..H.D$(
180005A60  44 8B C5 48 8B D3 49 8B CF 0F 11 4C 24 30 E8 DD  D..H..I....L$0..
180005A70  25 00 00 4C 8B A4 24 C8 00 00 00 49 8B C7 48 8B  %..L..$....I..H.
180005A80  4C 24 70 48 33 CC E8 45 5C 0A 00 48 81 C4 80 00  L$pH3..E\..H....
180005A90  00 00 41 5F 41 5E 41 5D 5F 5E 5D 5B C3 CC CC CC  ..A_A^A]_^][....
180005AA0  48 89 5C 24 18 48 89 7C 24 20 41 56 48 83 EC 30  H.\$.H.|$ AVH..0
180005AB0  4D 8B F0 49 8B D9 4C 8B 41 10 48 8B F9 4C 3B C2  M..I..L.A.H..L;.
180005AC0  0F 82 D2 00 00 00 4C 8B 49 18 49 8B C1 49 2B C0  ......L.I.I..I+.
180005AD0  48 3B D8 0F 87 99 00 00 00 48 89 74 24 40 49 8D  H;.......H.t$@I.
180005AE0  04 18 48 89 41 10 4C 89 7C 24 48 49 83 F9 0F 76  ..H.A.L.|$HI...v
180005AF0  03 48 8B 09 4C 8D 3C 11 49 8D 04 1E 49 3B C7 76  .H..L.<.I...I;.v
180005B00  1A 49 8D 04 08 4C 3B F0 77 11 4D 3B FE 77 04 33  .I...L;.w.M;.w.3
180005B10  F6 EB 0B 49 8B F7 49 2B F6 EB 03 48 8B F3 4C 2B  ...I..I+...H..L+
180005B20  C2 49 8D 0C 1F 49 FF C0 49 8B D7 E8 8E 6E 0A 00  .I...I..I....n..
180005B30  4C 8B C6 49 8B D6 49 8B CF E8 26 6D 0A 00 4C 8B  L..I..I...&m..L.
180005B40  C3 4A 8D 14 36 4C 2B C6 4A 8D 0C 3E 48 03 D3 E8  .J..6L+.J..>H...
180005B50  10 6D 0A 00 4C 8B 7C 24 48 48 8B C7 48 8B 74 24  .m..L.|$HH..H.t$
180005B60  40 48 8B 5C 24 50 48 8B 7C 24 58 48 83 C4 30 41  @H.\$PH.|$XH..0A
180005B70  5E C3 4C 8B CA 48 89 5C 24 28 48 8B D3 4C 89 74  ^.L..H.\$(H..L.t
180005B80  24 20 E8 99 26 00 00 48 8B 5C 24 50 48 8B 7C 24  $ ..&..H.\$PH.|$
180005B90  58 48 83 C4 30 41 5E C3 E8 33 8C 00 00 CC CC CC  XH..0A^..3......
180005BA0  48 89 5C 24 08 57 48 83 EC 60 48 8B D9 0F B6 09  H.\$.WH..`H.....
180005BB0  80 F9 7D 0F 84 C0 00 00 00 80 F9 3A 0F 84 B7 00  ..}........:....
180005BC0  00 00 8D 41 D0 3C 09 0F 87 1F 01 00 00 33 C0 80  ...A.<.......3..
180005BD0  F9 30 75 0C 48 FF C3 EB 3E 0F 1F 80 00 00 00 00  .0u.H...>.......
180005BE0  3D CC CC CC 0C 0F 87 F4 00 00 00 8D 0C 80 0F BE  =...............
180005BF0  03 48 FF C3 8D 04 48 83 C0 D0 48 3B DA 74 0D 0F  .H....H...H;.t..
180005C00  B6 0B 80 F9 30 7C 05 80 F9 39 7E D4 3D FF FF FF  ....0|...9~.=...
180005C10  7F 0F 87 C8 00 00 00 48 3B DA 0F 84 CC 00 00 00  .......H;.......
180005C20  0F B6 0B 80 F9 7D 74 09 80 F9 3A 0F 85 BB 00 00  .....}t...:.....
180005C30  00 49 8B 38 48 8B 4F 08 48 83 79 18 00 0F 8F 8F  .I.8H.O.H.y.....
180005C40  00 00 00 48 C7 41 18 FF FF FF FF 48 8D 4C 24 20  ...H.A.....H.L$ 
180005C50  48 8B 57 10 44 8B C0 E8 E4 D9 FF FF 0F 10 44 24  H.W.D.........D$
180005C60  20 48 8D 4C 24 40 F2 0F 10 4C 24 30 0F 29 44 24   H.L$@...L$0.)D$
180005C70  40 F2 0F 11 4C 24 50 EB 41 49 8B 38 48 8B 4F 08  @...L$P.AI.8H.O.
180005C80  4C 8B 41 18 4D 85 C0 78 70 49 8D 40 01 48 89 41  L.A.M..xpI.@.H.A
180005C90  18 48 8D 4C 24 40 48 8B 57 10 E8 A1 D9 FF FF 0F  .H.L$@H.W.......
180005CA0  10 44 24 40 48 8D 4C 24 20 F2 0F 10 4C 24 50 0F  .D$@H.L$ ...L$P.
180005CB0  29 44 24 20 F2 0F 11 4C 24 30 E8 51 2F 00 00 48  )D$ ...L$0.Q/..H
180005CC0  8B 0F 89 01 48 8B C3 48 8B 5C 24 70 48 83 C4 60  ....H..H.\$pH..`
180005CD0  5F C3 48 8D 0D 17 B8 0C 00 E8 12 85 00 00 CC 48  _.H............H
180005CE0  8D 0D BA B5 0C 00 E8 05 85 00 00 CC 48 8D 0D 1D  ............H...
180005CF0  B5 0C 00 E8 F8 84 00 00 CC 48 8D 0D 68 B5 0C 00  .........H..h...
180005D00  E8 EB 84 00 00 CC CC CC CC CC CC CC CC CC CC CC  ................
180005D10  48 89 5C 24 08 57 48 83 EC 60 44 0F B6 09 48 8B  H.\$.WH..`D...H.
180005D20  D9 41 80 F9 7D 0F 84 EB 00 00 00 41 80 F9 3A 0F  .A..}......A..:.
180005D30  84 E1 00 00 00 41 8D 41 D0 3C 09 0F 87 4F 01 00  .....A.A.<...O..
180005D40  00 33 C9 41 80 F9 30 75 07 48 FF C3 EB 39 66 90  .3.A..0u.H...9f.
180005D50  81 F9 CC CC CC 0C 0F 87 27 01 00 00 0F BE 03 8D  ........'.......
180005D60  0C 89 48 FF C3 8D 49 E8 8D 0C 48 48 3B DA 74 0B  ..H...I...HH;.t.
180005D70  0F B6 03 3C 30 7C 04 3C 39 7E D5 81 F9 FF FF FF  ...<0|.<9~......
180005D80  7F 0F 87 FC 00 00 00 48 3B DA 0F 84 00 01 00 00  .......H;.......
180005D90  0F B6 03 3C 7D 74 08 3C 3A 0F 85 F1 00 00 00 49  ...<}t.<:......I
180005DA0  8B 38 0F B6 57 18 8D 42 FF 3C 05 0F 86 B8 00 00  .8..W..B.<......
180005DB0  00 80 FA 0A 0F 84 AF 00 00 00 48 8B 47 08 48 83  ..........H.G.H.
180005DC0  78 18 00 0F 8F AD 00 00 00 48 C7 40 18 FF FF FF  x........H.@....
180005DD0  FF 48 8B 57 10 44 8B C1 48 8D 4C 24 20 E8 5E D8  .H.W.D..H.L$ .^.
180005DE0  FF FF 0F 10 44 24 20 48 8D 4C 24 40 F2 0F 10 4C  ....D$ H.L$@...L
180005DF0  24 30 0F 29 44 24 40 F2 0F 11 4C 24 50 E8 4E 2F  $0.)D$@...L$P.N/
180005E00  00 00 48 8B 0F 89 41 04 48 8B C3 48 8B 5C 24 70  ..H...A.H..H.\$p
180005E10  48 83 C4 60 5F C3 49 8B 38 0F B6 4F 18 8D 41 FF  H..`_.I.8..O..A.
180005E20  3C 05 76 45 80 F9 0A 74 40 48 8B 4F 08 4C 8B 41  <.vE...t@H.O.L.A
180005E30  18 4D 85 C0 78 67 49 8D 40 01 48 89 41 18 48 8D  .M..xgI.@.H.A.H.
180005E40  4C 24 40 48 8B 57 10 E8 F4 D7 FF FF 0F 10 44 24  L$@H.W........D$
180005E50  40 48 8D 4C 24 20 F2 0F 10 4C 24 50 0F 29 44 24  @H.L$ ...L$P.)D$
180005E60  20 F2 0F 11 4C 24 30 EB 94 48 8D 0D 78 B7 0C 00   ...L$0..H..x...
180005E70  E8 7B 83 00 00 CC 48 8D 0D 73 B6 0C 00 E8 6E 83  .{....H..s....n.
180005E80  00 00 CC 48 8D 0D 16 B4 0C 00 E8 61 83 00 00 CC  ...H.......a....
180005E90  48 8D 0D 79 B3 0C 00 E8 54 83 00 00 CC 48 8D 0D  H..y....T....H..
180005EA0  C4 B3 0C 00 E8 47 83 00 00 CC CC CC CC CC CC CC  .....G..........
180005EB0  40 55 53 56 57 41 54 41 56 41 57 48 8D 6C 24 90  @USVWATAVAWH.l$.
180005EC0  48 81 EC 70 01 00 00 48 8B 05 72 F1 3B 00 48 33  H..p...H..r.;.H3
180005ED0  C4 48 89 45 60 4D 8B F1 48 8B DA 4C 8B E1 44 88  .H.E`M..H..L..D.
180005EE0  45 C8 33 FF 41 0F B6 41 08 3C 63 75 3D 41 80 F8  E.3.A..A.<cu=A..
180005EF0  7F 0F 87 94 03 00 00 41 88 79 0B 41 0F 10 01 0F  .......A.y.A....
180005F00  29 44 24 30 41 8B 49 10 89 4C 24 40 48 8B 8D D0  )D$0A.I..L$@H...
180005F10  00 00 00 48 89 4C 24 20 4C 8D 4C 24 30 49 8B CC  ...H.L$ L.L$0I..
180005F20  E8 3B E1 FF FF E9 40 03 00 00 41 38 79 0A 75 05  .;....@...A8y.u.
180005F30  41 C6 41 0A 02 B9 0A 00 00 00 BE 02 00 00 00 3C  A.A............<
180005F40  42 74 1E 3C 58 74 0C 3C 62 74 16 3C 6F 74 0B 3C  Bt.<Xt.<bt.<ot.<
180005F50  78 75 10 B9 10 00 00 00 EB 09 B9 08 00 00 00 EB  xu..............
180005F60  02 8B CE 89 4C 24 20 45 0F B6 C8 4C 8D 45 51 48  ....L$ E...L.EQH
180005F70  8D 55 10 48 8D 4C 24 30 E8 13 2F 00 00 48 8D 4D  .U.H.L$0../..H.M
180005F80  10 48 89 4D C0 4C 8B 7C 24 30 41 8B C7 2B C1 89  .H.M.L.|$0A..+..
180005F90  45 D4 41 38 76 0A 74 05 FF C0 89 45 D4 41 80 7E  E.A8v.t....E.A.~
180005FA0  08 58 75 27 48 8D 4D 10 48 8D 55 10 49 3B D7 74  .Xu'H.M.H.U.I;.t
180005FB0  1A 0F B6 01 3C 61 7C 08 3C 7A 7F 04 2C 20 88 01  ....<a|.<z.., ..
180005FC0  48 FF C1 49 3B CF 75 E9 8B 45 D4 48 89 7D 00 48  H..I;.u..E.H.}.H
180005FD0  89 7D 08 41 38 7E 0B 0F 84 84 00 00 00 41 0F B6  .}.A8~.......A..
180005FE0  4E 08 80 F9 42 74 5A 80 F9 58 74 4C 80 F9 62 74  N...BtZ..XtL..bt
180005FF0  3E 80 F9 6F 74 1C 80 F9 78 74 0E 48 89 7C 24 30  >..ot...xt.H.|$0

========================================================================
FUNCTION: WndProc
RVA: 0x826A0–0x827A0  Size: 256 bytes
1800826A0  48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57  H.\$.H.l$.H.t$.W
1800826B0  48 83 EC 30 48 8B 05 45 45 34 00 49 8B F1 49 8B  H..0H..EE4.I..I.
1800826C0  F8 8B DA 48 8B E9 48 85 C0 74 1D 48 83 C0 30 48  ...H..H..t.H..0H
1800826D0  89 44 24 20 E8 47 50 FD FF 48 85 C0 74 0A B8 01  .D$ .GP..H..t...
1800826E0  00 00 00 E9 9B 00 00 00 83 FB 02 0F 84 88 00 00  ................
1800826F0  00 83 FB 05 74 2B 81 FB 12 01 00 00 75 10 48 8B  ....t+......u.H.
180082700  C7 25 F0 FF 00 00 48 3D 00 F1 00 00 74 73 4C 8B  .%....H=....tsL.
180082710  CE 4C 8B C7 8B D3 48 8B CD FF 15 21 EE 02 00 EB  .L....H....!....
180082720  62 48 83 3D 0F 45 34 00 00 74 56 48 83 FF 01 74  bH.=.E4..tVH...t
180082730  50 48 8B 0D E8 44 34 00 33 DB 48 85 C9 74 0D 48  PH...D4.3.H..t.H
180082740  8B 01 FF 50 10 48 89 1D D4 44 34 00 48 8B 0D DD  ...P.H...D4.H...
180082750  44 34 00 48 8B C6 48 C1 E8 10 33 D2 44 0F B7 C8  D4.H..H...3.D...
180082760  44 0F B7 C6 48 8B 01 89 5C 24 28 89 5C 24 20 FF  D...H...\$(.\$ .
180082770  50 68 E8 39 FE FF FF EB 08 33 C9 FF 15 6F ED 02  Ph.9.....3...o..
180082780  00 33 C0 48 8B 5C 24 40 48 8B 6C 24 48 48 8B 74  .3.H.\$@H.l$HH.t
180082790  24 50 48 83 C4 30 5F C3 CC CC CC CC CC CC CC CC  $PH..0_.........

