==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  50 B0 00 00 00 00 00 00  00 00 00 00 1E B2 00 00  30 B1 00 00 68 B0 00 00  00 00 00 00 00 00 00 00  P░..........▲▓..0▒..h░..........
00000020  82 B2 00 00 48 B1 00 00  D0 B0 00 00 00 00 00 00  00 00 00 00 50 B4 00 00  B0 B1 00 00 00 00 00 00  é▓..H▒..╨░..........P┤..░▒......
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  10 B2 00 00 2C B2 00 00  3E B2 00 00 4E B2 00 00  ................►▓..,▓..>▓..N▓..
00000060  62 B2 00 00 00 00 00 00  74 B2 00 00 90 B2 00 00  9C B2 00 00 B0 B2 00 00  BE B2 00 00 D0 B2 00 00  b▓......t▓..É▓..£▓..░▓..╛▓..╨▓..
00000080  E8 B2 00 00 F8 B2 00 00  0A B3 00 00 20 B3 00 00  34 B3 00 00 46 B3 00 00  58 B3 00 00 70 B3 00 00  Φ▓..°▓..◙│.. │..4│..F│..X│..p│..
000000A0  86 B3 00 00 94 B3 00 00  AC B3 00 00 B8 B3 00 00  D4 B3 00 00 E0 B3 00 00  EE B3 00 00 FE B3 00 00  å│..ö│..¼│..╕│..╘│..α│..ε│..■│..
000000C0  10 B4 00 00 26 B4 00 00  32 B4 00 00 00 00 00 00  3E B4 00 00 5C B4 00 00  6E B4 00 00 7C B4 00 00  ►┤..&┤..2┤......>┤..\┤..n┤..|┤..
000000E0  8E B4 00 00 9A B4 00 00  A8 B4 00 00 BA B4 00 00  CA B4 00 00 DE B4 00 00  F0 B4 00 00 00 B5 00 00  Ä┤..Ü┤..¿┤..║┤..╩┤..▐┤..≡┤...╡..
00000100  16 B5 00 00 22 B5 00 00  30 B5 00 00 3E B5 00 00  4E B5 00 00 64 B5 00 00  76 B5 00 00 82 B5 00 00  ▬╡.."╡..0╡..>╡..N╡..d╡..v╡..é╡..
00000120  8E B5 00 00 A0 B5 00 00  B0 B5 00 00 00 00 00 00  10 B2 00 00 2C B2 00 00  3E B2 00 00 4E B2 00 00  Ä╡..á╡..░╡......►▓..,▓..>▓..N▓..
00000140  62 B2 00 00 00 00 00 00  74 B2 00 00 90 B2 00 00  9C B2 00 00 B0 B2 00 00  BE B2 00 00 D0 B2 00 00  b▓......t▓..É▓..£▓..░▓..╛▓..╨▓..
00000160  E8 B2 00 00 F8 B2 00 00  0A B3 00 00 20 B3 00 00  34 B3 00 00 46 B3 00 00  58 B3 00 00 70 B3 00 00  Φ▓..°▓..◙│.. │..4│..F│..X│..p│..
00000180  86 B3 00 00 94 B3 00 00  AC B3 00 00 B8 B3 00 00  D4 B3 00 00 E0 B3 00 00  EE B3 00 00 FE B3 00 00  å│..ö│..¼│..╕│..╘│..α│..ε│..■│..
000001A0  10 B4 00 00 26 B4 00 00  32 B4 00 00 00 00 00 00  3E B4 00 00 5C B4 00 00  6E B4 00 00 7C B4 00 00  ►┤..&┤..2┤......>┤..\┤..n┤..|┤..
000001C0  8E B4 00 00 9A B4 00 00  A8 B4 00 00 BA B4 00 00  CA B4 00 00 DE B4 00 00  F0 B4 00 00 00 B5 00 00  Ä┤..Ü┤..¿┤..║┤..╩┤..▐┤..≡┤...╡..
