==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  ........................☺.......
00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000040  FF FF FF FF 00 00 00 00  00 00 00 00 57 53 4F 43  4B 00 00 00 55 53 45 52  00 00 00 00 50 4F 53 54      ........WSOCK...USER....POST
00000060  4D 45 53 53 41 47 45 33  32 00 00 00 53 79 73 74  65 6D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  MESSAGE32...System\CurrentContro
00000080  6C 53 65 74 5C 43 6F 6E  74 72 6F 6C 5C 43 6F 6D  70 75 74 65 72 4E 61 6D  65 5C 43 6F 6D 70 75 74  lSet\Control\ComputerName\Comput
000000A0  65 72 4E 61 6D 65 00 00  43 6F 6D 70 75 74 65 72  4E 61 6D 65 00 00 00 00  00 00 00 00 00 00 00 00  erName..ComputerName............
000000C0  25 75 2E 25 75 2E 25 75  2E 25 75 2E 69 6E 2D 61  64 64 72 2E 61 72 70 61  00 00 00 00 68 6F 73 74  %u.%u.%u.%u.in-addr.arpa....host
000000E0  73 00 00 00 68 6F 73 74  73 00 00 00 4E 45 54 41  50 49 33 32 2E 44 4C 4C  00 00 00 00 4E 65 74 62  s...hosts...NETAPI32.DLL....Netb
00000100  69 6F 73 00 56 4E 42 54  00 00 00 00 56 4E 42 54  00 00 00 00 6E 65 74 77  6F 72 6B 73 00 00 00 00  ios.VNBT....VNBT....networks....
00000120  70 72 6F 74 6F 63 6F 6C  00 00 00 00 70 72 6F 74  6F 63 6F 6C 00 00 00 00  73 65 72 76 69 63 65 73  protocol....protocol....services
00000140  00 00 00 00 73 65 72 76  69 63 65 73 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ....services....................
00000160  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000180  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000001A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000001C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000001E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000200  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000220  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000240  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 25 6C 75 00  ............................%lu.
00000260  2C 2F 00 00 20 09 23 0A  0D 00 00 00 20 09 00 00  32 35 35 2E 32 35 35 2E  32 35 35 2E 32 35 35 00  ,/.. ○#◙♪... ○..255.255.255.255.
00000280  20 09 00 00 20 09 00 00  00 00 00 00 25 64 2E 25  64 2E 25 64 2E 25 64 00  53 79 73 74 65 6D 5C 43   ○.. ○......%d.%d.%d.%d.System\C
000002A0  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 56 78 44 5C 00 00  urrentControlSet\Services\VxD\..
000002C0  5C 50 61 72 61 6D 65 74  65 72 73 5C 57 69 6E 73  6F 63 6B 00 48 65 6C 70  65 72 44 6C 6C 4E 61 6D  \Parameters\Winsock.HelperDllNam
000002E0  65 00 00 00 57 53 48 45  6E 75 6D 50 72 6F 74 6F  63 6F 6C 73 00 00 00 00  53 59 53 54 45 4D 5C 43  e...WSHEnumProtocols....SYSTEM\C
00000300  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 57 69 6E 73 6F 63  urrentControlSet\Services\Winsoc
00000320  6B 5C 50 61 72 61 6D 65  74 65 72 73 00 00 00 00  68 6F 73 74 6E 61 6D 65  00 00 00 00 70 72 69 6E  k\Parameters....hostname....prin
00000340  74 71 75 65 75 65 00 00  66 69 6C 65 73 65 72 76  65 72 00 00 6A 6F 62 73  65 72 76 65 72 00 00 00  tqueue..fileserver..jobserver...
00000360  67 61 74 65 77 61 79 00  70 72 69 6E 74 73 65 72  76 65 72 00 61 72 63 68  69 76 65 71 75 65 75 65  gateway.printserver.archivequeue
00000380  00 00 00 00 61 72 63 68  69 76 65 73 65 72 76 65  72 00 00 00 6A 6F 62 71  75 65 75 65 00 00 00 00  ....archiveserver...jobqueue....
000003A0  61 64 6D 69 6E 69 73 74  72 61 74 69 6F 6E 00 00  73 6E 61 67 61 74 65 77  61 79 00 00 72 65 6D 6F  administration..snagateway..remo
000003C0  74 65 62 72 69 64 67 65  00 00 00 00 74 69 6D 65  73 79 6E 63 73 65 72 76  65 72 00 00 61 72 63 68  tebridge....timesyncserver..arch
000003E0  69 76 65 73 65 72 76 65  72 73 61 70 00 00 00 00  61 64 76 70 72 69 6E 74  73 65 72 76 65 72 00 00  iveserversap....advprintserver..