========================================================================
FUNCTION: OverlayWindowInit
RVA: 0x827A0–0x8301A  Size: 2170 bytes
1800827A0  48 8B C4 48 89 58 08 48 89 70 10 48 89 78 18 55  H..H.X.H.p.H.x.U
1800827B0  41 54 41 55 41 56 41 57 48 8D A8 F8 FC FF FF 48  ATAUAVAWH......H
1800827C0  81 EC E0 03 00 00 0F 29 70 C8 48 8B 05 6F 28 34  .......)p.H..o(4
1800827D0  00 48 33 C4 48 89 85 C0 02 00 00 48 8B 05 1E 44  .H3.H......H...D
1800827E0  34 00 48 85 C0 74 10 48 8B 88 D0 00 00 00 48 85  4.H..t.H......H.
1800827F0  C9 74 04 C6 41 30 01 41 BF 04 00 00 00 33 D2 B9  .t..A0.A.....3..
180082800  0A 00 00 00 E8 37 5C FD FF 8B 3D CD 42 34 00 85  .....7\...=.B4..
180082810  C0 74 75 65 48 8B 04 25 58 00 00 00 48 8B 0C F8  .tueH..%X...H...
180082820  41 8B 04 0F 39 05 16 4C 34 00 7E 35 48 8D 0D 0D  A...9..L4.~5H...
180082830  4C 34 00 E8 D8 8F 02 00 83 3D 01 4C 34 00 FF 75  L4.......=.L4..u
180082840  20 48 8D 0D 28 C4 32 00 FF 15 92 E8 02 00 48 89   H..(.2.......H.
180082850  05 FB 4B 34 00 48 8D 0D E4 4B 34 00 E8 43 8F 02  ..K4.H...K4..C..
180082860  00 48 8D 15 18 C4 32 00 48 8B 0D E1 4B 34 00 FF  .H....2.H...K4..
180082870  15 13 E8 02 00 48 85 C0 74 0E 48 C7 C1 FC FF FF  .....H..t.H.....
180082880  FF FF D0 E9 89 00 00 00 BA 03 00 00 00 B9 06 00  ................
180082890  00 00 E8 A9 5B FD FF 85 C0 74 70 65 48 8B 04 25  ....[....tpeH..%
1800828A0  58 00 00 00 48 8B 0C F8 41 8B 04 0F 39 05 96 4B  X...H...A...9..K
1800828B0  34 00 7E 35 48 8D 0D 8D 4B 34 00 E8 50 8F 02 00  4.~5H...K4..P...
1800828C0  83 3D 81 4B 34 00 FF 75 20 48 8D 0D D0 C3 32 00  .=.K4..u H....2.
1800828D0  FF 15 0A E8 02 00 48 89 05 53 4B 34 00 48 8D 0D  ......H..SK4.H..
1800828E0  64 4B 34 00 E8 BB 8E 02 00 48 8D 15 C0 C3 32 00  dK4......H....2.
1800828F0  48 8B 0D 39 4B 34 00 FF 15 8B E7 02 00 48 85 C0  H..9K4.......H..
180082900  74 09 B9 02 00 00 00 FF D0 EB 06 FF 15 8F EC 02  t...............
180082910  00 48 83 3D FF 42 34 00 00 75 0F 33 D2 48 8D 0D  .H.=.B4..u.3.H..
180082920  AC 0C 00 00 FF 15 76 EB 02 00 45 33 E4 4C 89 A5  ......v...E3.L..
180082930  A0 00 00 00 C7 85 90 00 00 00 50 00 00 00 33 C9  ..........P...3.
180082940  FF 15 D2 E6 02 00 48 89 85 C0 00 00 00 BA 00 7F  ......H.........
180082950  00 00 33 C9 FF 15 6E EC 02 00 48 89 85 B8 00 00  ..3...n...H.....
180082960  00 BA 00 7F 00 00 33 C9 FF 15 7A EB 02 00 48 89  ......3...z...H.
180082970  85 B0 00 00 00 BA 00 7F 00 00 33 C9 FF 15 66 EB  ..........3...f.
180082980  02 00 48 89 85 D8 00 00 00 33 C9 FF 15 FF E8 02  ..H......3......
180082990  00 48 89 85 A8 00 00 00 48 8D 05 01 FD FF FF 48  .H......H......H
1800829A0  89 85 98 00 00 00 48 8D 35 3B CC 32 00 48 89 B5  ......H.5;.2.H..
1800829B0  D0 00 00 00 4C 89 A5 C8 00 00 00 C7 85 94 00 00  ....L...........
1800829C0  00 03 00 00 00 48 8D 8D 90 00 00 00 FF 15 66 EC  .....H........f.
1800829D0  02 00 B9 01 00 00 00 FF 15 03 EB 02 00 8B D8 33  ...............3
1800829E0  C9 FF 15 F9 EA 02 00 4C 89 64 24 58 48 8B 8D A8  .......L.d$XH...
1800829F0  00 00 00 48 89 4C 24 50 4C 89 64 24 48 4C 89 64  ...H.L$PL.d$HL.d
180082A00  24 40 89 5C 24 38 89 44 24 30 44 89 64 24 28 44  $@.\$8.D$0D.d$(D
180082A10  89 64 24 20 41 B9 00 00 00 80 4C 8B C6 48 8B 95  .d$ A.....L..H..
180082A20  D0 00 00 00 B9 28 00 00 08 FF 15 21 EC 02 00 4C  .....(.....!...L
180082A30  8B F0 41 B9 02 00 00 00 41 B0 FF 33 D2 48 8B C8  ..A.....A..3.H..
180082A40  FF 15 9A EB 02 00 66 0F 6F 05 62 09 33 00 F3 0F  ......f.o.b.3...
180082A50  7F 85 08 01 00 00 48 8D 95 08 01 00 00 49 8B CE  ......H......I..
180082A60  FF 15 B2 EE 02 00 4C 89 65 14 48 C7 45 28 02 00  ......L.e.H.E(..
180082A70  00 00 48 C7 45 40 02 00 00 00 4C 89 65 00 C7 45  ..H.E@....L.e..E
180082A80  10 1C 00 00 00 C7 45 08 3C 00 00 00 C7 45 0C 01  ......E.<....E..
180082A90  00 00 00 C7 45 24 20 00 00 00 4C 89 75 30 48 C7  ....E$ ...L.u0H.
180082AA0  45 1C 01 00 00 00 48 C7 45 38 01 00 00 00 C7 85  E.....H.E8......
180082AB0  18 01 00 00 00 B0 00 00 C7 85 1C 01 00 00 00 A0  ................
180082AC0  00 00 48 8D 1D 5F 41 34 00 48 89 5C 24 58 48 8D  ..H.._A4.H.\$XH.
180082AD0  85 E0 00 00 00 48 89 44 24 50 48 8D 35 57 41 34  .....H.D$PH.5WA4
180082AE0  00 48 89 74 24 48 4C 8D 25 43 41 34 00 4C 89 64  .H.t$HL.%CA4.L.d
180082AF0  24 40 48 8D 45 00 48 89 44 24 38 C7 44 24 30 07  $@H.E.H.D$8.D$0.
180082B00  00 00 00 C7 44 24 28 02 00 00 00 48 8D 85 18 01  ....D$(....H....
180082B10  00 00 48 89 44 24 20 45 33 C9 45 33 C0 BA 01 00  ..H.D$ E3.E3....
180082B20  00 00 33 C9 FF 15 DE ED 02 00 3D 04 00 7A 88 75  ..3.......=..z.u
180082B30  53 48 89 5C 24 58 48 8D 85 E0 00 00 00 48 89 44  SH.\$XH......H.D
180082B40  24 50 48 89 74 24 48 4C 89 64 24 40 48 8D 45 00  $PH.t$HL.d$@H.E.
180082B50  48 89 44 24 38 C7 44 24 30 07 00 00 00 C7 44 24  H.D$8.D$0.....D$
180082B60  28 02 00 00 00 48 8D 85 18 01 00 00 48 89 44 24  (....H......H.D$
180082B70  20 45 33 C9 45 33 C0 BA 05 00 00 00 33 C9 FF 15   E3.E3......3...
180082B80  84 ED 02 00 85 C0 0F 85 EC 09 00 00 E8 1F FA FF  ................
180082B90  FF 48 89 BD 28 01 00 00 65 48 8B 0C 25 58 00 00  .H..(...eH..%X..
180082BA0  00 4C 8B 2C F9 43 8B 04 2F 39 05 F9 4B 34 00 7E  .L.,.C../9..K4.~
180082BB0  2D 48 8D 0D F0 4B 34 00 E8 53 8C 02 00 83 3D E4  -H...K4..S....=.
180082BC0  4B 34 00 FF 75 18 48 8D 0D D3 D4 02 00 E8 12 90  K4..u.H.........
180082BD0  02 00 48 8D 0D CF 4B 34 00 E8 C6 8B 02 00 48 8D  ..H...K4......H.
180082BE0  0D B3 47 34 00 E8 26 80 01 00 BA 0A 00 00 00 49  ..G4..&........I
180082BF0  8B CE FF 15 30 EA 02 00 49 8B CE FF 15 D7 E8 02  ....0...I.......
180082C00  00 48 8B 3D F8 3F 34 00 B9 B0 2C 00 00 FF 15 0D  .H.=.?4...,.....
180082C10  EB 02 00 4C 8B C8 4C 8B 05 E3 3F 34 00 4D 85 C0  ...L..L...?4.M..
180082C20  74 5D 45 8B 50 04 49 0F BF 90 1C 2B 00 00 49 8D  t]E.P.I....+..I.
180082C30  80 20 2B 00 00 48 8D 04 D0 44 39 10 74 36 8D 4A  . +..H...D9.t6.J
180082C40  01 B8 AB AA AA 2A F7 E9 8B C2 C1 E8 1F 03 D0 8D  .....*..........
180082C50  04 52 03 C0 2B C8 66 41 89 88 1C 2B 00 00 48 0F  .R..+.fA...+..H.
180082C60  BF C1 48 05 64 05 00 00 49 8D 04 C0 44 89 10 33  ..H.d...I...D..3
180082C70  C9 89 48 04 66 FF 40 04 41 FF 80 14 2B 00 00 4C  ..H.f.@.A...+..L
180082C80  89 8D 18 01 00 00 48 8D 44 24 60 48 89 85 E0 00  ......H.D$`H....
180082C90  00 00 4C 89 8D E8 00 00 00 4D 85 C9 74 0E 33 D2  ..L......M..t.3.
180082CA0  49 8B C9 E8 A8 23 F9 FF 33 DB EB 04 33 DB 8B C3  I....#..3...3...
180082CB0  48 89 05 49 3F 34 00 E8 A4 3B F9 FF 48 85 FF 74  H..I?4...;..H..t
180082CC0  09 48 89 3D 38 3F 34 00 EB 07 48 8B 3D 2F 3F 34  .H.=8?4...H.=/?4
180082CD0  00 83 4F 30 21 33 C9 E8 14 33 FC FF 0F 57 F6 0F  ..O0!3...3...W..
180082CE0  11 75 30 0F 11 75 50 0F 11 75 60 0F 11 75 70 C7  .u0..uP..u`..up.
180082CF0  45 5C FF FF 7F 7F C7 45 6C 00 00 80 3F C7 45 70  E\.....El...?.Ep
180082D00  00 00 80 3F 66 89 5D 3A C6 45 34 00 4C 8B 67 68  ...?f.]:.E4.L.gh
180082D10  B9 48 1B 32 00 E8 76 61 F9 FF 4C 8B F8 48 8D 05  .H.2..va..L..H..
180082D20  DC 82 0A 00 48 89 05 AD 41 34 00 49 8D B7 48 1B  ....H...A4.I..H.
180082D30  32 00 48 89 35 A7 41 34 00 4C 89 3D A8 41 34 00  2.H.5.A4.L.=.A4.
180082D40  4C 89 3D A9 41 34 00 48 8D 1D C2 82 0A 00 48 8B  L.=.A4.H......H.
180082D50  CB E8 BA FD FC FF 48 3B C3 74 1E 0F 1F 44 00 00  ......H;.t...D..
180082D60  48 39 35 89 41 34 00 77 10 48 8B D8 48 8B C8 E8  H95.A4.w.H..H...
180082D70  9C FD FC FF 48 3B C3 75 E7 0F 28 45 30 0F 29 45  ....H;.u..(E0.)E
180082D80  A0 0F 28 4D 50 0F 28 55 60 0F 28 5D 70 C6 45 A4  ..(MP.(U`.(]p.E.
180082D90  01 0F 29 75 00 0F 29 75 10 0F 29 75 20 0F 28 45  ..)u..)u..)u .(E
180082DA0  A0 0F 29 45 30 0F 29 75 40 0F 29 4D 50 0F 29 55  ..)E0.)u@.)MP.)U
180082DB0  60 0F 29 5D 70 0F 29 B5 80 00 00 00 4C 89 7D 28  `.)]p.).....L.}(
180082DC0  C7 45 30 48 1B 32 00 C7 45 3C 00 00 70 41 48 8D  .E0H.2..E<..pAH.
180082DD0  05 5B B8 32 00 48 89 45 40 48 8D 55 00 49 8B CC  .[.2.H.E@H.U.I..
180082DE0  E8 BB 89 FC FF 48 89 47 70 0F 57 F6 0F 11 75 30  .....H.Gp.W...u0
180082DF0  0F 11 75 50 0F 11 75 60 0F 11 75 70 C7 45 5C FF  ..uP..u`..up.E\.
180082E00  FF 7F 7F C7 45 6C 00 00 80 3F C7 45 70 00 00 80  ....El...?.Ep...
180082E10  3F 45 33 E4 66 44 89 65 3A 66 C7 45 34 00 01 C6  ?E3.fD.e:f.E4...
180082E20  45 36 01 4C 8B 7F 68 B9 78 B2 08 00 E8 5F 60 F9  E6.L..h.x...._`.
180082E30  FF 48 8B F0 48 8D 05 15 5B 05 00 48 89 05 96 40  .H..H...[..H...@
180082E40  34 00 48 8D BE 78 B2 08 00 48 89 3D 90 40 34 00  4.H..x...H.=.@4.
180082E50  48 89 35 91 40 34 00 48 89 35 92 40 34 00 48 8D  H.5.@4.H.5.@4.H.
180082E60  1D FB 5A 05 00 48 8B CB E8 A3 FC FC FF 48 3B C3  ..Z..H.......H;.
180082E70  74 19 48 39 3D 77 40 34 00 77 10 48 8B D8 48 8B  t.H9=w@4.w.H..H.
180082E80  C8 E8 8A FC FC FF 48 3B C3 75 E7 0F 28 45 30 0F  ......H;.u..(E0.
180082E90  29 45 A0 0F 28 4D 50 0F 28 55 60 0F 28 5D 70 C6  )E..(MP.(U`.(]p.
180082EA0  45 A4 01 0F 29 75 00 0F 29 75 10 0F 29 75 20 0F  E...)u..)u..)u .
180082EB0  28 45 A0 0F 29 45 30 0F 29 75 40 0F 29 4D 50 0F  (E..)E0.)u@.)MP.
180082EC0  29 55 60 0F 29 5D 70 0F 29 B5 80 00 00 00 48 89  )U`.)]p.).....H.
180082ED0  75 28 C7 45 30 78 B2 08 00 C7 45 3C 00 00 70 41  u(.E0x....E<..pA
180082EE0  48 8D 05 91 C7 32 00 48 89 45 40 48 8D 55 00 49  H....2.H.E@H.U.I
180082EF0  8B CF E8 A9 88 FC FF 48 8B 05 02 3D 34 00 4C 89  .......H...=4.L.
180082F00  60 50 8B 0D E4 21 34 00 85 C9 74 24 83 E9 01 74  `P...!4...t$...t
180082F10  18 83 E9 01 74 0C 83 F9 01 75 15 E8 30 57 01 00  ....t....u..0W..
180082F20  EB 13 E8 49 38 01 00 EB 0C E8 62 19 01 00 EB 05  ...I8.....b.....
180082F30  E8 BB 12 01 00 49 8B CE E8 F3 2D FD FF E8 EE 23  .....I....-....#
180082F40  FD FF 32 DB 0F 57 C0 0F 11 85 E8 00 00 00 0F 57  ..2..W.........W
180082F50  C9 F3 0F 7F 8D F8 00 00 00 41 B8 0B 00 00 00 48  .........A.....H
180082F60  8D 15 AA C6 32 00 48 8D 8D E8 00 00 00 E8 3E CD  ....2.H.......>.
180082F70  F8 FF 90 E8 D8 B4 F8 FF 48 8D 8D E8 00 00 00 48  ........H......H
180082F80  89 4C 24 20 41 BF 01 00 00 00 45 8B CF 41 B8 F8  .L$ A.....E..A..
180082F90  00 00 00 48 8D 15 86 C6 32 00 48 8B C8 E8 3E AF  ...H....2.H...>.
180082FA0  FF FF 90 48 8D 8D E8 00 00 00 E8 B1 CA F8 FF 48  ...H...........H
180082FB0  8B BD 28 01 00 00 65 48 8B 34 25 58 00 00 00 90  ..(...eH.4%X....
180082FC0  44 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D  D.|$ E3.E3.3.H.M
180082FD0  00 FF 15 F9 E4 02 00 85 C0 74 3F 0F 1F 44 00 00  .........t?..D..
180082FE0  48 8D 4D 00 FF 15 DE E4 02 00 48 8D 4D 00 FF 15  H.M.......H.M...
180082FF0  CC E4 02 00 0F B6 DB 83 7D 08 12 41 0F 44 DF 44  ........}..A.D.D
180083000  89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D 00  .|$ E3.E3.3.H.M.
180083010  FF 15 BA E4 02 00 85 C0 75 C6                    ........u.

========================================================================
FUNCTION: ModuleManager_RenderFrame
RVA: 0x82FC0–0x8301A  Size: 90 bytes
180082FC0  44 89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D  D.|$ E3.E3.3.H.M
180082FD0  00 FF 15 F9 E4 02 00 85 C0 74 3F 0F 1F 44 00 00  .........t?..D..
180082FE0  48 8D 4D 00 FF 15 DE E4 02 00 48 8D 4D 00 FF 15  H.M.......H.M...
180082FF0  CC E4 02 00 0F B6 DB 83 7D 08 12 41 0F 44 DF 44  ........}..A.D.D
180083000  89 7C 24 20 45 33 C9 45 33 C0 33 D2 48 8D 4D 00  .|$ E3.E3.3.H.M.
180083010  FF 15 BA E4 02 00 85 C0 75 C6                    ........u.

========================================================================
FUNCTION: ESPModule_Init
RVA: 0x83E00–0x83FA0  Size: 416 bytes
180083E00  40 53 48 83 EC 40 48 8D 1D 63 31 34 00 0F 57 C0  @SH..@H..c14..W.
180083E10  0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24 30 41 B8  ..D$ .W....L$0A.
180083E20  09 00 00 00 48 8D 15 FD B9 32 00 48 8D 4C 24 20  ....H....2.H.L$ 
180083E30  E8 7B BE F8 FF 90 48 8D 05 FB BB 32 00 48 89 05  .{....H....2.H..
180083E40  2C 31 34 00 48 8D 54 24 20 48 8D 0D 28 31 34 00  ,14.H.T$ H..(14.
180083E50  E8 7B B9 F8 FF C6 05 3C 31 34 00 00 48 8D 4C 24  .{.....<14..H.L$
180083E60  20 E8 FA BB F8 FF 48 8D 05 73 BB 32 00 48 89 05   .....H..s.2.H..
180083E70  FC 30 34 00 66 0F 6F 05 94 F6 32 00 0F 29 05 2D  .04.f.o...2..).-
180083E80  31 34 00 66 0F 6F 0D 95 F6 32 00 0F 29 0D 2E 31  14.f.o...2..)..1
180083E90  34 00 66 0F 6F 05 A6 F6 32 00 0F 29 05 2F 31 34  4.f.o...2..)./14
180083EA0  00 66 0F 6F 0D 87 F6 32 00 0F 29 0D 30 31 34 00  .f.o...2..).014.
180083EB0  66 0F 6F 05 D8 F6 32 00 0F 29 05 31 31 34 00 66  f.o...2..).114.f
180083EC0  0F 6F 0D D9 F6 32 00 0F 29 0D 32 31 34 00 66 0F  .o...2..).214.f.
180083ED0  6F 05 AA F6 32 00 0F 29 05 33 31 34 00 66 0F 6F  o...2..).314.f.o
180083EE0  0D CB F6 32 00 0F 29 0D 34 31 34 00 66 0F 6F 05  ...2..).414.f.o.
180083EF0  6C F6 32 00 0F 29 05 35 31 34 00 66 0F 6F 0D 6D  l.2..).514.f.o.m
180083F00  F6 32 00 0F 29 0D 36 31 34 00 66 0F 6F 05 EE F5  .2..).614.f.o...
180083F10  32 00 0F 29 05 37 31 34 00 66 0F 6F 0D 2F F6 32  2..).714.f.o./.2
180083F20  00 0F 29 0D 38 31 34 00 C7 05 72 30 34 00 01 01  ..).814...r04...
180083F30  01 01 C7 05 6C 30 34 00 00 01 01 00 C6 05 69 30  ....l04.......i0
180083F40  34 00 00 C7 05 53 30 34 00 2C 01 00 00 48 8B C3  4....S04.,...H..
180083F50  48 83 C4 40 5B C3 CC CC CC CC CC CC CC CC CC CC  H..@[...........
180083F60  48 89 5C 24 08 57 48 83 EC 20 48 8B F9 8B DA 48  H.\$.WH.. H....H
180083F70  83 C1 08 E8 E8 BA F8 FF F6 C3 01 74 0D BA 00 01  ...........t....
180083F80  00 00 48 8B CF E8 CE 77 02 00 48 8B 5C 24 30 48  ..H....w..H.\$0H
180083F90  8B C7 48 83 C4 20 5F C3 CC CC CC CC CC CC CC CC  ..H.. _.........