000001E0  16 B5 00 00 22 B5 00 00  30 B5 00 00 3E B5 00 00  4E B5 00 00 64 B5 00 00  76 B5 00 00 82 B5 00 00  ▬╡.."╡..0╡..>╡..N╡..d╡..v╡..é╡..
00000200  8E B5 00 00 A0 B5 00 00  B0 B5 00 00 00 00 00 00  B1 00 52 65 67 43 6C 6F  73 65 4B 65 79 00 41 44  Ä╡..á╡..░╡......▒.RegCloseKey.AD
00000220  56 41 50 49 33 32 2E 64  6C 6C 00 00 B5 00 52 65  67 43 72 65 61 74 65 4B  65 79 45 78 41 00 C8 00  VAPI32.dll..╡.RegCreateKeyExA.╚.
00000240  52 65 67 4F 70 65 6E 4B  65 79 45 78 41 00 CE 00  52 65 67 51 75 65 72 79  56 61 6C 75 65 45 78 41  RegOpenKeyExA.╬.RegQueryValueExA
00000260  00 00 D9 00 52 65 67 53  65 74 56 61 6C 75 65 45  78 41 00 00 16 00 43 6C  6F 73 65 48 61 6E 64 6C  ..┘.RegSetValueExA..▬.CloseHandl
00000280  65 00 4B 45 52 4E 45 4C  33 32 2E 64 6C 6C 00 00  1F 00 43 6F 70 79 46 69  6C 65 41 00 22 00 43 72  e.KERNEL32.dll..▼.CopyFileA.".Cr
000002A0  65 61 74 65 44 69 72 65  63 74 6F 72 79 41 00 00  53 00 45 78 69 74 50 72  6F 63 65 73 73 00 89 00  eateDirectoryA..S.ExitProcess.ë.
000002C0  47 65 74 43 6F 6D 6D 61  6E 64 4C 69 6E 65 41 00  B3 00 47 65 74 45 6E 76  69 72 6F 6E 6D 65 6E 74  GetCommandLineA.│.GetEnvironment
000002E0  53 74 72 69 6E 67 73 00  C1 00 47 65 74 4C 61 73  74 45 72 72 6F 72 00 00  C3 00 47 65 74 4C 6F 63  Strings.┴.GetLastError..├.GetLoc
00000300  61 6C 65 49 6E 66 6F 57  00 00 C8 00 47 65 74 4D  6F 64 75 6C 65 46 69 6C  65 4E 61 6D 65 41 00 00  aleInfoW..╚.GetModuleFileNameA..
00000320  CA 00 47 65 74 4D 6F 64  75 6C 65 48 61 6E 64 6C  65 41 00 00 DD 00 47 65  74 50 72 6F 63 65 73 73  ╩.GetModuleHandleA..▌.GetProcess
00000340  48 65 61 70 00 00 E6 00  47 65 74 53 74 61 72 74  75 70 49 6E 66 6F 41 00  EA 00 47 65 74 53 79 73  Heap..µ.GetStartupInfoA.Ω.GetSys
00000360  74 65 6D 44 65 66 61 75  6C 74 4C 43 49 44 00 00  EC 00 47 65 74 53 79 73  74 65 6D 44 69 72 65 63  temDefaultLCID..∞.GetSystemDirec
00000380  74 6F 72 79 41 00 02 01  47 65 74 56 65 72 73 69  6F 6E 00 00 03 01 47 65  74 56 6F 6C 75 6D 65 49  toryA.☻☺GetVersion..♥☺GetVolumeI
000003A0  6E 66 6F 72 6D 61 74 69  6F 6E 41 00 7F 01 52 74  6C 55 6E 77 69 6E 64 00  D2 01 55 6E 68 61 6E 64  nformationA.⌂☺RtlUnwind.╥☺Unhand
000003C0  6C 65 64 45 78 63 65 70  74 69 6F 6E 46 69 6C 74  65 72 00 00 FC 01 57 72  69 74 65 46 69 6C 65 00  ledExceptionFilter..ⁿ☺WriteFile.