========================================================================
FUNCTION: ESPModule_RenderOverlay
RVA: 0x83FA0–0x849A0  Size: 2560 bytes
180083FA0  48 8B C4 48 89 58 08 48 89 70 18 48 89 78 20 55  H..H.X.H.p.H.x U
180083FB0  41 56 41 57 48 8D 68 A1 48 81 EC B0 00 00 00 0F  AVAWH.h.H.......
180083FC0  29 70 D8 48 8B F1 8B 15 10 2B 34 00 65 48 8B 04  )p.H.....+4.eH..
180083FD0  25 58 00 00 00 41 BF 04 00 00 00 48 8B 3C D0 45  %X...A.....H.<.E
180083FE0  33 F6 42 8B 04 3F 39 05 C0 37 34 00 7E 4A 48 8D  3.B..?9..74.~JH.
180083FF0  0D B7 37 34 00 E8 16 78 02 00 83 3D AB 37 34 00  ..74...x...=.74.
180084000  FF 75 35 44 89 35 A6 37 34 00 33 D2 48 8D 0D A5  .u5D.5.74.3.H...
180084010  37 34 00 E8 78 46 02 00 90 E8 42 96 01 00 90 48  74..xF....B....H
180084020  8D 0D 0A C1 02 00 E8 B9 7B 02 00 90 48 8D 0D 79  ........{...H..y
180084030  37 34 00 E8 6C 77 02 00 0F 57 C0 0F 11 45 B7 0F  74..lw...W...E..
180084040  57 C9 F3 0F 7F 4D C7 41 B8 0C 00 00 00 48 8D 15  W....M.A.....H..
180084050  E4 B7 32 00 48 8D 4D B7 E8 53 BC F8 FF 90 4C 8D  ..2.H.M..S....L.
180084060  45 B7 48 8D 55 D7 48 8D 0D 43 37 34 00 E8 5E 97  E.H.U.H..C74..^.
180084070  01 00 90 48 83 78 18 0F 76 03 48 8B 00 33 D2 48  ...H.x..v.H..3.H
180084080  8B C8 E8 99 C7 FE FF 0F B6 D8 48 8D 4D D7 E8 CD  ..........H.M...
180084090  B9 F8 FF 90 48 8D 4D B7 E8 C3 B9 F8 FF 84 DB 0F  ....H.M.........
1800840A0  84 28 09 00 00 48 8B 0D 54 2B 34 00 48 8B 81 D8  .(...H..T+4.H...
1800840B0  15 00 00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00  ..........H.....
1800840C0  00 F3 0F 10 81 0C 0E 00 00 F3 0F 58 80 94 01 00  ...........X....
1800840D0  00 F3 0F 11 80 94 01 00 00 F3 0F 58 40 58 F3 0F  ...........X@X..
1800840E0  58 80 98 01 00 00 F3 0F 11 80 50 01 00 00 42 8B  X.........P...B.
1800840F0  04 3F 39 05 B4 36 34 00 7E 4A 48 8D 0D AB 36 34  .?9..64.~JH...64
180084100  00 E8 0A 77 02 00 83 3D 9F 36 34 00 FF 75 35 44  ...w...=.64..u5D
180084110  89 35 9A 36 34 00 33 D2 48 8D 0D 99 36 34 00 E8  .5.64.3.H...64..
180084120  6C 45 02 00 90 E8 36 95 01 00 90 48 8D 0D FE BF  lE....6....H....
180084130  02 00 E8 AD 7A 02 00 90 48 8D 0D 6D 36 34 00 E8  ....z...H..m64..
180084140  60 76 02 00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F  `v...W...E..W...
180084150  7F 4D C7 41 B8 08 00 00 00 48 8D 15 E8 B6 32 00  .M.A.....H....2.
180084160  48 8D 4D B7 E8 47 BB F8 FF 90 4C 8D 45 B7 48 8D  H.M..G....L.E.H.
180084170  55 D7 48 8D 0D 37 36 34 00 E8 52 96 01 00 90 48  U.H..764..R....H
180084180  83 78 18 0F 76 03 48 8B 00 48 8D 56 28 48 8B C8  .x..v.H..H.V(H..
180084190  E8 8B 11 00 00 90 48 8D 4D D7 E8 C1 B8 F8 FF 90  ......H.M.......
1800841A0  48 8D 4D B7 E8 B7 B8 F8 FF 80 7E 28 00 0F 84 D1  H.M.......~(....
1800841B0  07 00 00 48 8B 0D 46 2A 34 00 48 8B 81 D8 15 00  ...H..F*4.H.....
1800841C0  00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00 00 F3  ........H.......
1800841D0  0F 10 35 91 F1 32 00 80 B8 06 01 00 00 00 75 14  ..5..2........u.
1800841E0  48 C7 45 6F 00 00 00 00 0F 28 CE 48 8D 4D 6F E8  H.Eo.....(.H.Mo.
1800841F0  0C 4A FA FF 42 8B 04 3F 39 05 AE 35 34 00 7E 4A  .J..B..?9..54.~J
180084200  48 8D 0D A5 35 34 00 E8 04 76 02 00 83 3D 99 35  H...54...v...=.5
180084210  34 00 FF 75 35 44 89 35 94 35 34 00 33 D2 48 8D  4..u5D.5.54.3.H.
180084220  0D 93 35 34 00 E8 66 44 02 00 90 E8 30 94 01 00  ..54..fD....0...
180084230  90 48 8D 0D F8 BE 02 00 E8 A7 79 02 00 90 48 8D  .H........y...H.
180084240  0D 67 35 34 00 E8 5A 75 02 00 0F 57 C0 0F 11 45  .g54..Zu...W...E
180084250  B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48  ..W....M.A.....H
180084260  8D 15 F2 B5 32 00 48 8D 4D B7 E8 41 BA F8 FF 90  ....2.H.M..A....
180084270  4C 8D 45 B7 48 8D 55 F7 48 8D 0D 31 35 34 00 E8  L.E.H.U.H..154..
180084280  4C 95 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48  L....H.x..v.H..H
180084290  8B C8 E8 89 A9 FE FF 0F B6 D8 48 8D 4D F7 E8 BD  ..........H.M...
1800842A0  B7 F8 FF 90 48 8D 4D B7 E8 B3 B7 F8 FF 84 DB 0F  ....H.M.........
1800842B0  84 CD 03 00 00 42 8B 04 3F 39 05 ED 34 34 00 7E  .....B..?9..44.~
1800842C0  4A 48 8D 0D E4 34 34 00 E8 43 75 02 00 83 3D D8  JH...44..Cu...=.
1800842D0  34 34 00 FF 75 35 44 89 35 D3 34 34 00 33 D2 48  44..u5D.5.44.3.H
1800842E0  8D 0D D2 34 34 00 E8 A5 43 02 00 90 E8 6F 93 01  ...44...C....o..
1800842F0  00 90 48 8D 0D 37 BE 02 00 E8 E6 78 02 00 90 48  ..H..7.....x...H
180084300  8D 0D A6 34 34 00 E8 99 74 02 00 0F 57 C0 0F 11  ...44...t...W...
180084310  45 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00  E..W....M.A.....
180084320  48 8D 15 41 B5 32 00 48 8D 4D B7 E8 80 B9 F8 FF  H..A.2.H.M......
180084330  90 4C 8D 45 B7 48 8D 55 F7 48 8D 0D 70 34 34 00  .L.E.H.U.H..p44.
180084340  E8 8B 94 01 00 90 48 83 78 18 0F 76 03 48 8B 00  ......H.x..v.H..
180084350  48 8D 56 34 48 8B C8 E8 84 DC FD FF 90 48 8D 4D  H.V4H........H.M
180084360  F7 E8 FA B6 F8 FF 90 48 8D 4D B7 E8 F0 B6 F8 FF  .......H.M......
180084370  0F 28 CE 0F 57 C0 E8 F5 49 FA FF 42 8B 04 3F 39  .(..W...I..B..?9
180084380  05 27 34 34 00 7E 4A 48 8D 0D 1E 34 34 00 E8 7D  .'44.~JH...44..}
180084390  74 02 00 83 3D 12 34 34 00 FF 75 35 44 89 35 0D  t...=.44..u5D.5.
1800843A0  34 34 00 33 D2 48 8D 0D 0C 34 34 00 E8 DF 42 02  44.3.H...44...B.
1800843B0  00 90 E8 A9 92 01 00 90 48 8D 0D 71 BD 02 00 E8  ........H..q....
1800843C0  20 78 02 00 90 48 8D 0D E0 33 34 00 E8 D3 73 02   x...H...34...s.
1800843D0  00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D C7  ..W...E..W....M.
1800843E0  41 B8 08 00 00 00 48 8D 15 8B B4 32 00 48 8D 4D  A.....H....2.H.M
1800843F0  B7 E8 BA B8 F8 FF 90 4C 8D 45 B7 48 8D 55 F7 48  .......L.E.H.U.H
180084400  8D 0D AA 33 34 00 E8 C5 93 01 00 90 48 83 78 18  ...34.......H.x.
180084410  0F 76 03 48 8B 00 48 8D 56 35 48 8B C8 E8 BE DB  .v.H..H.V5H.....
180084420  FD FF 90 48 8D 4D F7 E8 34 B6 F8 FF 90 48 8D 4D  ...H.M..4....H.M
180084430  B7 E8 2A B6 F8 FF 0F 28 CE 0F 57 C0 E8 2F 49 FA  ..*....(..W../I.
180084440  FF 42 8B 04 3F 39 05 61 33 34 00 7E 4A 48 8D 0D  .B..?9.a34.~JH..
180084450  58 33 34 00 E8 B7 73 02 00 83 3D 4C 33 34 00 FF  X34...s...=L34..
180084460  75 35 44 89 35 47 33 34 00 33 D2 48 8D 0D 46 33  u5D.5G34.3.H..F3
180084470  34 00 E8 19 42 02 00 90 E8 E3 91 01 00 90 48 8D  4...B.........H.
180084480  0D AB BC 02 00 E8 5A 77 02 00 90 48 8D 0D 1A 33  ......Zw...H...3
180084490  34 00 E8 0D 73 02 00 0F 57 C0 0F 11 45 B7 0F 57  4...s...W...E..W
1800844A0  C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48 8D 15 D5  ....M.A.....H...
1800844B0  B3 32 00 48 8D 4D B7 E8 F4 B7 F8 FF 90 4C 8D 45  .2.H.M.......L.E
1800844C0  B7 48 8D 55 F7 48 8D 0D E4 32 34 00 E8 FF 92 01  .H.U.H...24.....
1800844D0  00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D 56 36  ..H.x..v.H..H.V6
1800844E0  48 8B C8 E8 F8 DA FD FF 90 48 8D 4D F7 E8 6E B5  H........H.M..n.
1800844F0  F8 FF 90 48 8D 4D B7 E8 64 B5 F8 FF 42 8B 04 3F  ...H.M..d...B..?
180084500  39 05 A6 32 34 00 7E 4A 48 8D 0D 9D 32 34 00 E8  9..24.~JH...24..
180084510  FC 72 02 00 83 3D 91 32 34 00 FF 75 35 44 89 35  .r...=.24..u5D.5
180084520  8C 32 34 00 33 D2 48 8D 0D 8B 32 34 00 E8 5E 41  .24.3.H...24..^A
180084530  02 00 90 E8 28 91 01 00 90 48 8D 0D F0 BB 02 00  ....(....H......
180084540  E8 9F 76 02 00 90 48 8D 0D 5F 32 34 00 E8 52 72  ..v...H.._24..Rr
180084550  02 00 0F 57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D  ...W...E..W....M
180084560  C7 41 B8 0C 00 00 00 48 8D 15 2A B3 32 00 48 8D  .A.....H..*.2.H.
180084570  4D B7 E8 39 B7 F8 FF 90 4C 8D 45 B7 48 8D 55 F7  M..9....L.E.H.U.
180084580  48 8D 0D 29 32 34 00 E8 44 92 01 00 90 48 83 78  H..)24..D....H.x
180084590  18 0F 76 03 48 8B 00 48 8D 56 37 48 8B C8 E8 3D  ..v.H..H.V7H...=
1800845A0  DA FD FF 90 48 8D 4D F7 E8 B3 B4 F8 FF 90 48 8D  ....H.M.......H.
1800845B0  4D B7 E8 A9 B4 F8 FF 0F 28 CE 0F 57 C0 E8 AE 47  M.......(..W...G
1800845C0  FA FF 42 8B 04 3F 39 05 E0 31 34 00 7E 4A 48 8D  ..B..?9..14.~JH.
1800845D0  0D D7 31 34 00 E8 36 72 02 00 83 3D CB 31 34 00  ..14..6r...=.14.
1800845E0  FF 75 35 44 89 35 C6 31 34 00 33 D2 48 8D 0D C5  .u5D.5.14.3.H...
1800845F0  31 34 00 E8 98 40 02 00 90 E8 62 90 01 00 90 48  14...@....b....H
180084600  8D 0D 2A BB 02 00 E8 D9 75 02 00 90 48 8D 0D 99  ..*.....u...H...
180084610  31 34 00 E8 8C 71 02 00 0F 57 C0 0F 11 45 B7 0F  14...q...W...E..
180084620  57 C9 F3 0F 7F 4D C7 41 B8 08 00 00 00 48 8D 15  W....M.A.....H..
180084630  74 B2 32 00 48 8D 4D B7 E8 73 B6 F8 FF 90 4C 8D  t.2.H.M..s....L.
180084640  45 B7 48 8D 55 F7 48 8D 0D 63 31 34 00 E8 7E 91  E.H.U.H..c14..~.
180084650  01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D 56  ...H.x..v.H..H.V
180084660  38 48 8B C8 E8 77 D9 FD FF 90 48 8D 4D F7 E8 ED  8H...w....H.M...
180084670  B3 F8 FF 90 48 8D 4D B7 E8 E3 B3 F8 FF E8 AE BF  ....H.M.........
180084680  FE FF 42 8B 04 3F 39 05 20 31 34 00 7E 4A 48 8D  ..B..?9. 14.~JH.
180084690  0D 17 31 34 00 E8 76 71 02 00 83 3D 0B 31 34 00  ..14..vq...=.14.
1800846A0  FF 75 35 44 89 35 06 31 34 00 33 D2 48 8D 0D 05  .u5D.5.14.3.H...
1800846B0  31 34 00 E8 D8 3F 02 00 90 E8 A2 8F 01 00 90 48  14...?.........H
1800846C0  8D 0D 6A BA 02 00 E8 19 75 02 00 90 48 8D 0D D9  ..j.....u...H...
1800846D0  30 34 00 E8 CC 70 02 00 0F 57 C0 0F 11 45 B7 0F  04...p...W...E..
1800846E0  57 C9 F3 0F 7F 4D C7 41 B8 0C 00 00 00 48 8D 15  W....M.A.....H..
1800846F0  C4 B1 32 00 48 8D 4D B7 E8 B3 B5 F8 FF 90 4C 8D  ..2.H.M.......L.
180084700  45 B7 48 8D 55 F7 48 8D 0D A3 30 34 00 E8 BE 90  E.H.U.H...04....
180084710  01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8B C8  ...H.x..v.H..H..
180084720  E8 FB A4 FE FF 0F B6 D8 48 8D 4D F7 E8 2F B3 F8  ........H.M../..
180084730  FF 90 48 8D 4D B7 E8 25 B3 F8 FF 84 DB 0F 84 41  ..H.M..%.......A
180084740  02 00 00 42 8B 04 3F 39 05 5F 30 34 00 7E 4A 48  ...B..?9._04.~JH
180084750  8D 0D 56 30 34 00 E8 B5 70 02 00 83 3D 4A 30 34  ..V04...p...=J04
180084760  00 FF 75 35 44 89 35 45 30 34 00 33 D2 48 8D 0D  ..u5D.5E04.3.H..
180084770  44 30 34 00 E8 17 3F 02 00 90 E8 E1 8E 01 00 90  D04...?.........
180084780  48 8D 0D A9 B9 02 00 E8 58 74 02 00 90 48 8D 0D  H.......Xt...H..
180084790  18 30 34 00 E8 0B 70 02 00 0F 57 C0 0F 11 45 B7  .04...p...W...E.
1800847A0  0F 57 C9 F3 0F 7F 4D C7 41 B8 0D 00 00 00 48 8D  .W....M.A.....H.
1800847B0  15 13 B1 32 00 48 8D 4D B7 E8 F2 B4 F8 FF 90 4C  ...2.H.M.......L
1800847C0  8D 45 B7 48 8D 55 17 48 8D 0D E2 2F 34 00 E8 FD  .E.H.U.H.../4...
1800847D0  8F 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48 8D  ....H.x..v.H..H.
1800847E0  56 39 48 8B C8 E8 F6 D7 FD FF 90 48 8D 4D 17 E8  V9H........H.M..
1800847F0  6C B2 F8 FF 90 48 8D 4D B7 E8 62 B2 F8 FF 0F 28  l....H.M..b....(
180084800  CE 0F 57 C0 E8 67 45 FA FF 42 8B 04 3F 39 05 99  ..W..gE..B..?9..
180084810  2F 34 00 7E 4A 48 8D 0D 90 2F 34 00 E8 EF 6F 02  /4.~JH.../4...o.
180084820  00 83 3D 84 2F 34 00 FF 75 35 44 89 35 7F 2F 34  ..=./4..u5D.5./4
180084830  00 33 D2 48 8D 0D 7E 2F 34 00 E8 51 3E 02 00 90  .3.H..~/4..Q>...
180084840  E8 1B 8E 01 00 90 48 8D 0D E3 B8 02 00 E8 92 73  ......H........s
180084850  02 00 90 48 8D 0D 52 2F 34 00 E8 45 6F 02 00 0F  ...H..R/4..Eo...
180084860  57 C0 0F 11 45 B7 0F 57 C9 F3 0F 7F 4D C7 41 B8  W...E..W....M.A.
180084870  09 00 00 00 48 8D 15 5D B0 32 00 48 8D 4D B7 E8  ....H..].2.H.M..
180084880  2C B4 F8 FF 90 4C 8D 45 B7 48 8D 55 17 48 8D 0D  ,....L.E.H.U.H..
180084890  1C 2F 34 00 E8 37 8F 01 00 90 48 83 78 18 0F 76  ./4..7....H.x..v
1800848A0  03 48 8B 00 48 8D 56 3A 48 8B C8 E8 30 D7 FD FF  .H..H.V:H...0...
1800848B0  90 48 8D 4D 17 E8 A6 B1 F8 FF 90 48 8D 4D B7 E8  .H.M.......H.M..
1800848C0  9C B1 F8 FF 42 8B 04 3F 39 05 DE 2E 34 00 7E 4A  ....B..?9...4.~J
1800848D0  48 8D 0D D5 2E 34 00 E8 34 6F 02 00 83 3D C9 2E  H....4..4o...=..
1800848E0  34 00 FF 75 35 44 89 35 C4 2E 34 00 33 D2 48 8D  4..u5D.5..4.3.H.
1800848F0  0D C3 2E 34 00 E8 96 3D 02 00 90 E8 60 8D 01 00  ...4...=....`...
180084900  90 48 8D 0D 28 B8 02 00 E8 D7 72 02 00 90 48 8D  .H..(.....r...H.
180084910  0D 97 2E 34 00 E8 8A 6E 02 00 0F 57 C0 0F 11 45  ...4...n...W...E
180084920  B7 0F 57 C9 F3 0F 7F 4D C7 41 B8 09 00 00 00 48  ..W....M.A.....H
180084930  8D 15 B2 AF 32 00 48 8D 4D B7 E8 71 B3 F8 FF 90  ....2.H.M..q....
180084940  4C 8D 45 B7 48 8D 55 17 48 8D 0D 61 2E 34 00 E8  L.E.H.U.H..a.4..
180084950  7C 8E 01 00 90 48 83 78 18 0F 76 03 48 8B 00 48  |....H.x..v.H..H
180084960  8D 56 3C 48 8B C8 E8 75 D6 FD FF 90 48 8D 4D 17  .V<H...u....H.M.
180084970  E8 EB B0 F8 FF 90 48 8D 4D B7 E8 E1 B0 F8 FF E8  ......H.M.......
180084980  AC BC FE FF 48 8B 0D 75 22 34 00 48 8B 81 D8 15  ....H..u"4.H....
180084990  00 00 C6 80 03 01 00 00 01 48 8B 81 D8 15 00 00  .........H......

========================================================================
FUNCTION: ESPModule_Update
RVA: 0x84A00–0x852B0  Size: 2224 bytes
180084A00  48 8B C4 48 89 58 08 48 89 70 10 48 89 78 18 55  H..H.X.H.p.H.x.U
180084A10  41 54 41 55 41 56 41 57 48 8D A8 68 FE FF FF 48  ATAUAVAWH..h...H
180084A20  81 EC 70 02 00 00 0F 29 70 C8 0F 29 78 B8 44 0F  ..p....)p..)x.D.
180084A30  29 40 A8 44 0F 29 48 98 44 0F 29 50 88 44 0F 29  )@.D.)H.D.)P.D.)
180084A40  98 78 FF FF FF 44 0F 29 A0 68 FF FF FF 44 0F 29  .x...D.).h...D.)
180084A50  A8 58 FF FF FF 48 8B 05 E4 05 34 00 48 33 C4 48  .X...H....4.H3.H
180084A60  89 85 E0 00 00 00 48 8B F9 45 33 F6 48 8B 05 B5  ......H..E3.H...
180084A70  22 34 00 33 C9 FF D0 48 85 C0 0F 84 2B 08 00 00  "4.3...H....+...
180084A80  48 8B 40 10 48 85 C0 0F 84 1E 08 00 00 48 8B 00  H.@.H........H..
180084A90  48 8B 88 B8 00 00 00 48 8B 89 00 02 00 00 48 85  H......H......H.
180084AA0  C9 0F 84 04 08 00 00 48 8B 05 82 22 34 00 33 D2  .......H..."4.3.
180084AB0  FF D0 48 85 C0 0F 84 F0 07 00 00 48 8B 48 10 48  ..H........H.H.H
180084AC0  8B 59 10 44 8B 78 20 44 89 7C 24 50 48 8B 05 45  .Y.D.x D.|$PH..E
180084AD0  22 34 00 33 D2 48 8D 4D 50 FF D0 F2 44 0F 10 28  "4.3.H.MP...D..(
180084AE0  8B 40 08 89 44 24 60 4C 89 74 24 58 45 85 FF 0F  .@..D$`L.t$XE...
180084AF0  84 B6 07 00 00 4C 8D 7B 20 4C 89 7D 90 66 44 0F  .....L.{ L.}.fD.
180084B00  6F 0D DA E8 32 00 F3 44 0F 10 25 D5 E6 32 00 45  o...2..D..%..2.E
180084B10  0F 57 C0 F3 44 0F 10 15 BC E7 32 00 F3 44 0F 10  .W..D.....2..D..
180084B20  1D 3F E7 32 00 41 8B DE 0F 1F 84 00 00 00 00 00  .?.2.A..........
180084B30  4D 8B 3F 4D 85 FF 0F 84 4D 07 00 00 48 8B 05 DD  M.?M....M...H...
180084B40  21 34 00 33 D2 49 8B CF FF D0 8B F0 83 F8 08 0F  !4.3.I..........
180084B50  84 87 00 00 00 83 F8 10 74 68 83 F8 20 74 49 3D  ........th.. tI=
180084B60  00 01 00 00 74 25 3D 10 40 00 00 74 55 0F 10 87  ....t%=.@..tU...
180084B70  B0 00 00 00 0F 11 44 24 74 0F B6 47 38 88 44 24  ......D$t..G8.D$
180084B80  70 84 C0 0F 84 00 07 00 00 EB 6F 0F 10 87 80 00  p.........o.....
180084B90  00 00 0F 11 44 24 74 80 7F 38 00 75 58 80 7F 35  ....D$t..8.uX..5
180084BA0  00 75 52 E9 E1 06 00 00 0F 10 47 50 0F 11 44 24  .uR.......GP..D$
180084BB0  74 80 7F 38 00 75 3E 80 7F 37 00 75 38 E9 C7 06  t..8.u>..7.u8...
180084BC0  00 00 0F 10 47 40 0F 11 44 24 74 80 7F 38 00 75  ....G@..D$t..8.u
180084BD0  24 80 7F 34 00 75 1E E9 AD 06 00 00 0F 10 47 70  $..4.u........Gp
180084BE0  0F 11 44 24 74 80 7F 38 00 75 0A 80 7F 36 00 0F  ..D$t..8.u...6..
180084BF0  84 94 06 00 00 C6 44 24 70 01 48 8B 05 07 21 34  ......D$p.H...!4
180084C00  00 33 C9 FF D0 44 8B E8 48 8B 15 01 21 34 00 33  .3...D..H...!4.3
180084C10  C9 FF D2 44 8B E0 4C 8B 0D DB 20 34 00 45 33 C0  ...D..L... 4.E3.
180084C20  49 8B D7 48 8D 4D 60 41 FF D1 F2 0F 10 30 44 8B  I..H.M`A.....0D.
180084C30  70 08 4C 8B 0D C7 20 34 00 F2 0F 11 75 C0 44 89  p.L... 4....u.D.
180084C40  75 C8 F2 44 0F 11 6D D0 8B 44 24 60 89 45 D8 45  u..D..m..D$`.E.E
180084C50  33 C0 48 8D 55 C0 48 8D 4D D0 41 FF D1 0F 28 F8  3.H.U.H.M.A...(.
180084C60  66 0F 6E 4F 30 0F 5B C9 0F 2F F9 0F 87 18 06 00  f.nO0.[../......
180084C70  00 48 8B 1D 70 20 34 00 48 8B 05 71 20 34 00 F2  .H..p 4.H..q 4..
180084C80  0F 11 75 E0 44 89 75 E8 33 C9 FF D0 48 8B D0 45  ..u.D.u.3...H..E
180084C90  33 C9 4C 8D 45 E0 48 8D 4D 70 FF D3 F2 0F 10 00  3.L.E.H.Mp......
180084CA0  F2 0F 11 45 F0 44 0F 2F 60 08 0F 87 D4 05 00 00  ...E.D./`.......
180084CB0  0F 57 C0 0F 11 85 C0 00 00 00 45 33 F6 4C 89 B5  .W........E3.L..
180084CC0  D0 00 00 00 4C 89 B5 D8 00 00 00 45 33 C0 48 8D  ....L......E3.H.
180084CD0  15 DB F6 04 00 48 8D 8D C0 00 00 00 E8 CF AF F8  .....H..........
180084CE0  FF 90 44 38 77 39 0F 84 88 01 00 00 8B 15 EA 1D  ..D8w9..........
180084CF0  34 00 65 48 8B 04 25 58 00 00 00 B9 04 00 00 00  4.eH..%X........
180084D00  48 8B 04 D0 8B 0C 01 39 0D 9F 2A 34 00 7E 4A 48  H......9..*4.~JH
180084D10  8D 0D 96 2A 34 00 E8 F5 6A 02 00 83 3D 8A 2A 34  ...*4...j...=.*4
180084D20  00 FF 75 35 44 89 35 85 2A 34 00 33 D2 48 8D 0D  ..u5D.5.*4.3.H..
180084D30  84 2A 34 00 E8 57 39 02 00 90 E8 21 89 01 00 90  .*4..W9....!....
180084D40  48 8D 0D E9 B3 02 00 E8 98 6E 02 00 90 48 8D 0D  H........n...H..
180084D50  58 2A 34 00 E8 4B 6A 02 00 0F 57 C0 0F 11 45 98  X*4..Kj...W...E.
180084D60  0F 57 C9 F3 0F 7F 4D A8 41 B8 01 00 00 00 48 8D  .W....M.A.....H.
180084D70  15 7F AB 32 00 48 8D 4D 98 E8 32 AF F8 FF 90 4C  ...2.H.M..2....L
180084D80  8D 45 98 48 8D 95 80 00 00 00 48 8D 0D 1F 2A 34  .E.H......H...*4
180084D90  00 E8 3A 8A 01 00 48 8B D8 48 83 78 18 0F 76 03  ..:...H..H.x..v.
180084DA0  48 8B 18 F3 0F 2C D7 48 8D 4D 30 E8 10 A8 FF FF  H....,.H.M0.....
180084DB0  90 49 C7 C0 FF FF FF FF 0F 1F 84 00 00 00 00 00  .I..............
180084DC0  49 FF C0 42 80 3C 03 00 75 F6 48 8B D3 48 8D 4D  I..B.<..u.H..H.M
180084DD0  30 E8 7A A9 F8 FF 0F 10 00 0F 11 85 A0 00 00 00  0.z.............
180084DE0  0F 10 48 10 0F 11 8D B0 00 00 00 C6 00 00 4C 89  ..H...........L.
180084DF0  70 10 48 C7 40 18 0F 00 00 00 48 8D 95 A0 00 00  p.H.@.....H.....
180084E00  00 66 48 0F 7E C1 66 0F 6F C1 66 0F 73 D8 08 66  .fH.~.f.o.f.s..f
180084E10  48 0F 7E C0 48 83 F8 0F 48 0F 47 D1 66 49 0F 7E  H.~.H...H.G.fI.~
180084E20  C8 48 8D 8D C0 00 00 00 E8 23 A9 F8 FF 48 8D 95  .H.......#...H..
180084E30  C0 00 00 00 48 8D 4D 10 E8 93 A9 F8 FF 48 8D 4D  ....H.M......H.M
180084E40  10 E8 1A AC F8 FF 90 48 8D 8D A0 00 00 00 E8 0D  .......H........
180084E50  AC F8 FF 90 48 8D 4D 30 E8 03 AC F8 FF 90 48 8D  ....H.M0......H.
180084E60  8D 80 00 00 00 E8 F6 AB F8 FF 90 48 8D 4D 98 E8  ...........H.M..
180084E70  EC AB F8 FF 80 7F 3A 00 0F 84 2E 01 00 00 0F 57  ......:........W
180084E80  C0 0F 11 85 A0 00 00 00 4C 89 B5 B0 00 00 00 4C  ........L......L
180084E90  89 B5 B8 00 00 00 41 B8 07 00 00 00 48 8D 15 55  ......A.....H..U
180084EA0  AA 32 00 48 8D 8D A0 00 00 00 E8 01 AE F8 FF 90  .2.H............
180084EB0  48 8B 05 29 1E 34 00 33 D2 49 8B CF FF D0 48 85  H..).4.3.I....H.
180084EC0  C0 74 76 48 8B D0 48 8D 4D 98 E8 A1 6B 01 00 48  .tvH..H.M...k..H
180084ED0  8B 95 B8 00 00 00 48 83 FA 0F 76 34 48 FF C2 48  ......H...v4H..H
180084EE0  8B 8D A0 00 00 00 48 8B C1 48 81 FA 00 10 00 00  ......H..H......
180084EF0  72 19 48 83 C2 27 48 8B 49 F8 48 2B C1 48 83 E8  r.H..'H.I.H+.H..
180084F00  08 48 83 F8 1F 0F 87 F8 03 00 00 E8 48 68 02 00  .H..........Hh..
180084F10  0F 10 45 98 0F 11 85 A0 00 00 00 0F 10 4D A8 0F  ..E..........M..
180084F20  11 8D B0 00 00 00 F3 44 0F 7F 4D A8 C6 45 98 00  .......D..M..E..
180084F30  48 8D 4D 98 E8 27 AB F8 FF 48 83 BD D0 00 00 00  H.M..'...H......
180084F40  00 74 19 41 B8 03 00 00 00 48 8D 15 B0 A9 32 00  .t.A.....H....2.
180084F50  48 8D 8D C0 00 00 00 E8 F4 A7 F8 FF 48 8D 95 A0  H...........H...
180084F60  00 00 00 48 83 BD B8 00 00 00 0F 48 0F 47 95 A0  ...H.......H.G..
180084F70  00 00 00 4C 8B 85 B0 00 00 00 48 8D 8D C0 00 00  ...L......H.....
180084F80  00 E8 CA A7 F8 FF 48 8D 95 C0 00 00 00 48 8D 4D  ......H......H.M
180084F90  10 E8 3A A8 F8 FF 48 8D 4D 10 E8 C1 AA F8 FF 90  ..:...H.M.......
180084FA0  48 8D 8D A0 00 00 00 E8 B4 AA F8 FF 80 7F 3C 00  H.............<.
180084FB0  0F 84 DE 00 00 00 49 8B C6 48 8D 0D 40 B0 F7 FF  ......I..H..@...
180084FC0  39 B4 81 08 F9 3A 00 74 15 48 FF C0 48 83 F8 06  9....:.t.H..H...
180084FD0  72 EE 48 8D 15 0B A6 32 00 4D 8B C6 EB 1E 48 03  r.H....2.M....H.
180084FE0  C0 0F 10 8C C1 20 F9 3A 00 66 0F 6F C1 66 0F 73  ..... .:.f.o.f.s
180084FF0  D8 08 66 49 0F 7E C0 66 48 0F 7E CA 0F 57 C0 0F  ..fI.~.fH.~..W..
180085000  11 85 A0 00 00 00 4C 89 B5 B0 00 00 00 4C 89 B5  ......L......L..
180085010  B8 00 00 00 48 8D 8D A0 00 00 00 E8 90 AC F8 FF  ....H...........
180085020  90 48 83 BD D0 00 00 00 00 74 19 41 B8 03 00 00  .H.......t.A....
180085030  00 48 8D 15 C8 A8 32 00 48 8D 8D C0 00 00 00 E8  .H....2.H.......
180085040  0C A7 F8 FF 48 8D 95 A0 00 00 00 48 83 BD B8 00  ....H......H....
180085050  00 00 0F 48 0F 47 95 A0 00 00 00 4C 8B 85 B0 00  ...H.G.....L....
180085060  00 00 48 8D 8D C0 00 00 00 E8 E2 A6 F8 FF 48 8D  ..H...........H.
180085070  95 C0 00 00 00 48 8D 4D 10 E8 52 A7 F8 FF 48 8D  .....H.M..R...H.
180085080  4D 10 E8 D9 A9 F8 FF 90 48 8D 8D A0 00 00 00 E8  M.......H.......
180085090  CC A9 F8 FF 48 83 BD D0 00 00 00 00 0F 84 D6 01  ....H...........
1800850A0  00 00 F3 0F 10 45 F0 F3 0F 11 44 24 68 66 41 0F  .....E....D$hfA.
1800850B0  6E CC 0F 5B C9 F3 0F 5C 4D F4 F3 0F 11 4C 24 6C  n..[...\M....L$l
1800850C0  48 8B 1D 39 1B 34 00 48 8B 73 70 48 85 F6 74 07  H..9.4.H.spH..t.
1800850D0  F3 0F 10 76 1C EB 0B 41 0F 28 F0 48 8B B3 E0 12  ...v...A.(.H....
1800850E0  00 00 48 8B 83 E0 12 00 00 48 89 45 00 F3 0F 10  ..H......H.E....
1800850F0  83 F4 12 00 00 F3 0F 11 45 08 F3 0F 10 8B F0 12  ........E.......
180085100  00 00 F3 0F 11 4D 0C 48 8D 8B C8 20 00 00 48 8D  .....M.H... ..H.
180085110  55 00 E8 19 8E FB FF 41 0F 2E F0 7A 0A 75 08 F3  U......A...z.u..
180085120  0F 10 B3 F4 12 00 00 41 0F 28 D0 0F 28 CE 48 8B  .......A.(..(.H.
180085130  CE E8 FA F8 F9 FF 48 8B 05 C3 1A 34 00 48 8B 88  ......H....4.H..
180085140  D8 15 00 00 4C 8D 05 C5 6D 32 00 BA 01 00 00 00  ....L...m2......
180085150  48 8B 49 40 E8 D7 3D F9 FF 4C 8B D0 4C 8D 85 C0  H.I@..=..L..L...
180085160  00 00 00 48 83 BD D8 00 00 00 0F 4C 0F 47 85 C0  ...H.......L.G..
180085170  00 00 00 48 8D 4C 24 74 E8 E3 D2 F8 FF 8B F0 A9  ...H.L$t........
180085180  00 00 00 FF 74 52 4D 85 C0 74 4D 41 80 38 00 74  ....tRM..tMA.8.t
180085190  47 41 0F 10 42 60 0F 11 44 24 70 49 8B 4A 38 44  GA..B`..D$pI.J8D
1800851A0  89 74 24 48 F3 44 0F 11 44 24 40 4C 89 74 24 38  .t$H.D..D$@L.t$8
1800851B0  4C 89 44 24 30 48 8D 44 24 70 48 89 44 24 28 89  L.D$0H.D$pH.D$(.
1800851C0  74 24 20 4C 8D 4C 24 68 41 0F 28 D2 49 8B D2 48  t$ L.L$hA.(.I..H
1800851D0  8B 49 18 E8 A8 C3 FC FF 48 8B 1D 21 1A 34 00 48  .I......H..!.4.H
1800851E0  63 83 C8 20 00 00 85 C0 7F 0E 48 8D 0D EF 6F 32  c.. ......H...o2
1800851F0  00 E8 3A 30 FA FF EB 26 48 03 C0 48 8B 8B D0 20  ..:0...&H..H... 
180085200  00 00 F3 0F 10 54 C1 FC F3 0F 10 4C C1 F8 48 8B  .....T.....L..H.
180085210  4C C1 F0 E8 18 F8 F9 FF FF 8B C8 20 00 00 48 8B  L.......... ..H.
180085220  05 DB 19 34 00 48 8B 88 D8 15 00 00 4C 8D 05 DD  ...4.H......L...
180085230  6C 32 00 BA 01 00 00 00 48 8B 49 40 E8 EF 3C F9  l2......H.I@..<.
180085240  FF 48 8B C8 41 8B C5 99 2B C2 D1 F8 66 0F 6E C0  .H..A...+...f.n.
180085250  0F 5B C0 F3 0F 11 45 88 C7 45 8C 00 00 00 00 F3  .[....E..E......
180085260  44 0F 11 5C 24 20 44 8B CE 4C 8D 44 24 68 48 8D  D..\$ D..L.D$hH.
180085270  55 88 E8 A9 45 FC FF 90 48 8D 8D C0 00 00 00 E8  U...E...H.......
180085280  DC A7 F8 FF 48 8B 5C 24 58 48 FF C3 48 89 5C 24  ....H.\$XH..H.\$
180085290  58 4C 8B 7D 90 49 83 C7 08 4C 89 7D 90 48 63 44  XL.}.I...L.}.HcD
1800852A0  24 50 48 3B D8 0F 82 85 F8 FF FF 48 8B 8D E0 00  $PH;.......H....

========================================================================
FUNCTION: FPSModule_RenderOverlay
RVA: 0x85700–0x85900  Size: 512 bytes
180085700  00 48 8D 15 80 A3 32 00 48 8D 4C 24 20 E8 9E A5  .H....2.H.L$ ...
180085710  F8 FF 90 4C 8D 44 24 20 48 8D 54 24 40 48 8D 0D  ...L.D$ H.T$@H..
180085720  8C 20 34 00 E8 A7 80 01 00 90 48 83 78 18 0F 76  . 4.......H.x..v
180085730  03 48 8B 00 33 D2 48 8B C8 E8 E2 B0 FE FF 0F B6  .H..3.H.........
180085740  D8 48 8D 4C 24 40 E8 15 A3 F8 FF 90 48 8D 4C 24  .H.L$@......H.L$
180085750  20 E8 0A A3 F8 FF 84 DB 0F 84 57 01 00 00 48 8B   .........W...H.
180085760  0D 9B 14 34 00 48 8B 81 D8 15 00 00 C6 80 03 01  ...4.H..........
180085770  00 00 01 48 8B 81 D8 15 00 00 F3 0F 10 81 0C 0E  ...H............
180085780  00 00 F3 0F 58 80 94 01 00 00 F3 0F 11 80 94 01  ....X...........
180085790  00 00 F3 0F 58 40 58 F3 0F 58 80 98 01 00 00 F3  ....X@X..X......
1800857A0  0F 11 80 50 01 00 00 42 8B 04 37 39 05 FB 1F 34  ...P...B..79...4
1800857B0  00 7E 4D 48 8D 0D F2 1F 34 00 E8 51 60 02 00 83  .~MH....4..Q`...
1800857C0  3D E6 1F 34 00 FF 75 38 C7 05 DE 1F 34 00 00 00  =..4..u8....4...
1800857D0  00 00 33 D2 48 8D 0D DD 1F 34 00 E8 B0 2E 02 00  ..3.H....4......
1800857E0  90 E8 7A 7E 01 00 90 48 8D 0D 42 A9 02 00 E8 F1  ..z~...H..B.....
1800857F0  63 02 00 90 48 8D 0D B1 1F 34 00 E8 A4 5F 02 00  c...H....4..._..
180085800  0F 57 C0 0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24  .W...D$ .W....L$
180085810  30 41 B8 10 00 00 00 48 8D 15 7A A2 32 00 48 8D  0A.....H..z.2.H.
180085820  4C 24 20 E8 88 A4 F8 FF 90 4C 8D 44 24 20 48 8D  L$ ......L.D$ H.
180085830  54 24 40 48 8D 0D 76 1F 34 00 E8 91 7F 01 00 90  T$@H..v.4.......
180085840  48 83 78 18 0F 76 03 48 8B 00 48 8D 56 28 48 8B  H.x..v.H..H.V(H.
180085850  C8 E8 CA FA FF FF 90 48 8D 4C 24 40 E8 FF A1 F8  .......H.L$@....
180085860  FF 90 48 8D 4C 24 20 E8 F4 A1 F8 FF 48 8B 0D 8D  ..H.L$ .....H...
180085870  13 34 00 48 8B 81 D8 15 00 00 C6 80 03 01 00 00  .4.H............
180085880  01 48 8B 81 D8 15 00 00 F3 0F 10 80 94 01 00 00  .H..............
180085890  F3 0F 5C 81 0C 0E 00 00 F3 0F 11 80 94 01 00 00  ..\.............
1800858A0  F3 0F 58 40 58 F3 0F 58 80 98 01 00 00 F3 0F 11  ..X@X..X........
1800858B0  80 50 01 00 00 48 8B 5C 24 70 48 8B 74 24 78 48  .P...H.\$pH.t$xH
1800858C0  8B BC 24 80 00 00 00 48 83 C4 60 41 5E C3 CC CC  ..$....H..`A^...
1800858D0  48 8B C4 48 89 58 10 48 89 78 18 55 48 8D 68 A1  H..H.X.H.x.UH.h.
1800858E0  48 81 EC F0 00 00 00 0F 29 70 E8 33 FF 40 38 79  H.......)p.3.@8y
1800858F0  28 0F 84 26 02 00 00 48 8B 05 3A 14 34 00 33 C9  (..&...H..:.4.3.

========================================================================
FUNCTION: PreventScreenshot_Init
RVA: 0x8AD70–0x8AE60  Size: 240 bytes
18008AD70  48 83 EC 48 8B 0D 62 BD 33 00 65 48 8B 04 25 58  H..H..b.3.eH..%X
18008AD80  00 00 00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39  ........H......9
18008AD90  0D FB C5 33 00 0F 8E A7 00 00 00 48 8D 0D EE C5  ...3.......H....
18008ADA0  33 00 E8 69 0A 02 00 83 3D E2 C5 33 00 FF 0F 85  3..i....=..3....
18008ADB0  8E 00 00 00 0F 57 C0 0F 11 44 24 20 0F 57 C9 F3  .....W...D$ .W..
18008ADC0  0F 7F 4C 24 30 41 B8 12 00 00 00 48 8D 15 E6 52  ..L$0A.....H...R
18008ADD0  32 00 48 8D 4C 24 20 E8 D4 4E F8 FF 90 48 8D 05  2.H.L$ ..N...H..
18008ADE0  54 4C 32 00 48 89 05 6D C5 33 00 48 8D 54 24 20  TL2.H..m.3.H.T$ 
18008ADF0  48 8D 0D 69 C5 33 00 E8 D4 49 F8 FF C6 05 7D C5  H..i.3...I....}.
18008AE00  33 00 00 48 8D 4C 24 20 E8 53 4C F8 FF 48 8D 05  3..H.L$ .SL..H..
18008AE10  FC 52 32 00 48 89 05 3D C5 33 00 C6 05 5E C5 33  .R2.H..=.3...^.3
18008AE20  00 00 C6 05 5F C5 33 00 00 48 8D 0D A0 50 02 00  ...._.3..H...P..
18008AE30  E8 AF 0D 02 00 90 48 8D 0D 53 C5 33 00 E8 62 09  ......H..S.3..b.
18008AE40  02 00 48 8D 05 0F C5 33 00 48 83 C4 48 C3 CC CC  ..H....3.H..H...
18008AE50  48 8D 15 69 01 00 00 E9 A4 B1 FF FF CC CC CC CC  H..i............