000003E0  BD 00 47 65 74 46 69 6C  65 54 79 70 65 00 E8 00  47 65 74 53 74 64 48 61  6E 64 6C 65 00 00 E9 00  ╜.GetFileType.Φ.GetStdHandle..Θ.
00000400  47 65 74 53 74 72 69 6E  67 54 79 70 65 57 00 00  4E 01 4D 75 6C 74 69 42  79 74 65 54 6F 57 69 64  GetStringTypeW..N☺MultiByteToWid
00000420  65 43 68 61 72 00 1C 01  48 65 61 70 41 6C 6C 6F  63 00 1F 01 48 65 61 70  46 72 65 65 00 00 11 00  eChar.∟☺HeapAlloc.▼☺HeapFree..◄.
00000440  43 61 6C 6C 57 69 6E 64  6F 77 50 72 6F 63 41 00  55 53 45 52 33 32 2E 64  6C 6C 00 00 27 00 43 68  CallWindowProcA.USER32.dll..'.Ch
00000460  65 63 6B 44 6C 67 42 75  74 74 6F 6E 00 00 7E 00  44 65 6C 65 74 65 4D 65  6E 75 00 00 88 00 44 69  eckDlgButton..~.DeleteMenu..ê.Di
00000480  61 6C 6F 67 42 6F 78 50  61 72 61 6D 41 00 A4 00  45 6E 64 44 69 61 6C 6F  67 00 DD 00 47 65 74 44  alogBoxParamA.ñ.EndDialog.▌.GetD
000004A0  6C 67 49 74 65 6D 00 00  DF 00 47 65 74 44 6C 67  49 74 65 6D 54 65 78 74  41 00 0E 01 47 65 74 53  lgItem..▀.GetDlgItemTextA.♫☺GetS
000004C0  79 73 74 65 6D 4D 65 6E  75 00 0F 01 47 65 74 53  79 73 74 65 6D 4D 65 74  72 69 63 73 00 00 1A 01  ystemMenu.☼☺GetSystemMetrics..→☺
000004E0  47 65 74 57 69 6E 64 6F  77 4C 6F 6E 67 41 00 00  1D 01 47 65 74 57 69 6E  64 6F 77 52 65 63 74 00  GetWindowLongA..↔☺GetWindowRect.
00000500  43 01 49 73 44 6C 67 42  75 74 74 6F 6E 43 68 65  63 6B 65 64 00 00 4D 01  4B 69 6C 6C 54 69 6D 65  C☺IsDlgButtonChecked..M☺KillTime
00000520  72 00 5E 01 4C 6F 61 64  53 74 72 69 6E 67 41 00  6E 01 4D 65 73 73 61 67  65 42 6F 78 41 00 83 01  r.^☺LoadStringA.n☺MessageBoxA.â☺
00000540  50 6F 73 74 4D 65 73 73  61 67 65 41 00 00 AB 01  53 65 6E 64 44 6C 67 49  74 65 6D 4D 65 73 73 61  PostMessageA..½☺SendDlgItemMessa
00000560  67 65 41 00 C8 01 53 65  74 44 6C 67 49 74 65 6D  54 65 78 74 41 00 CB 01  53 65 74 46 6F 63 75 73  geA.╚☺SetDlgItemTextA.╦☺SetFocus
00000580  00 00 E2 01 53 65 74 54  69 6D 65 72 00 00 E5 01  53 65 74 57 69 6E 64 6F  77 4C 6F 6E 67 41 00 00  ..Γ☺SetTimer..σ☺SetWindowLongA..
000005A0  E8 01 53 65 74 57 69 6E  64 6F 77 50 6F 73 00 00  E9 01 53 65 74 57 69 6E  64 6F 77 54 65 78 74 41  Φ☺SetWindowPos..Θ☺SetWindowTextA
000005C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................