========================================================================
FUNCTION: PreventScreenshot_OsCheck
RVA: 0x8B220–0x8B490  Size: 624 bytes
18008B220  48 89 5C 24 10 57 48 81 EC 70 02 00 00 48 8B 05  H.\$.WH..p...H..
18008B230  0C 9E 33 00 48 33 C4 48 89 84 24 60 02 00 00 48  ..3.H3.H..$`...H
18008B240  8B F9 8B 0D 94 B8 33 00 65 48 8B 04 25 58 00 00  ......3.eH..%X..
18008B250  00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39 0D 7D  ......H......9.}
18008B260  C2 33 00 0F 8E FB 01 00 00 48 8D 0D 70 C2 33 00  .3.......H..p.3.
18008B270  E8 9B 05 02 00 83 3D 64 C2 33 00 FF 0F 85 E2 01  ......=d.3......
18008B280  00 00 48 8D 0D 47 4E 32 00 FF 15 01 60 02 00 48  ..H..GN2....`..H
18008B290  85 C0 0F 84 BC 00 00 00 48 8D 15 49 4E 32 00 48  ........H..IN2.H
18008B2A0  8B C8 FF 15 E0 5D 02 00 48 8B D8 48 85 C0 0F 84  .....]..H..H....
18008B2B0  A0 00 00 00 33 D2 41 B8 18 01 00 00 48 8D 8C 24  ....3.A.....H..$
18008B2C0  44 01 00 00 E8 A1 15 02 00 C7 84 24 40 01 00 00  D..........$@...
18008B2D0  1C 01 00 00 48 8D 8C 24 40 01 00 00 FF D3 85 C0  ....H..$@.......
18008B2E0  75 72 48 8D 4C 24 20 48 8D 94 24 40 01 00 00 41  urH.L$ H..$@...A
18008B2F0  B8 02 00 00 00 41 8B C0 0F 1F 84 00 00 00 00 00  .....A..........
18008B300  0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10 0F 10  ........J...I...
18008B310  42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30 0F 10  B ..A ..J0..I0..
18008B320  42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50 0F 10  B@..A@..JP..IP..
18008B330  42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F 10 4A  B`..A`H........J
18008B340  70 0F 11 49 F0 48 8D 92 80 00 00 00 48 83 E8 01  p..I.H......H...
18008B350  75 AE EB 7E 33 D2 41 B8 1C 01 00 00 48 8D 8C 24  u..~3.A.....H..$
18008B360  40 01 00 00 E8 01 15 02 00 48 8D 4C 24 20 48 8D  @........H.L$ H.
18008B370  94 24 40 01 00 00 41 B8 02 00 00 00 41 8B C0 90  .$@...A.....A...
18008B380  0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10 0F 10  ........J...I...
18008B390  42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30 0F 10  B ..A ..J0..I0..
18008B3A0  42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50 0F 10  B@..A@..JP..IP..
18008B3B0  42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F 10 4A  B`..A`H........J
18008B3C0  70 0F 11 49 F0 48 8D 92 80 00 00 00 48 83 E8 01  p..I.H......H...
18008B3D0  75 AE 0F 10 02 0F 11 01 48 8B 42 10 48 89 41 10  u.......H.B.H.A.
18008B3E0  8B 42 18 89 41 18 48 8D 0D 03 C1 33 00 48 8D 54  .B..A.H....3.H.T
18008B3F0  24 20 0F 10 02 0F 11 01 0F 10 4A 10 0F 11 49 10  $ ........J...I.
18008B400  0F 10 42 20 0F 11 41 20 0F 10 4A 30 0F 11 49 30  ..B ..A ..J0..I0
18008B410  0F 10 42 40 0F 11 41 40 0F 10 4A 50 0F 11 49 50  ..B@..A@..JP..IP
18008B420  0F 10 42 60 0F 11 41 60 48 8D 89 80 00 00 00 0F  ..B`..A`H.......
18008B430  10 4A 70 0F 11 49 F0 48 8D 92 80 00 00 00 49 83  .Jp..I.H......I.
18008B440  E8 01 75 AE 0F 10 02 0F 11 01 48 8B 42 10 48 89  ..u.......H.B.H.
18008B450  41 10 8B 42 18 89 41 18 48 8D 0D 81 C0 33 00 E8  A..B..A.H....3..
18008B460  40 03 02 00 E8 07 F9 FF FF 44 0F B6 40 28 48 8B  @........D..@(H.
18008B470  CF 81 3D 81 C0 33 00 61 4A 00 00 73 0A 33 D2 45  ..=..3.aJ..s.3.E
18008B480  84 C0 0F 95 C2 EB 08 41 F6 D8 1B D2 83 E2 11 FF  .......A........

========================================================================
FUNCTION: ModulePathScanner
RVA: 0x8B650–0x8BAF0  Size: 1184 bytes
18008B650  40 55 53 56 57 41 54 41 55 41 56 41 57 48 8D AC  @USVWATAUAVAWH..
18008B660  24 48 FE FF FF 48 81 EC B8 02 00 00 48 8B 05 CD  $H...H......H...
18008B670  99 33 00 48 33 C4 48 89 85 A0 01 00 00 49 8B F1  .3.H3.H......I..
18008B680  4C 89 4C 24 40 41 8B D8 4C 8B EA 48 8B F9 48 89  L.L$@A..L..H..H.
18008B690  4C 24 38 E8 68 64 FF FF 4C 8B D0 4C 8D 0D AE FF  L$8.hd..L..L....
18008B6A0  FF FF 4D 8B C1 49 C1 E8 08 41 0F B6 D0 41 0F B6  ..M..I...A...A..
18008B6B0  C9 48 B8 25 23 22 84 E4 9C F2 CB 48 33 C8 49 B8  .H.%#".....H3.I.
18008B6C0  B3 01 00 00 00 01 00 00 49 0F AF C8 48 33 D1 49  ........I...H3.I
18008B6D0  0F AF D0 49 8B C1 48 C1 E8 10 0F B6 C8 48 33 D1  ...I..H......H3.
18008B6E0  49 0F AF D0 49 8B C1 48 C1 E8 18 0F B6 C8 48 33  I...I..H......H3
18008B6F0  D1 49 0F AF D0 49 8B C1 48 C1 E8 20 0F B6 C8 48  .I...I..H.. ...H
18008B700  33 D1 49 0F AF D0 49 8B C1 48 C1 E8 28 0F B6 C8  3.I...I..H..(...
18008B710  48 33 D1 49 0F AF D0 49 8B C1 48 C1 E8 30 0F B6  H3.I...I..H..0..
18008B720  C8 48 33 CA 49 0F AF C8 49 8B C1 48 C1 E8 38 48  .H3.I...I..H..8H
18008B730  33 C8 49 0F AF C8 49 23 4A 48 48 C1 E1 04 49 03  3.I...I#JHH...I.
18008B740  4A 30 48 8B 41 08 49 8B 52 20 48 3B C2 74 1A 48  J0H.A.I.R H;.t.H
18008B750  8B 09 4C 3B 48 10 74 13 48 3B C1 74 0C 48 8B 40  ..L;H.t.H;.t.H.@
18008B760  08 4C 3B 48 10 75 F1 EB 02 33 C0 48 85 C0 48 0F  .L;H.u...3.H..H.
18008B770  44 C2 48 3B C2 0F 84 49 03 00 00 4C 8B 50 18 4D  D.H;...I...L.P.M
18008B780  85 D2 0F 84 3C 03 00 00 4C 8B CE 44 8B C3 49 8B  ....<...L..D..I.
18008B790  D5 48 8B CF 41 FF D2 8B C8 89 44 24 30 85 C0 0F  .H..A.....D$0...
18008B7A0  84 21 03 00 00 4D 85 ED 0F 84 18 03 00 00 48 85  .!...M........H.
18008B7B0  F6 0F 84 0F 03 00 00 8B 06 C1 E8 03 89 44 24 34  .............D$4
18008B7C0  45 33 FF 45 33 F6 85 C0 0F 84 E6 02 00 00 89 4C  E3.E3..........L
18008B7D0  24 30 4E 8D 24 F5 00 00 00 00 41 B9 04 01 00 00  $0N.$.....A.....
18008B7E0  4C 8D 45 90 4B 8B 14 2C 48 8B CF FF 15 77 59 02  L.E.K..,H....wY.
18008B7F0  00 85 C0 0F 84 48 02 00 00 0F 57 C0 0F 11 44 24  .....H....W...D$
18008B800  68 48 C7 44 24 78 00 00 00 00 48 C7 45 80 00 00  hH.D$x....H.E...
18008B810  00 00 48 8D 45 90 49 C7 C0 FF FF FF FF 0F 1F 00  ..H.E.I.........
18008B820  49 FF C0 66 42 83 3C 40 00 75 F5 48 8D 55 90 48  I..fB.<@.u.H.U.H
18008B830  8D 4C 24 68 E8 D7 32 F8 FF 90 48 8D 15 F7 9A 33  .L$h..2...H....3
18008B840  00 48 8D 4C 24 48 E8 95 FC FF FF 4C 8B 48 10 48  .H.L$H.....L.H.H
18008B850  83 78 18 07 76 03 48 8B 00 48 8D 74 24 68 48 83  .x..v.H..H.t$hH.
18008B860  7D 80 07 48 0F 47 74 24 68 48 8B 4C 24 78 4C 3B  }..H.Gt$hH.L$xL;
18008B870  C9 77 2B 4D 85 C9 75 04 33 FF EB 29 48 8D 1C 4E  .w+M..u.3..)H..N
18008B880  4C 8B C0 48 8B D3 48 8B CE E8 12 FE 01 00 48 8B  L..H..H.......H.
18008B890  F8 48 3B C3 74 08 48 2B FE 48 D1 FF EB 07 48 C7  .H;.t.H+.H....H.
18008B8A0  C7 FF FF FF FF 48 8B 54 24 60 48 83 FA 07 76 37  .....H.T$`H...v7
18008B8B0  48 8D 14 55 02 00 00 00 48 8B 4C 24 48 48 8B C1  H..U....H.L$HH..
18008B8C0  48 81 FA 00 10 00 00 72 19 48 83 C2 27 48 8B 49  H......r.H..'H.I
18008B8D0  F8 48 2B C1 48 83 E8 08 48 83 F8 1F 0F 87 7F 01  .H+.H...H.......
18008B8E0  00 00 E8 71 FE 01 00 48 83 FF FF 74 4A 48 8B 55  ...q...H...tJH.U
18008B8F0  80 48 83 FA 07 0F 86 52 01 00 00 48 8D 14 55 02  .H.....R...H..U.
18008B900  00 00 00 48 8B 4C 24 68 48 81 FA 00 10 00 00 48  ...H.L$hH......H
18008B910  8B C1 72 19 48 83 C2 27 48 8B 49 F8 48 2B C1 48  ..r.H..'H.I.H+.H
18008B920  83 E8 08 48 83 F8 1F 0F 87 68 01 00 00 E8 26 FE  ...H.....h....&.
18008B930  01 00 E9 16 01 00 00 48 8D 15 1A 9A 33 00 48 8D  .......H....3.H.
18008B940  4C 24 48 E8 98 FB FF FF 4C 8B C0 4C 8B 48 10 48  L$H.....L..L.H.H
18008B950  83 78 18 07 76 03 4C 8B 00 48 8D 74 24 68 48 8B  .x..v.L..H.t$hH.
18008B960  45 80 48 83 F8 07 48 0F 47 74 24 68 48 8B 4C 24  E.H...H.Gt$hH.L$
18008B970  78 4C 3B C9 77 2C 4D 85 C9 75 04 33 FF EB 2A 48  xL;.w,M..u.3..*H
18008B980  8D 1C 4E 48 8B D3 48 8B CE E8 12 FD 01 00 48 8B  ..NH..H.......H.
18008B990  F8 48 3B C3 48 8B 45 80 74 08 48 2B FE 48 D1 FF  .H;.H.E.t.H+.H..
18008B9A0  EB 07 48 C7 C7 FF FF FF FF 48 8B 54 24 60 48 83  ..H......H.T$`H.
18008B9B0  FA 07 76 3B 48 8D 14 55 02 00 00 00 48 8B 4C 24  ..v;H..U....H.L$
18008B9C0  48 48 8B C1 48 81 FA 00 10 00 00 72 19 48 83 C2  HH..H......r.H..
18008B9D0  27 48 8B 49 F8 48 2B C1 48 83 E8 08 48 83 F8 1F  'H.I.H+.H...H...
18008B9E0  0F 87 95 00 00 00 E8 6D FD 01 00 48 8B 45 80 48  .......m...H.E.H
18008B9F0  83 FF FF 74 13 48 83 F8 07 76 52 48 8D 14 45 02  ...t.H...vRH..E.
18008BA00  00 00 00 E9 FB FE FF FF 48 83 F8 07 76 33 48 8D  ........H...v3H.
18008BA10  14 45 02 00 00 00 48 8B 4C 24 68 48 8B C1 48 81  .E....H.L$hH..H.
18008BA20  FA 00 10 00 00 72 15 48 83 C2 27 48 8B 49 F8 48  .....r.H..'H.I.H
18008BA30  2B C1 48 83 E8 08 48 83 F8 1F 77 59 E8 17 FD 01  +.H...H...wY....
18008BA40  00 4B 8B 04 2C 4B 89 44 FD 00 41 FF C7 41 FF C6  .K..,K.D..A..A..
18008BA50  44 3B 74 24 34 73 58 48 8B 7C 24 38 E9 71 FD FF  D;t$4sXH.|$8.q..
18008BA60  FF 48 C7 44 24 20 00 00 00 00 45 33 C9 45 33 C0  .H.D$ ....E3.E3.
18008BA70  33 D2 33 C9 FF 15 C6 5D 02 00 CC 48 C7 44 24 20  3.3....]...H.D$ 
18008BA80  00 00 00 00 45 33 C9 45 33 C0 33 D2 33 C9 FF 15  ....E3.E3.3.3...
18008BA90  AC 5D 02 00 90 48 C7 44 24 20 00 00 00 00 45 33  .]...H.D$ ....E3
18008BAA0  C9 45 33 C0 33 D2 33 C9 FF 15 92 5D 02 00 CC 48  .E3.3.3....]...H
18008BAB0  8B 74 24 40 42 8D 0C FD 00 00 00 00 89 0E 8B 44  .t$@B..........D
18008BAC0  24 30 EB 02 33 C0 48 8B 8D A0 01 00 00 48 33 CC  $0..3.H......H3.
18008BAD0  E8 FB FB 01 00 48 81 C4 B8 02 00 00 41 5F 41 5E  .....H......A_A^
18008BAE0  41 5D 41 5C 5F 5E 5B 5D C3 CC CC CC CC CC CC CC  A]A\_^[]........

========================================================================
FUNCTION: SkillHack_Render_HookInstaller
RVA: 0x8D1F0–0x8D240  Size: 80 bytes
18008D1F0  48 83 EC 28 48 8B 0D 65 9C 33 00 48 8D 15 AE 02  H..(H..e.3.H....
18008D200  00 00 E8 99 06 00 00 48 8B 0D 5A 9C 33 00 48 8D  .......H..Z.3.H.
18008D210  15 9B 02 00 00 E8 86 06 00 00 E8 01 10 00 00 E8  ................
18008D220  9C 19 00 00 E8 37 23 00 00 48 8B 0D 18 9C 33 00  .....7#..H....3.
18008D230  48 8D 15 79 02 00 00 48 83 C4 28 E9 60 06 00 00  H..y...H..(.`...

========================================================================
FUNCTION: SkillHack_Dispatcher
RVA: 0x8D4B0–0x8D500  Size: 80 bytes
18008D4B0  48 89 5C 24 08 57 48 83 EC 20 48 8B DA 48 8B F9  H.\$.WH.. H..H..
18008D4C0  E8 3B 3E FF FF 80 78 28 00 74 0D B0 01 48 8B 5C  .;>...x(.t...H.\
18008D4D0  24 30 48 83 C4 20 5F C3 E8 23 46 FF FF 4C 8B CB  $0H.. _..#F..L..
18008D4E0  48 8D 15 C9 FF FF FF 4C 8B C7 48 8B C8 48 8B 5C  H......L..H..H.\
18008D4F0  24 30 48 83 C4 20 5F E9 04 2A 00 00 CC CC CC CC  $0H.. _..*......

========================================================================
FUNCTION: SkillHack_CooldownBypass
RVA: 0x8D500–0x8D550  Size: 80 bytes
18008D500  48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9  H.\$.WH.. H..H..
18008D510  E8 EB 3D FF FF 80 78 28 00 74 13 F3 0F 10 05 E5  ..=...x(.t......
18008D520  5D 32 00 48 8B 5C 24 40 48 83 C4 20 5F C3 E8 CD  ]2.H.\$@H.. _...
18008D530  45 FF FF 4C 8B C0 4C 8D 1D C3 FF FF FF 49 BA B3  E..L..L......I..
18008D540  01 00 00 00 01 00 00 45 0F B6 CB 48 B8 25 23 22  .......E...H.%#"

========================================================================
FUNCTION: SkillHack_SkillAvailable
RVA: 0x8D640–0x8D780  Size: 320 bytes
18008D640  48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9  H.\$.WH.. H..H..
18008D650  E8 AB 3C FF FF 80 78 28 00 74 0D B0 01 48 8B 5C  ..<...x(.t...H.\
18008D660  24 40 48 83 C4 20 5F C3 E8 93 44 FF FF 4C 8B C8  $@H.. _...D..L..
18008D670  4C 8D 1D C9 FF FF FF 49 BA B3 01 00 00 00 01 00  L......I........
18008D680  00 45 0F B6 C3 48 B8 25 23 22 84 E4 9C F2 CB 49  .E...H.%#".....I
18008D690  8B CB 4C 33 C0 48 C1 E9 08 0F B6 D1 49 8B C3 48  ..L3.H......I..H
18008D6A0  C1 E8 10 0F B6 C8 49 8B C3 4D 0F AF C2 48 C1 E8  ......I..M...H..
18008D6B0  18 4C 33 C2 49 8B 51 20 4D 0F AF C2 4C 33 C1 0F  .L3.I.Q M...L3..
18008D6C0  B6 C8 4D 0F AF C2 49 8B C3 4C 33 C1 48 C1 E8 20  ..M...I..L3.H.. 
18008D6D0  0F B6 C8 49 8B C3 48 C1 E8 28 4D 0F AF C2 4C 33  ...I..H..(M...L3
18008D6E0  C1 0F B6 C8 4D 0F AF C2 49 8B C3 4C 33 C1 48 C1  ....M...I..L3.H.
18008D6F0  E8 30 0F B6 C8 49 8B C3 48 C1 E8 38 4D 0F AF C2  .0...I..H..8M...
18008D700  49 33 C8 49 0F AF CA 48 33 C8 49 0F AF CA 49 23  I3.I...H3.I...I#
18008D710  49 48 48 C1 E1 04 49 03 49 30 48 8B 41 08 48 3B  IHH...I.I0H.A.H;
18008D720  C2 74 1E 48 8B 09 4C 3B 58 10 74 17 0F 1F 40 00  .t.H..L;X.t...@.
18008D730  48 3B C1 74 0C 48 8B 40 08 4C 3B 58 10 75 F1 EB  H;.t.H.@.L;X.u..
18008D740  02 33 C0 48 85 C0 48 0F 44 C2 48 3B C2 74 1C 4C  .3.H..H.D.H;.t.L
18008D750  8B 40 18 4D 85 C0 74 13 48 8B D7 48 8B CB 48 8B  .@.M..t.H..H..H.
18008D760  5C 24 40 48 83 C4 20 5F 49 FF E0 48 8B 5C 24 40  \$@H.. _I..H.\$@
18008D770  32 C0 48 83 C4 20 5F C3 CC CC CC CC CC CC CC CC  2.H.. _.........

========================================================================
FUNCTION: SkillHack_CostBypass
RVA: 0x8D780–0x8D8A0  Size: 288 bytes
18008D780  48 89 5C 24 18 57 48 83 EC 20 48 8B FA 48 8B D9  H.\$.WH.. H..H..
18008D790  E8 6B 3B FF FF 80 78 28 00 0F 85 F5 00 00 00 E8  .k;...x(........
18008D7A0  5C 43 FF FF 4C 8B C8 4C 8D 1D D2 FF FF FF 49 BA  \C..L..L......I.
18008D7B0  B3 01 00 00 00 01 00 00 45 0F B6 C3 48 B8 25 23  ........E...H.%#
18008D7C0  22 84 E4 9C F2 CB 49 8B CB 4C 33 C0 48 C1 E9 08  ".....I..L3.H...
18008D7D0  0F B6 D1 49 8B C3 48 C1 E8 10 0F B6 C8 49 8B C3  ...I..H......I..
18008D7E0  4D 0F AF C2 48 C1 E8 18 4C 33 C2 49 8B 51 20 4D  M...H...L3.I.Q M
18008D7F0  0F AF C2 4C 33 C1 0F B6 C8 4D 0F AF C2 49 8B C3  ...L3....M...I..
18008D800  4C 33 C1 48 C1 E8 20 0F B6 C8 49 8B C3 48 C1 E8  L3.H.. ...I..H..
18008D810  28 4D 0F AF C2 4C 33 C1 0F B6 C8 4D 0F AF C2 49  (M...L3....M...I
18008D820  8B C3 4C 33 C1 48 C1 E8 30 0F B6 C8 49 8B C3 48  ..L3.H..0...I..H
18008D830  C1 E8 38 4D 0F AF C2 49 33 C8 49 0F AF CA 48 33  ..8M...I3.I...H3
18008D840  C8 49 0F AF CA 49 23 49 48 48 C1 E1 04 49 03 49  .I...I#IHH...I.I
18008D850  30 48 8B 41 08 48 3B C2 74 1A 48 8B 09 4C 3B 58  0H.A.H;.t.H..L;X
18008D860  10 74 13 48 3B C1 74 0C 48 8B 40 08 4C 3B 58 10  .t.H;.t.H.@.L;X.
18008D870  75 F1 EB 02 33 C0 48 85 C0 48 0F 44 C2 48 3B C2  u...3.H..H.D.H;.
18008D880  74 12 4C 8B 40 18 4D 85 C0 74 09 48 8B D7 48 8B  t.L.@.M..t.H..H.
18008D890  CB 41 FF D0 48 8B 5C 24 40 48 83 C4 20 5F C3 CC  .A..H.\$@H.. _..

========================================================================
FUNCTION: SkillHack_TrampolineDispatch
RVA: 0x8FF00–0x8FF80  Size: 128 bytes
18008FF00  48 89 5C 24 08 57 4D 8B D8 48 BF B3 01 00 00 00  H.\$.WM..H......
18008FF10  01 00 00 4C 8B D2 44 0F B6 C2 48 B8 25 23 22 84  ...L..D...H.%#".
18008FF20  E4 9C F2 CB 49 8B D9 4C 33 C0 4C 8B C9 4C 0F AF  ....I..L3.L..L..
18008FF30  C7 48 8B C2 48 C1 E8 08 0F B6 D0 49 8B C2 48 C1  .H..H......I..H.
18008FF40  E8 10 4C 33 C2 49 8B 51 20 0F B6 C8 49 8B C2 48  ..L3.I.Q ...I..H
18008FF50  C1 E8 18 4C 0F AF C7 4C 33 C1 0F B6 C8 4C 0F AF  ...L...L3....L..
18008FF60  C7 49 8B C2 4C 33 C1 48 C1 E8 20 0F B6 C8 49 8B  .I..L3.H.. ...I.
18008FF70  C2 48 C1 E8 28 4C 0F AF C7 4C 33 C1 0F B6 C8 4C  .H..(L...L3....L

========================================================================
FUNCTION: FNV1a_hash
RVA: 0x8D555–0x8D640  Size: 235 bytes
18008D555  49 8B CB 4C 33 C8 48 C1 E9 08 4D 0F AF CA 0F B6  I..L3.H...M.....
18008D565  D1 49 8B C3 4C 33 CA 48 C1 E8 10 49 8B 50 20 4D  .I..L3.H...I.P M
18008D575  0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1 E8 18  ......I..L3.H...
18008D585  4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1 E8  M......I..L3.H..
18008D595  20 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48 C1   M......I..L3.H.
18008D5A5  E8 28 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9 48  .(M......I..L3.H
18008D5B5  C1 E8 30 4D 0F AF CA 0F B6 C8 49 8B C3 4C 33 C9  ..0M......I..L3.
18008D5C5  48 C1 E8 38 49 8B 48 30 4D 0F AF CA 4C 33 C8 4D  H..8I.H0M...L3.M
18008D5D5  0F AF CA 4D 23 48 48 4D 03 C9 4A 8B 44 C9 08 48  ...M#HHM..J.D..H
18008D5E5  3B C2 74 1B 4A 8B 0C C9 4C 3B 58 10 74 13 48 3B  ;.t.J...L;X.t.H;
18008D5F5  C1 74 0C 48 8B 40 08 4C 3B 58 10 75 F1 EB 02 33  .t.H.@.L;X.u...3
18008D605  C0 48 85 C0 48 0F 44 C2 48 3B C2 74 1C 4C 8B 40  .H..H.D.H;.t.L.@
18008D615  18 4D 85 C0 74 13 48 8B D7 48 8B CB 48 8B 5C 24  .M..t.H..H..H.\$
18008D625  40 48 83 C4 20 5F 49 FF E0 48 8B 5C 24 40 0F 57  @H.. _I..H.\$@.W
18008D635  C0 48 83 C4 20 5F C3 CC CC CC CC                 .H.. _.....

========================================================================
FUNCTION: ModuleManager_Init
RVA: 0x9AC10–0x9AE00  Size: 496 bytes
18009AC10  48 89 4C 24 08 53 56 57 41 56 41 57 48 83 EC 70  H.L$.SVWAVAWH..p
18009AC20  4C 8B F1 48 8D 41 18 48 89 44 24 38 80 38 00 74  L..H.A.H.D$8.8.t
18009AC30  2F 48 8D 15 50 5F 31 00 48 8B 0D 99 67 01 00 E8  /H..P_1.H...g...
18009AC40  5C 51 F7 FF 48 8D 15 65 46 FE FF 48 8B C8 48 83  \Q..H..eF..H..H.
18009AC50  C4 70 41 5F 41 5E 5F 5E 5B 48 FF 25 80 66 01 00  .pA_A^_^[H.%.f..
18009AC60  0F 57 C0 0F 11 44 24 48 0F 57 C9 F3 0F 7F 4C 24  .W...D$H.W....L$
18009AC70  58 41 B8 1A 00 00 00 48 8D 15 8A 5F 31 00 48 8D  XA.....H..._1.H.
18009AC80  4C 24 48 E8 28 50 F7 FF 90 E8 C2 37 F7 FF 48 8D  L$H.(P.....7..H.
18009AC90  4C 24 48 48 89 4C 24 20 41 B9 01 00 00 00 41 B8  L$HH.L$ A.....A.
18009ACA0  22 00 00 00 48 8D 15 15 5F 31 00 48 8B C8 E8 2D  "...H..._1.H...-
18009ACB0  32 FE FF 90 48 8D 4C 24 48 E8 A2 4D F7 FF 49 8D  2...H.L$H..M..I.
18009ACC0  76 08 48 89 74 24 30 49 8B 06 48 3B 06 74 03 48  v.H.t$0I..H;.t.H
18009ACD0  89 06 8B 0D 04 BE 32 00 65 48 8B 04 25 58 00 00  ......2.eH..%X..
18009ACE0  00 BA 04 00 00 00 48 8B 04 C8 8B 0C 02 39 0D DD  ......H......9..
18009ACF0  C6 32 00 7E 2D 48 8D 0D D4 C6 32 00 E8 0F 0B 01  .2.~-H....2.....
18009AD00  00 83 3D C8 C6 32 00 FF 75 18 48 8D 0D 7F 52 01  ..=..2..u.H...R.
18009AD10  00 E8 CE 0E 01 00 48 8D 0D B3 C6 32 00 E8 82 0A  ......H....2....
18009AD20  01 00 48 8B 1D 8F C6 32 00 4C 8B 3D 90 C6 32 00  ..H....2.L.=..2.
18009AD30  4C 89 BC 24 B8 00 00 00 48 89 9C 24 A8 00 00 00  L..$....H..$....
18009AD40  49 3B DF 0F 84 C2 00 00 00 48 8B 4B 58 48 85 C9  I;.......H.KXH..
18009AD50  75 06 FF 15 70 65 01 00 48 8B 01 FF 50 10 48 8B  u...pe..H...P.H.
18009AD60  F8 48 89 84 24 B0 00 00 00 48 8B 16 49 3B 56 10  .H..$....H..I;V.
18009AD70  74 09 48 89 02 48 83 06 08 EB 10 4C 8D 84 24 B0  t.H..H.....L..$.
18009AD80  00 00 00 49 8B CE E8 45 03 00 00 48 8B 07 48 8B  ...I...E...H..H.
18009AD90  CF FF 50 08 0F 57 C0 0F 11 44 24 48 0F 57 C9 F3  ..P..W...D$H.W..
18009ADA0  0F 7F 4C 24 58 41 B8 15 00 00 00 48 8D 15 96 5E  ..L$XA.....H...^
18009ADB0  31 00 48 8D 4C 24 48 E8 F4 4E F7 FF 90 48 8D 47  1.H.L$H..N...H.G
18009ADC0  08 48 89 44 24 20 4C 8D 4C 24 48 E8 10 02 00 00  .H.D$ L.L$H.....
18009ADD0  90 48 8D 4C 24 48 E8 85 4C F7 FF 90 48 83 C3 60  .H.L$H..L...H..`
18009ADE0  E9 53 FF FF FF 4C 8B B4 24 A0 00 00 00 48 8B 9C  .S...L..$....H..
18009ADF0  24 A8 00 00 00 4C 8B BC 24 B8 00 00 00 48 8B 74  $....L..$....H.t

========================================================================
FUNCTION: ModuleManager_DispatchRender
RVA: 0x9AE80–0x9AEF0  Size: 112 bytes
18009AE80  48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 46  H.\$ WH..0.y..tF
18009AE90  48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24  H..H.y.H.|$PH.\$
18009AEA0  40 48 3B DF 74 30 48 8B 0B 48 89 4C 24 48 48 85  @H;.t0H..H.L$HH.
18009AEB0  C9 74 1D 80 79 28 00 74 17 48 8B 01 FF 50 18 90  .t..y(.t.H...P..
18009AEC0  48 83 C3 08 EB D6 48 8B 5C 24 40 48 8B 7C 24 50  H.....H.\$@H.|$P
18009AED0  48 83 C3 08 EB C6 48 8B 5C 24 58 48 83 C4 30 5F  H.....H.\$XH..0_
18009AEE0  C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC  ................

========================================================================
FUNCTION: ModuleManager_DispatchHotkeys
RVA: 0x9AEF0–0x9AF60  Size: 112 bytes
18009AEF0  48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 46  H.\$ WH..0.y..tF
18009AF00  48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24  H..H.y.H.|$PH.\$
18009AF10  40 48 3B DF 74 30 48 8B 0B 48 89 4C 24 48 48 85  @H;.t0H..H.L$HH.
18009AF20  C9 74 1D 80 79 28 00 74 17 48 8B 01 FF 50 30 90  .t..y(.t.H...P0.
18009AF30  48 83 C3 08 EB D6 48 8B 5C 24 40 48 8B 7C 24 50  H.....H.\$@H.|$P
18009AF40  48 83 C3 08 EB C6 48 8B 5C 24 58 48 83 C4 30 5F  H.....H.\$XH..0_
18009AF50  C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC  ................

========================================================================
FUNCTION: ModuleManager_DispatchRegistrarInit
RVA: 0x9AF60–0x9B000  Size: 160 bytes
18009AF60  48 89 5C 24 20 57 48 83 EC 30 80 79 18 00 74 5C  H.\$ WH..0.y..t\
18009AF70  48 8B 19 48 8B 79 08 48 89 7C 24 50 48 89 5C 24  H..H.y.H.|$PH.\$
18009AF80  40 48 3B DF 74 2A 48 8B 0B 48 89 4C 24 48 48 85  @H;.t*H..H.L$HH.
18009AF90  C9 74 17 48 8B 01 FF 50 38 90 48 83 C3 08 EB DC  .t.H...P8.H.....
18009AFA0  48 8B 5C 24 40 48 8B 7C 24 50 48 83 C3 08 EB CC  H.\$@H.|$PH.....
18009AFB0  0F 10 05 51 BF 32 00 0F 11 05 6A BF 32 00 0F 10  ...Q.2....j.2...
18009AFC0  0D 53 BF 32 00 0F 11 0D 6C BF 32 00 48 8B 5C 24  .S.2....l.2.H.\$
18009AFD0  58 48 83 C4 30 5F C3 CC CC CC CC CC CC CC CC CC  XH..0_..........
18009AFE0  48 81 EC B8 00 00 00 48 8B 05 52 A0 32 00 48 33  H......H..R.2.H3
18009AFF0  C4 48 89 84 24 A0 00 00 00 4C 89 4C 24 58 48 8B  .H..$....L.L$XH.

========================================================================
FUNCTION: GABypass_Patch
RVA: 0x9D1E0–0x9D800  Size: 1568 bytes
18009D1E0  48 83 EC 58 48 83 3D 04 7F 32 00 00 74 67 0F 57  H..XH.=..2..tg.W
18009D1F0  C0 0F 11 44 24 30 0F 57 C9 F3 0F 7F 4C 24 40 41  ...D$0.W....L$@A
18009D200  B8 17 00 00 00 48 8D 15 7C 3D 31 00 48 8D 4C 24  .....H..|=1.H.L$
18009D210  30 E8 9A 2A F7 FF 90 E8 34 12 F7 FF 48 8D 4C 24  0..*....4...H.L$
18009D220  30 48 89 4C 24 20 41 B9 01 00 00 00 41 B8 14 00  0H.L$ A.....A...
18009D230  00 00 48 8D 15 67 3D 31 00 48 8B C8 E8 9F 0C FE  ..H..g=1.H......
18009D240  FF 90 48 8D 4C 24 30 E8 14 28 F7 FF 48 8B 15 9D  ..H.L$0..(..H...
18009D250  7E 32 00 EB 10 48 8D 0D 04 2F 31 00 FF 15 2E 40  ~2...H.../1....@
18009D260  01 00 48 8B D0 48 8D 8A 80 AD 18 00 48 89 0D FD  ..H..H......H...
18009D270  99 32 00 48 8D 8A C0 CE 18 00 48 89 0D CF 99 32  .2.H......H....2
18009D280  00 48 8D 8A 60 3A D9 00 48 89 0D F1 9B 32 00 48  .H..`:..H....2.H
18009D290  8D 8A 80 74 00 00 48 89 0D DB 99 32 00 48 8D 8A  ...t..H....2.H..
18009D2A0  10 4C D9 00 48 89 0D C5 9B 32 00 48 8D 8A A0 4D  .L..H....2.H...M
18009D2B0  D9 00 48 89 0D BF 9B 32 00 48 8D 82 F0 9A 41 03  ..H....2.H....A.
18009D2C0  48 89 05 79 9A 32 00 48 8D 82 60 E8 78 04 48 89  H..y.2.H..`.x.H.
18009D2D0  05 53 9A 32 00 48 8D 82 30 54 F8 03 48 89 05 F5  .S.2.H..0T..H...
18009D2E0  9A 32 00 48 8D 82 F0 E9 E9 00 48 89 05 27 9B 32  .2.H......H..'.2
18009D2F0  00 48 8D 82 40 2D 5E 02 48 89 05 31 9A 32 00 48  .H..@-^.H..1.2.H
18009D300  8D 8A 80 DA F3 02 48 89 0D CB 99 32 00 48 8D 82  ......H....2.H..
18009D310  A0 1A 9D 03 48 89 05 FD 99 32 00 48 8D 82 10 7E  ....H....2.H...~
18009D320  F2 00 48 89 05 B7 99 32 00 48 8D 82 F0 E9 6D 02  ..H....2.H....m.
18009D330  48 89 05 E9 99 32 00 48 8D 82 50 BB E9 03 48 89  H....2.H..P...H.
18009D340  05 B3 99 32 00 48 8D 82 C0 53 EA 03 48 89 05 CD  ...2.H...S..H...
18009D350  9A 32 00 48 89 0D 9E 9A 32 00 48 8D 82 C0 D2 E0  .2.H....2.H.....
18009D360  03 48 89 05 A0 9A 32 00 48 8D 82 30 DF D9 03 48  .H....2.H..0...H
18009D370  89 05 9A 9A 32 00 48 8D 82 C0 14 DC 03 48 89 05  ....2.H......H..
18009D380  7C 9A 32 00 48 8D 82 40 2A 7F 03 48 89 05 CE 9A  |.2.H..@*..H....
18009D390  32 00 48 8D 82 E0 D7 7F 03 48 89 05 C8 9A 32 00  2.H......H....2.
18009D3A0  48 8D 82 40 A6 6E 03 48 89 05 A2 9A 32 00 48 8D  H..@.n.H....2.H.
18009D3B0  82 E0 30 EC 03 48 89 05 9C 9A 32 00 48 8D 82 C0  ..0..H....2.H...
18009D3C0  31 EC 03 48 89 05 76 9A 32 00 48 8D 82 D0 8C 7F  1..H..v.2.H.....
18009D3D0  03 48 89 05 70 9A 32 00 48 8D 82 F0 A8 6A 03 48  .H..p.2.H....j.H
18009D3E0  89 05 52 9A 32 00 48 8D 82 C0 0E CA 0A 48 89 05  ..R.2.H......H..
18009D3F0  34 9A 32 00 48 8D 82 B0 CA 33 0B 48 89 05 06 99  4.2.H....3.H....
18009D400  32 00 48 8D 82 00 CB 33 0B 48 89 05 00 99 32 00  2.H....3.H....2.
18009D410  48 8D 82 80 9D 32 0B 48 89 05 D2 98 32 00 48 8D  H....2.H....2.H.
18009D420  82 00 90 32 0B 48 89 05 BC 98 32 00 48 8D 82 B0  ...2.H....2.H...
18009D430  66 32 0B 48 89 05 3E 99 32 00 48 8D 82 60 66 32  f2.H..>.2.H..`f2
18009D440  0B 48 89 05 28 99 32 00 48 8D 82 30 B0 32 0B 48  .H..(.2.H..0.2.H
18009D450  89 05 5A 99 32 00 48 8D 82 D0 2C 7C 08 48 89 05  ..Z.2.H...,|.H..
18009D460  D4 98 32 00 48 8D 82 20 6A 39 0B 48 89 05 DE 98  ..2.H.. j9.H....
18009D470  32 00 48 8D 82 00 77 39 0B 48 89 05 D8 98 32 00  2.H...w9.H....2.
18009D480  48 8D 82 30 88 39 0B 48 89 05 0A 98 32 00 48 8D  H..0.9.H....2.H.
18009D490  82 80 0F 39 0B 48 89 05 2C 99 32 00 48 8D 82 F0  ...9.H..,.2.H...
18009D4A0  11 39 0B 48 89 05 F6 97 32 00 48 8D 82 40 12 39  .9.H....2.H..@.9
18009D4B0  0B 48 89 05 00 99 32 00 48 8D 82 40 04 39 0B 48  .H....2.H..@.9.H
18009D4C0  89 05 FA 98 32 00 48 8D 82 90 1D 39 0B 48 89 05  ....2.H....9.H..
18009D4D0  DC 97 32 00 48 8D 82 40 1D 39 0B 48 89 05 4E 99  ..2.H..@.9.H..N.
18009D4E0  32 00 48 8D 82 00 07 39 0B 48 89 05 68 97 32 00  2.H....9.H..h.2.
18009D4F0  48 8D 82 20 01 DC 09 48 89 05 4A 97 32 00 48 8D  H.. ...H..J.2.H.
18009D500  82 B0 1F 3A 0B 48 89 05 9C 98 32 00 48 8D 82 40  ...:.H....2.H..@
18009D510  23 3A 0B 48 89 05 76 98 32 00 48 8D 82 D0 26 3A  #:.H..v.2.H...&:
18009D520  0B 48 89 05 78 98 32 00 48 8D 82 60 2A 3A 0B 48  .H..x.2.H..`*:.H
18009D530  89 05 32 98 32 00 48 8D 82 A0 19 3A 0B 48 89 05  ..2.2.H....:.H..
18009D540  8C 98 32 00 48 8D 82 10 1A 3A 0B 48 89 05 36 98  ..2.H....:.H..6.
18009D550  32 00 48 8D 82 70 1A 3A 0B 48 89 05 28 97 32 00  2.H..p.:.H..(.2.
18009D560  48 8D 82 E0 1A 3A 0B 48 89 05 12 97 32 00 48 8D  H....:.H....2.H.
18009D570  82 90 1C 3A 0B 48 89 05 6C 98 32 00 48 8D 82 30  ...:.H..l.2.H..0
18009D580  1D 3A 0B 48 89 05 56 98 32 00 48 8D 82 D0 59 3A  .:.H..V.2.H...Y:
18009D590  0B 48 89 05 10 97 32 00 48 8D 82 D0 51 3A 0B 48  .H....2.H...Q:.H
18009D5A0  89 05 EA 96 32 00 48 8D 82 B0 2C 3A 0B 48 89 05  ....2.H...,:.H..
18009D5B0  B4 96 32 00 48 8D 82 20 2D 3A 0B 48 89 05 9E 96  ..2.H.. -:.H....
18009D5C0  32 00 48 8D 82 10 68 76 03 48 89 05 90 97 32 00  2.H...hv.H....2.
18009D5D0  48 8D 82 00 18 42 0B 48 89 05 BA 97 32 00 48 8D  H....B.H....2.H.
18009D5E0  82 F0 2C E9 00 48 89 05 04 98 32 00 48 8D 82 00  ..,..H....2.H...
18009D5F0  32 38 0B 48 89 05 86 97 32 00 48 8D 82 60 3F 38  28.H....2.H..`?8
18009D600  0B 48 89 05 F8 96 32 00 48 8D 82 10 24 3B 0B 48  .H....2.H...$;.H
18009D610  89 05 A2 96 32 00 48 8D 82 B0 40 3B 0B 48 89 05  ....2.H...@;.H..
18009D620  A4 96 32 00 48 8D 82 20 21 3B 0B 48 89 05 8E 96  ..2.H.. !;.H....
18009D630  32 00 48 8D 82 B0 2F 32 0B 48 89 05 08 97 32 00  2.H.../2.H....2.
18009D640  48 8D 82 80 79 39 0B 48 89 05 82 96 32 00 48 83  H...y9.H....2.H.
18009D650  C4 58 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC  .X..............
18009D660  48 89 5C 24 08 48 89 74 24 10 57 48 83 EC 50 48  H.\$.H.t$.WH..PH
18009D670  8B 05 CA 79 32 00 48 33 C4 48 89 44 24 40 0F 57  ...y2.H3.H.D$@.W
18009D680  C0 0F 11 44 24 20 0F 57 C9 F3 0F 7F 4C 24 30 48  ...D$ .W....L$0H
18009D690  8B 3D 32 98 32 00 48 8D 35 1B 98 32 00 48 83 3D  .=2.2.H.5..2.H.=
18009D6A0  2B 98 32 00 0F 48 0F 47 35 0B 98 32 00 48 BB FF  +.2..H.G5..2.H..
18009D6B0  FF FF FF FF FF FF 7F 48 3B FB 0F 87 98 00 00 00  .......H;.......
18009D6C0  48 83 FF 0F 77 18 48 89 7C 24 30 48 C7 44 24 38  H...w.H.|$0H.D$8
18009D6D0  0F 00 00 00 0F 10 06 0F 11 44 24 20 EB 43 48 8B  .........D$ .CH.
18009D6E0  C7 48 83 C8 0F 48 3B C3 77 0F 48 8B D8 B9 16 00  .H...H;.w.H.....
18009D6F0  00 00 48 3B C1 48 0F 42 D9 48 8D 4B 01 E8 3E 25  ..H;.H.B.H.K..>%
18009D700  F7 FF 48 89 44 24 20 48 89 7C 24 30 48 89 5C 24  ..H.D$ H.|$0H.\$
18009D710  38 4C 8D 47 01 48 8B D6 48 8B C8 E8 44 F1 00 00  8L.G.H..H...D...
18009D720  90 48 8D 54 24 20 E8 35 00 00 00 0F B6 D8 48 8D  .H.T$ .5......H.
18009D730  4C 24 20 E8 28 23 F7 FF 0F B6 C3 48 8B 4C 24 40  L$ .(#.....H.L$@
18009D740  48 33 CC E8 88 DF 00 00 48 8B 5C 24 60 48 8B 74  H3......H.\$`H.t
18009D750  24 68 48 83 C4 50 5F C3 E8 93 23 F7 FF CC CC CC  $hH..P_...#.....
18009D760  48 81 EC 98 00 00 00 48 C7 44 24 78 00 00 00 00  H......H.D$x....
18009D770  4C 8D 44 24 40 48 8D 4C 24 30 E8 51 04 00 00 0F  L.D$@H.L$0.Q....
18009D780  B6 15 32 A0 32 00 0F B6 08 88 0D 29 A0 32 00 88  ..2.2......).2..
18009D790  10 48 8D 48 08 4C 8B 05 24 A0 32 00 48 8B 11 48  .H.H.L..$.2.H..H
18009D7A0  89 15 1A A0 32 00 4C 89 01 0F B6 10 E8 0F B5 00  ....2.L.........
18009D7B0  00 90 B0 01 EB 02 32 C0 48 81 C4 98 00 00 00 C3  ......2.H.......
18009D7C0  CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC  ................
18009D7D0  40 53 56 57 41 54 41 55 41 56 41 57 48 81 EC 70  @SVWATAUAVAWH..p
18009D7E0  01 00 00 48 8B 05 56 78 32 00 48 33 C4 48 89 84  ...H..Vx2.H3.H..
18009D7F0  24 60 01 00 00 49 8B F8 48 8B DA 4C 8B F9 48 89  $`...I..H..L..H.

========================================================================
FUNCTION: Startup_main
RVA: 0xA9190–0xA9500  Size: 880 bytes
1800A9190  48 89 5C 24 08 48 89 74 24 10 48 89 7C 24 18 55  H.\$.H.t$.H.|$.U
1800A91A0  41 56 41 57 48 8B EC 48 83 EC 70 48 8B 05 8E BE  AVAWH..H..pH....
1800A91B0  31 00 48 33 C4 48 89 45 F0 E8 92 52 F6 FF 48 8B  1.H3.H.E...R..H.
1800A91C0  F8 80 B8 C0 00 00 00 00 0F 85 E3 00 00 00 FF 15  ................
1800A91D0  34 7F 00 00 33 C9 FF 15 C4 86 00 00 48 8B D8 33  4...3.......H..3
1800A91E0  C9 FF 15 B9 86 00 00 4C 8B CB 4C 8D 05 1F 60 30  .......L..L...`0
1800A91F0  00 48 8D 15 1C 60 30 00 48 8B C8 FF 15 77 86 00  .H...`0.H....w..
1800A9200  00 B9 01 00 00 00 FF 15 94 86 00 00 48 8B D8 B9  ............H...
1800A9210  01 00 00 00 FF 15 86 86 00 00 4C 8B CB 4C 8D 05  ..........L..L..
1800A9220  F8 5F 30 00 48 8D 15 F5 5F 30 00 48 8B C8 FF 15  ._0.H..._0.H....
1800A9230  44 86 00 00 B9 02 00 00 00 FF 15 61 86 00 00 48  D..........a...H
1800A9240  8B D8 B9 02 00 00 00 FF 15 53 86 00 00 4C 8B CB  .........S...L..
1800A9250  4C 8D 05 C5 5F 30 00 48 8D 15 C2 5F 30 00 48 8B  L..._0.H..._0.H.
1800A9260  C8 FF 15 11 86 00 00 B9 E9 FD 00 00 FF 15 9E 7E  ...............~
1800A9270  00 00 B9 F5 FF FF FF FF 15 9B 7E 00 00 48 8B D8  ..........~..H..
1800A9280  C7 45 E8 00 00 00 00 48 8D 55 E8 48 8B C8 FF 15  .E.....H.U.H....
1800A9290  8C 7E 00 00 85 C0 74 12 8B 55 E8 83 CA 04 89 55  .~....t..U.....U
1800A92A0  E8 48 8B CB FF 15 7E 7E 00 00 C6 87 C0 00 00 00  .H....~~........
1800A92B0  01 E8 9A 51 F6 FF 66 C7 00 01 01 C7 40 04 01 00  ...Q..f.....@...
1800A92C0  00 00 C6 40 03 01 48 8D 0D 13 9E 30 00 FF 15 CD  ...@..H....0....
1800A92D0  7F 00 00 FF 15 9F 7E 00 00 48 85 C0 74 17 0F B6  ......~..H..t...
1800A92E0  0D 05 BE 31 00 F6 D9 1B D2 83 E2 05 48 8B C8 FF  ...1........H...
1800A92F0  15 33 83 00 00 33 D2 48 8D 0D 5A 63 30 00 FF 15  .3...3.H..Zc0...
1800A9300  74 81 00 00 48 85 C0 0F 85 B8 00 00 00 48 BF 00  t...H........H..
1800A9310  00 4F 91 94 4E 00 00 48 BE DB 34 B6 D7 82 DE 1B  .O..N..H..4.....
1800A9320  43 49 BF FE 35 65 C4 FF FF FF 7F 49 BE FF FF FF  CI..5e.....I....
1800A9330  FF FF FF FF 7F 48 8D 4D E8 E8 D2 A7 FE FF 48 8B  .....H.M......H.
1800A9340  5D E8 49 3B DF 7F 09 48 81 C3 00 CA 9A 3B EB 03  ].I;...H.....;..
1800A9350  49 8B DE 48 8D 4D E0 E8 B4 A7 FE FF 48 8B 45 E0  I..H.M......H.E.
1800A9360  48 3B D8 74 48 7C 46 48 8B CB 48 2B C8 48 3B CF  H;.tH|FH..H+.H;.
1800A9370  74 10 7C 0E BA 00 5C 26 05 8B CA E8 2C 23 00 00  t.|...\&....,#..
1800A9380  EB D1 48 8B C6 48 F7 E9 48 C1 FA 12 48 8B C2 48  ..H..H..H...H..H
1800A9390  C1 E8 3F 48 03 D0 48 69 C2 40 42 0F 00 48 3B C1  ..?H..Hi.@B..H;.
1800A93A0  7D 02 FF C2 8B CA E8 01 23 00 00 EB A6 33 D2 48  }.......#....3.H
1800A93B0  8D 0D A2 62 30 00 FF 15 BC 80 00 00 48 85 C0 0F  ...b0.......H...
1800A93C0  84 70 FF FF FF 48 8B 0D A4 7D 00 00 E8 1F 27 FE  .p...H...}....'.
1800A93D0  FF 0F 57 C0 0F 11 45 C0 0F 57 C9 F3 0F 7F 4D D0  ..W...E..W....M.
1800A93E0  41 B8 0E 00 00 00 48 8D 15 4B 9D 30 00 48 8D 4D  A.....H..K.0.H.M
1800A93F0  C0 E8 BA 68 F6 FF 90 E8 54 50 F6 FF 48 8D 4D C0  ...h....TP..H.M.
1800A9400  48 89 4C 24 20 41 B9 01 00 00 00 41 B8 35 00 00  H.L$ A.....A.5..
1800A9410  00 48 8D 15 30 9D 30 00 48 8B C8 E8 C0 4A FD FF  .H..0.0.H....J..
1800A9420  90 48 8D 4D C0 E8 36 66 F6 FF E8 B1 3D FF FF FF  .H.M..6f....=...
1800A9430  15 4B DA 31 00 48 8B D8 0F 57 C0 0F 57 C9 48 8D  .K.1.H...W..W.H.
1800A9440  4D C0 0F 11 45 C0 F3 0F 7F 4D D0 48 85 C0 0F 84  M...E....M.H....
1800A9450  EB 00 00 00 41 B8 15 00 00 00 48 8D 15 97 9C 30  ....A.....H....0
1800A9460  00 E8 4A 68 F6 FF 90 E8 E4 4F F6 FF 48 8D 4D C0  ..Jh.....O..H.M.
1800A9470  48 89 4C 24 20 41 B9 01 00 00 00 41 B8 42 00 00  H.L$ A.....A.B..
1800A9480  00 48 8D 15 C0 9C 30 00 48 8B C8 E8 50 4A FD FF  .H....0.H...PJ..
1800A9490  90 48 8D 4D C0 E8 C6 65 F6 FF 48 8B 05 D7 D9 31  .H.M...e..H....1
1800A94A0  00 48 8B CB FF D0 0F 57 C0 0F 57 C9 48 8D 4D C0  .H.....W..W.H.M.
1800A94B0  0F 11 45 C0 F3 0F 7F 4D D0 48 85 C0 74 42 41 B8  ..E....M.H..tBA.
1800A94C0  25 00 00 00 48 8D 15 45 9C 30 00 E8 E0 67 F6 FF  %...H..E.0...g..
1800A94D0  90 E8 7A 4F F6 FF 48 8D 4D C0 48 89 4C 24 20 41  ..zO..H.M.H.L$ A
1800A94E0  B9 01 00 00 00 41 B8 49 00 00 00 48 8D 15 56 9C  .....A.I...H..V.
1800A94F0  30 00 48 8B C8 E8 E6 49 FD FF 90 E9 7C 00 00 00  0.H....I....|...

========================================================================
FUNCTION: CollectProcessThreads
RVA: 0xA9600–0xA9A20  Size: 1056 bytes
1800A9600  49 8B E3 41 5F 41 5E 5D C3 CC CC CC 48 83 EC 28  I..A_A^]....H..(
1800A9610  4C 8B 05 C9 E1 31 00 4D 85 C0 75 30 48 8B 0D 6D  L....1.M..u0H..m
1800A9620  D8 31 00 33 D2 41 B8 00 07 00 00 C7 05 B3 E1 31  .1.3.A.........1
1800A9630  00 20 00 00 00 FF 15 85 7B 00 00 48 89 05 9E E1  . ......{..H....
1800A9640  31 00 4C 8B C0 48 85 C0 74 30 EB 47 8B 15 9A E1  1.L..H..t0.G....
1800A9650  31 00 8B 05 90 E1 31 00 3B D0 72 3D 8D 0C 00 33  1.....1.;.r=...3
1800A9660  D2 4C 6B C9 38 48 8B 0D 24 D8 31 00 FF 15 46 7B  .Lk.8H..$.1...F{
1800A9670  00 00 4C 8B C0 48 85 C0 75 04 33 C0 EB 2C 8B 05  ..L..H..u.3..,..
1800A9680  64 E1 31 00 03 C0 4C 89 05 53 E1 31 00 89 05 55  d.1...L..S.1...U
1800A9690  E1 31 00 8B 15 53 E1 31 00 8B C2 48 6B C0 38 49  .1...S.1...Hk.8I
1800A96A0  03 C0 FF C2 89 15 42 E1 31 00 48 83 C4 28 C3 CC  ......B.1.H..(..
1800A96B0  48 8B C4 48 89 58 10 48 89 70 18 48 89 78 20 55  H..H.X.H.p.H.x U
1800A96C0  41 54 41 55 41 56 41 57 48 8D A8 A8 FB FF FF 48  ATAUAVAWH......H
1800A96D0  81 EC 30 05 00 00 48 8B 05 63 B9 31 00 48 33 C4  ..0...H..c.1.H3.
1800A96E0  48 89 85 20 04 00 00 33 DB 89 54 24 24 44 8B FA  H.. ...3..T$$D..
1800A96F0  48 89 4C 24 28 48 8B F9 48 89 19 48 89 59 08 33  H.L$(H..H..H.Y.3
1800A9700  D2 8D 4B 04 44 89 44 24 20 8B F3 FF 15 4F 7A 00  ..K.D.D$ ....Oz.
1800A9710  00 4C 8B F0 48 83 F8 FF 0F 84 C8 02 00 00 44 8D  .L..H.........D.
1800A9720  63 1C 48 8B C8 48 8D 54 24 30 44 89 64 24 30 FF  c.H..H.T$0D.d$0.
1800A9730  15 7B 7A 00 00 85 C0 0F 84 D5 00 00 00 8D 73 01  .{z...........s.
1800A9740  83 7C 24 30 10 0F 82 85 00 00 00 FF 15 07 7A 00  .|$0..........z.
1800A9750  00 39 44 24 3C 75 79 FF 15 0B 7B 00 00 39 44 24  .9D$<uy...{..9D$
1800A9760  38 74 6D 48 8B 17 48 85 D2 75 27 48 8B 0D 1E D7  8tmH..H..u'H....
1800A9770  31 00 41 B8 00 02 00 00 C7 47 08 80 00 00 00 FF  1.A......G......
1800A9780  15 3B 7A 00 00 48 89 07 48 8B D0 48 85 C0 74 66  .;z..H..H..H..tf
1800A9790  EB 31 8B 47 08 39 47 0C 72 29 48 8B 0D EF D6 31  .1.G.9G.r)H....1
1800A97A0  00 03 C0 44 8B C8 4C 8B C2 49 C1 E1 02 33 D2 89  ...D..L..I...3..
1800A97B0  47 08 FF 15 00 7A 00 00 48 8B D0 48 85 C0 74 36  G....z..H..H..t6
1800A97C0  48 89 07 8B 4F 0C 8B 44 24 38 89 04 8A FF 47 0C  H...O..D$8....G.
1800A97D0  48 8D 54 24 30 44 89 64 24 30 49 8B CE FF 15 C5  H.T$0D.d$0I.....
1800A97E0  79 00 00 85 C0 0F 85 55 FF FF FF FF 15 6F 78 00  y......U.....ox.
1800A97F0  00 83 F8 12 74 1C 8B F3 48 39 1F 74 15 4C 8B 07  ....t...H9.t.L..
1800A9800  33 D2 48 8B 0D 87 D6 31 00 FF 15 71 7A 00 00 48  3.H....1...qz..H
1800A9810  89 1F 49 8B CE FF 15 75 79 00 00 85 F6 0F 84 C3  ..I....uy.......
1800A9820  01 00 00 48 39 1F 0F 84 BF 01 00 00 8B F3 39 5F  ...H9.........9_
1800A9830  0C 0F 86 B4 01 00 00 41 83 CC FF 4C 8B 07 33 D2  .......A...L..3.
1800A9840  8B C6 8D 4A 5A 45 8B 04 80 FF 15 81 79 00 00 4C  ...JZE......y..L
1800A9850  8B F0 44 8B EB 48 85 C0 0F 84 11 01 00 00 48 8B  ..D..H........H.
1800A9860  C8 FF 15 E9 77 00 00 41 3B C4 0F 84 F1 00 00 00  ....w..A;.......
1800A9870  48 8D 54 24 50 C7 45 80 01 00 10 00 49 8B CE 41  H.T$P.E.....I..A
1800A9880  BD 01 00 00 00 FF 15 DD 77 00 00 85 C0 0F 84 CE  ........w.......
1800A9890  00 00 00 8B 0D 53 DF 31 00 45 3B FC 74 04 41 8D  .....S.1.E;.t.A.
1800A98A0  4F 01 8B D3 41 0F 45 D7 3B D1 0F 83 B1 00 00 00  O...A.E.;.......
1800A98B0  4C 8B 55 48 8B 7C 24 20 8B C2 4C 6B F8 38 2B CA  L.UH.|$ ..Lk.8+.
1800A98C0  44 8B E1 48 8B 15 16 DF 31 00 8B C7 49 03 D7 85  D..H....1...I...
1800A98D0  FF 74 16 41 3B C5 74 0C 0F B6 4A 20 C1 E9 02 41  .t.A;.t...J ...A
1800A98E0  23 CD EB 07 41 8B CD EB 02 8B CB 44 0F B6 42 20  #...A......D..B 
1800A98F0  41 8B C0 D1 E8 41 23 C5 3B C1 74 4A 85 C9 0F 84  A....A#.;.tJ....
1800A9900  8C 00 00 00 44 8B 42 24 8B CB 41 83 E0 0F 76 18  ....D.B$..A...v.
1800A9910  44 8B C9 41 0F B6 44 11 28 48 03 02 4C 3B D0 74  D..A..D.(H..L;.t
1800A9920  63 FF C1 41 3B C8 72 E8 48 8B CB 48 85 C9 74 16  c..A;.r.H..H..t.
1800A9930  48 89 4D 48 48 8D 54 24 50 49 8B CE FF 15 36 77  H.MHH.T$PI....6w
1800A9940  00 00 4C 8B 55 48 49 83 C7 38 4D 2B E5 0F 85 70  ..L.UHI..8M+...p
1800A9950  FF FF FF 48 8B 7C 24 28 41 83 CC FF 44 8B 7C 24  ...H.|$(A...D.|$
1800A9960  24 49 8B CE FF 15 26 78 00 00 45 85 ED 75 08 48  $I....&x..E..u.H
1800A9970  8B 07 8B CE 89 1C 88 FF C6 3B 77 0C 0F 82 B9 FE  .........;w.....
1800A9980  FF FF EB 67 41 0F B6 4C 11 30 48 03 4A 10 EB 9B  ...gA..L.0H.J...
1800A9990  45 84 C5 74 0C 48 8B 0A 48 8D 41 FB 4C 3B D0 74  E..t.H..H.A.L;.t
1800A99A0  8A 44 8B 42 24 8B CB 41 83 E0 0F 76 19 44 8B C9  .D.B$..A...v.D..
1800A99B0  41 0F B6 44 11 30 48 03 42 10 4C 3B D0 74 19 FF  A..D.0H.B.L;.t..
1800A99C0  C1 41 3B C8 72 E7 4C 3B 52 08 0F 85 58 FF FF FF  .A;.r.L;R...X...
1800A99D0  48 8B 0A E9 53 FF FF FF 41 0F B6 4C 11 28 48 03  H...S...A..L.(H.
1800A99E0  0A E9 45 FF FF FF BB 09 00 00 00 8B C3 48 8B 8D  ..E..........H..
1800A99F0  20 04 00 00 48 33 CC E8 D4 1C 00 00 4C 8D 9C 24   ...H3......L..$
1800A9A00  30 05 00 00 49 8B 5B 38 49 8B 73 40 49 8B 7B 48  0...I.[8I.s@I.{H
1800A9A10  49 8B E3 41 5F 41 5E 41 5D 41 5C 5D C3 CC CC CC  I..A_A^A]A\]....

========================================================================
FUNCTION: SuspendOrResumeThreads
RVA: 0xA9A20–0xA9A9C  Size: 124 bytes
1800A9A20  48 89 5C 24 08 48 89 74 24 10 57 48 83 EC 20 48  H.\$.H.t$.WH.. H
1800A9A30  83 39 00 48 8B D9 74 51 33 FF 39 79 0C 76 38 48  .9.H..tQ3.9y.v8H
1800A9A40  8B 03 44 8B 04 B8 45 85 C0 74 25 33 D2 8D 4A 5A  ..D...E..t%3..JZ
1800A9A50  FF 15 7A 77 00 00 48 8B F0 48 85 C0 74 12 48 8B  ..zw..H..H..t.H.
1800A9A60  C8 FF 15 F1 75 00 00 48 8B CE FF 15 20 77 00 00  ....u..H.... w..
1800A9A70  FF C7 3B 7B 0C 72 C8 4C 8B 03 33 D2 48 8B 0D 0D  ..;{.r.L..3.H...
1800A9A80  D4 31 00 FF 15 F7 77 00 00 48 8B 5C 24 30 48 8B  .1....w..H.\$0H.
1800A9A90  74 24 38 48 83 C4 20 5F C3 CC CC CC              t$8H.. _....

========================================================================
FUNCTION: EnableHook_PatchCode
RVA: 0xA9A9C–0xA9BC4  Size: 296 bytes
1800A9A9C  48 89 5C 24 10 48 89 6C 24 18 48 89 74 24 20 57  H.\$.H.l$.H.t$ W
1800A9AAC  41 56 41 57 48 83 EC 20 48 8B 35 25 DD 31 00 8B  AVAWH.. H.5%.1..
1800A9ABC  EA 8B C1 48 6B F8 38 48 8B 14 37 8A 4C 37 20 4C  ...Hk.8H..7.L7 L
1800A9ACC  8B F2 48 8D 5A FB 80 E1 01 74 03 4C 8B F3 0F B6  ..H.Z....t.L....
1800A9ADC  C1 4C 8D 4C 24 40 84 C9 41 B8 40 00 00 00 48 0F  .L.L$@..A.@...H.
1800A9AEC  44 DA 4C 8D 3C 45 05 00 00 00 48 8B CB 49 8B D7  D.L.<E....H..I..
1800A9AFC  FF 15 86 77 00 00 85 C0 75 0A B8 0A 00 00 00 E9  ...w....u.......
1800A9B0C  9B 00 00 00 85 ED 74 22 C6 03 E9 8B 44 37 08 41  ......t"....D7.A
1800A9B1C  2B C6 83 E8 05 89 43 01 F6 44 37 20 01 74 31 48  +.....C..D7 .t1H
1800A9B2C  8B 04 37 66 C7 00 EB F9 EB 26 8B 44 37 18 F6 44  ..7f.....&.D7..D
1800A9B3C  37 20 01 89 03 74 12 0F B7 44 37 1C 66 89 43 04  7 ...t...D7.f.C.
1800A9B4C  8A 44 37 1E 88 43 06 EB 07 8A 44 37 1C 88 43 04  .D7..C....D7..C.
1800A9B5C  44 8B 44 24 40 4C 8D 4C 24 40 49 8B D7 48 8B CB  D.D$@L.L$@I..H..
1800A9B6C  FF 15 16 77 00 00 FF 15 F8 76 00 00 4D 8B C7 48  ...w.....v..M..H
1800A9B7C  8B D3 48 8B C8 FF 15 E9 74 00 00 40 8A C5 40 C0  ..H.....t..@..@.
1800A9B8C  E5 02 02 C0 32 44 37 20 24 02 32 44 37 20 40 32  ....2D7 $.2D7 @2
1800A9B9C  E8 40 80 E5 04 40 32 E8 40 88 6C 37 20 33 C0 48  .@...@2.@.l7 3.H
1800A9BAC  8B 5C 24 48 48 8B 6C 24 50 48 8B 74 24 58 48 83  .\$HH.l$PH.t$XH.
1800A9BBC  C4 20 41 5F 41 5E 5F C3                          . A_A^_.

========================================================================
FUNCTION: AcquireSpinlock
RVA: 0xA9C88–0xA9CC8  Size: 64 bytes
1800A9C88  48 89 5C 24 08 57 48 83 EC 20 33 DB 8D 7B 01 EB  H.\$.WH.. 3..{..
1800A9C98  15 48 83 FB 20 73 04 33 C9 EB 02 8B CF FF 15 9D  .H.. s.3........
1800A9CA8  74 00 00 48 03 DF 33 C0 F0 0F B1 3D D0 D1 31 00  t..H..3....=..1.
1800A9CB8  75 DF 48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC CC  u.H.\$0H.. _....

========================================================================
FUNCTION: HookManager_CreateHook
RVA: 0xA9CC8–0xA9E8C  Size: 452 bytes
1800A9CC8  48 89 5C 24 20 55 56 57 41 56 41 57 48 83 EC 60  H.\$ UVWAVAWH..`
1800A9CD8  48 8B 05 61 B3 31 00 48 33 C4 48 89 44 24 58 33  H..a.1.H3.H.D$X3
1800A9CE8  DB 4D 8B F8 8B FB 48 8B EA 48 8B F1 E8 8F FF FF  .M....H..H......
1800A9CF8  FF 48 39 1D 90 D1 31 00 0F 84 57 01 00 00 48 8B  .H9...1...W...H.
1800A9D08  CE E8 DE 09 00 00 85 C0 0F 84 40 01 00 00 48 8B  ..........@...H.
1800A9D18  CD E8 CE 09 00 00 85 C0 0F 84 30 01 00 00 8B 15  ..........0.....
1800A9D28  C0 DA 31 00 8B C3 85 D2 74 1A 48 8B 0D A7 DA 31  ..1.....t.H....1
1800A9D38  00 48 3B 31 0F 84 D0 00 00 00 FF C0 48 83 C1 38  .H;1........H..8
1800A9D48  3B C2 72 ED 48 8B CE E8 24 07 00 00 48 85 C0 0F  ;.r.H...$...H...
1800A9D58  84 F2 00 00 00 4C 8B 70 08 49 8B 0E FF 40 10 48  .....L.p.I...@.H
1800A9D68  89 48 08 4D 85 F6 0F 84 DB 00 00 00 48 8D 4C 24  .H.M........H.L$
1800A9D78  20 48 89 74 24 20 48 89 6C 24 28 4C 89 74 24 30   H.t$ H.l$(L.t$0
1800A9D88  E8 7F 03 00 00 85 C0 0F 84 AB 00 00 00 E8 72 F8  ..............r.
1800A9D98  FF FF 4C 8B C0 48 85 C0 0F 84 93 00 00 00 8A 50  ..L..H.........P
1800A9DA8  20 83 60 24 F0 80 E2 F8 48 8B 4C 24 20 4C 8B 4C   .`$....H.L$ L.L
1800A9DB8  24 30 48 89 08 48 8B 4C 24 38 48 89 48 08 8A 4C  $0H..H.L$8H.H..L
1800A9DC8  24 40 4C 89 48 10 80 E1 01 0A D1 88 50 20 8B 44  $@L.H.......P .D
1800A9DD8  24 44 83 E0 0F 41 09 40 24 48 8B 44 24 48 49 89  $D...A.@$H.D$HI.
1800A9DE8  40 28 48 8B 44 24 50 49 89 40 30 39 5C 24 40 74  @(H.D$PI.@09\$@t
1800A9DF8  29 8B 46 FB 41 89 40 18 0F B7 46 FF 66 41 89 40  ).F.A.@...F.fA.@
1800A9E08  1C 8A 46 01 41 88 40 1E EB 1D 83 F8 FF 0F 84 31  ..F.A.@........1
1800A9E18  FF FF FF BF 03 00 00 00 EB 40 8B 06 41 89 40 18  .........@..A.@.
1800A9E28  8A 46 04 41 88 40 1C 4D 85 FF 74 2E 4D 89 0F EB  .F.A.@.M..t.M...
1800A9E38  29 BF 09 00 00 00 EB 05 BF 08 00 00 00 49 8B CE  )............I..
1800A9E48  E8 37 08 00 00 EB 13 BF 09 00 00 00 EB 0C BF 07  .7..............
1800A9E58  00 00 00 EB 05 BF 02 00 00 00 87 1D 20 D0 31 00  ............ .1.
1800A9E68  8B C7 48 8B 4C 24 58 48 33 CC E8 59 18 00 00 48  ..H.L$XH3..Y...H
1800A9E78  8B 9C 24 A8 00 00 00 48 83 C4 60 41 5F 41 5E 5F  ..$....H..`A_A^_
1800A9E88  5E 5D C3 CC                                      ^]..

========================================================================
FUNCTION: HookManager_RemoveHook
RVA: 0xA9E8C–0xA9FF0  Size: 356 bytes
1800A9E8C  48 89 5C 24 08 48 89 6C 24 10 48 89 74 24 18 57  H.\$.H.l$.H.t$.W
1800A9E9C  48 83 EC 30 33 DB 48 8B E9 8B F3 E8 DC FD FF FF  H..03.H.........
1800A9EAC  48 39 1D DD CF 31 00 0F 84 15 01 00 00 8B 15 2D  H9...1.........-
1800A9EBC  D9 31 00 8B FB 85 D2 74 19 48 8B 0D 14 D9 31 00  .1.....t.H....1.
1800A9ECC  48 8B C1 48 3B 28 74 14 FF C7 48 83 C0 38 3B FA  H..H;(t...H..8;.
1800A9EDC  72 F1 BE 04 00 00 00 E9 EB 00 00 00 83 FF FF 74  r..............t
1800A9EEC  F1 8B C7 48 6B E8 38 F6 44 29 20 02 74 3D 45 33  ...Hk.8.D) .t=E3
1800A9EFC  C0 48 8D 4C 24 20 8B D7 E8 A7 F7 FF FF 8B F0 85  .H.L$ ..........
1800A9F0C  C0 0F 85 C0 00 00 00 33 D2 8B CF E8 80 FB FF FF  .......3........
1800A9F1C  48 8D 4C 24 20 8B F0 E8 F8 FA FF FF 85 F6 0F 85  H.L$ ...........
1800A9F2C  A3 00 00 00 48 8B 0D A9 D8 31 00 48 8B 4C 29 10  ....H....1.H.L).
1800A9F3C  E8 43 07 00 00 8B 15 A5 D8 31 00 FF CA 3B FA 73  .C.......1...;.s
1800A9F4C  35 8B C2 48 6B C8 38 48 8B 05 86 D8 31 00 0F 10  5..Hk.8H....1...
1800A9F5C  04 01 0F 11 04 28 0F 10 4C 01 10 0F 11 4C 28 10  .....(..L....L(.
1800A9F6C  0F 10 44 01 20 0F 11 44 28 20 F2 0F 10 4C 01 30  ..D. ..D( ...L.0
1800A9F7C  F2 0F 11 4C 28 30 8B 0D 60 D8 31 00 8B C1 89 15  ...L(0..`.1.....
1800A9F8C  5C D8 31 00 D1 E8 83 F8 20 72 3C 3B C2 72 38 4C  \.1..... r<;.r8L
1800A9F9C  8B 05 3E D8 31 00 8B C1 48 8B 0D E5 CE 31 00 33  ..>.1...H....1.3
1800A9FAC  D2 48 D1 E8 4C 6B C8 38 FF 15 FE 71 00 00 48 85  .H..Lk.8...q..H.
1800A9FBC  C0 74 14 D1 2D 23 D8 31 00 48 89 05 14 D8 31 00  .t..-#.1.H....1.
1800A9FCC  EB 05 BE 02 00 00 00 87 1D AF CE 31 00 48 8B 5C  ...........1.H.\
1800A9FDC  24 40 8B C6 48 8B 6C 24 48 48 8B 74 24 50 48 83  $@..H.l$HH.t$PH.
1800A9FEC  C4 30 5F C3                                      .0_.

========================================================================
FUNCTION: SecurityExceptionInit
RVA: 0xAC580–0xAC6CC  Size: 332 bytes
1800AC580  48 89 5C 24 08 55 48 8D AC 24 40 FB FF FF 48 81  H.\$.UH..$@...H.
1800AC590  EC C0 05 00 00 8B D9 B9 17 00 00 00 FF 15 4E 4C  ..............NL
1800AC5A0  00 00 85 C0 74 04 8B CB CD 29 B9 03 00 00 00 E8  ....t....)......
1800AC5B0  C0 FF FF FF 33 D2 48 8D 4D F0 41 B8 D0 04 00 00  ....3.H.M.A.....
1800AC5C0  E8 A5 02 00 00 48 8D 4D F0 FF 15 51 4C 00 00 48  .....H.M...QL..H
1800AC5D0  8B 9D E8 00 00 00 48 8D 95 D8 04 00 00 48 8B CB  ......H......H..
1800AC5E0  45 33 C0 FF 15 2F 4C 00 00 48 85 C0 74 3F 48 8B  E3.../L..H..t?H.
1800AC5F0  95 D8 04 00 00 48 8D 8D E0 04 00 00 48 C7 44 24  .....H......H.D$
1800AC600  38 00 00 00 00 4C 8B C8 48 89 4C 24 30 4C 8B C3  8....L..H.L$0L..
1800AC610  48 8D 8D E8 04 00 00 48 89 4C 24 28 48 8D 4D F0  H......H.L$(H.M.
1800AC620  48 89 4C 24 20 33 C9 FF 15 E3 4B 00 00 48 8B 85  H.L$ 3....K..H..
1800AC630  C8 04 00 00 48 8D 4C 24 50 48 89 85 E8 00 00 00  ....H.L$PH......
1800AC640  33 D2 48 8D 85 C8 04 00 00 41 B8 98 00 00 00 48  3.H......A.....H
1800AC650  83 C0 08 48 89 85 88 00 00 00 E8 0B 02 00 00 48  ...H...........H
1800AC660  8B 85 C8 04 00 00 48 89 44 24 60 C7 44 24 50 15  ......H.D$`.D$P.
1800AC670  00 00 40 C7 44 24 54 01 00 00 00 FF 15 67 4B 00  ..@.D$T......gK.
1800AC680  00 8B D8 33 C9 48 8D 44 24 50 48 89 44 24 40 48  ...3.H.D$PH.D$@H
1800AC690  8D 45 F0 48 89 44 24 48 FF 15 62 4B 00 00 48 8D  .E.H.D$H..bK..H.
1800AC6A0  4C 24 40 FF 15 5F 4B 00 00 85 C0 75 0D 83 FB 01  L$@.._K....u....
1800AC6B0  74 08 8D 48 03 E8 BA FE FF FF 48 8B 9C 24 D0 05  t..H......H..$..
1800AC6C0  00 00 48 81 C4 C0 05 00 00 5D C3 CC              ..H......]..

========================================================================
FUNCTION: SecurityCheckCookie
RVA: 0xAC6CC–0xAC77C  Size: 176 bytes
1800AC6CC  48 89 5C 24 18 55 48 8B EC 48 83 EC 30 48 8B 05  H.\$.UH..H..0H..
1800AC6DC  60 89 31 00 48 BB 32 A2 DF 2D 99 2B 00 00 48 3B  `.1.H.2..-.+..H;
1800AC6EC  C3 75 77 48 8D 4D 10 48 C7 45 10 00 00 00 00 FF  .uwH.M.H.E......
1800AC6FC  15 DF 4A 00 00 48 8B 45 10 48 89 45 F0 FF 15 59  ..J..H.E.H.E...Y
1800AC70C  4B 00 00 8B C0 48 31 45 F0 FF 15 3D 4A 00 00 8B  K....H1E...=J...
1800AC71C  C0 48 8D 4D 18 48 31 45 F0 FF 15 D5 49 00 00 8B  .H.M.H1E....I...
1800AC72C  45 18 48 8D 4D F0 48 C1 E0 20 48 33 45 18 48 33  E.H.M.H.. H3E.H3
1800AC73C  45 F0 48 33 C1 48 B9 FF FF FF FF FF FF 00 00 48  E.H3.H.........H
1800AC74C  23 C1 48 B9 33 A2 DF 2D 99 2B 00 00 48 3B C3 48  #.H.3..-.+..H;.H
1800AC75C  0F 44 C1 48 89 05 DA 88 31 00 48 8B 5C 24 50 48  .D.H....1.H.\$PH
1800AC76C  F7 D0 48 89 05 0B 89 31 00 48 83 C4 30 5D C3 CC  ..H....1.H..0]..