00000400  62 74 72 69 65 76 65 76  61 70 00 00 64 69 72 65  63 74 6F 72 79 73 65 72  76 65 72 00 6E 65 74 77  btrievevap..directoryserver.netw
00000420  61 72 65 33 38 36 00 00  68 70 70 72 69 6E 74 73  65 72 76 65 72 00 00 00  73 6E 61 73 65 72 76 65  are386..hpprintserver...snaserve
00000440  72 00 00 00 73 61 61 73  65 72 76 65 72 00 00 00  30 F3 2E 7E 00 A8 02 00  00 00 00 00 C0 00 00 00  r...saaserver...0≤.~.¿☻.....└...
00000460  00 00 00 46 3C F3 2E 7E  03 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  48 F3 2E 7E 04 00 0B 00  ...F<≤.~♥.♂.....└......FH≤.~♦.♂.
00000480  00 00 00 00 C0 00 00 00  00 00 00 46 54 F3 2E 7E  05 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  ....└......FT≤.~♣.♂.....└......F
000004A0  60 F3 2E 7E 06 00 0B 00  00 00 00 00 C0 00 00 00  00 00 00 46 68 F3 2E 7E  07 00 0B 00 00 00 00 00  `≤.~♠.♂.....└......Fh≤.~•.♂.....
000004C0  C0 00 00 00 00 00 00 46  74 F3 2E 7E 08 00 0B 00  00 00 00 00 C0 00 00 00  00 00 00 46 84 F3 2E 7E  └......Ft≤.~◘.♂.....└......Fä≤.~
000004E0  09 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  94 F3 2E 7E 0A 00 0B 00  00 00 00 00 C0 00 00 00  ○.♂.....└......Fö≤.~◙.♂.....└...
00000500  00 00 00 46 A0 F3 2E 7E  0B 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  B0 F3 2E 7E 21 00 0B 00  ...Fá≤.~♂.♂.....└......F░≤.~!.♂.
00000520  00 00 00 00 C0 00 00 00  00 00 00 46 BC F3 2E 7E  24 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  ....└......F╝≤.~$.♂.....└......F
00000540  CC F3 2E 7E 2D 00 0B 00  00 00 00 00 C0 00 00 00  00 00 00 46 DC F3 2E 7E  2E 00 0B 00 00 00 00 00  ╠≤.~-.♂.....└......F▄≤.~..♂.....
00000560  C0 00 00 00 00 00 00 46  F0 F3 2E 7E 47 00 0B 00  00 00 00 00 C0 00 00 00  00 00 00 46 00 F4 2E 7E  └......F≡≤.~G.♂.....└......F.⌠.~
00000580  4B 00 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  0C F4 2E 7E 78 02 0B 00  00 00 00 00 C0 00 00 00  K.♂.....└......F♀⌠.~x☻♂.....└...
000005A0  00 00 00 46 1C F4 2E 7E  07 01 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  28 F4 2E 7E 0C 03 0B 00  ...F∟⌠.~•☺♂.....└......F(⌠.~♀♥♂.
000005C0  00 00 00 00 C0 00 00 00  00 00 00 46 38 F4 2E 7E  44 04 0B 00 00 00 00 00  C0 00 00 00 00 00 00 46  ....└......F8⌠.~D♦♂.....└......F
000005E0  44 F4 2E 7E 30 01 0B 00  00 00 00 00 C0 00 00 00  00 00 00 46 53 59 53 54  45 4D 5C 43 75 72 72 65  D⌠.~0☺♂.....└......FSYSTEM\Curre
00000600  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 43 6F 6E  74 72 6F 6C 5C 53 65 72  76 69 63 65 50 72 6F 76  ntControlSet\Control\ServiceProv
00000620  69 64 65 72 5C 53 65 72  76 69 63 65 54 79 70 65  73 00 00 00 47 55 49 44  00 00 00 00 74 63 70 00  ider\ServiceTypes...GUID....tcp.
00000640  75 64 70 00 53 59 53 54  45 4D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 43 6F 6E  udp.SYSTEM\CurrentControlSet\Con
00000660  74 72 6F 6C 5C 53 65 72  76 69 63 65 50 72 6F 76  69 64 65 72 5C 53 65 72  76 69 63 65 54 79 70 65  trol\ServiceProvider\ServiceType
00000680  73 00 00 00 74 63 70 00  75 64 70 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  s...tcp.udp.....................
000006A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  ................SYSTEM\CurrentCo
000006C0  6E 74 72 6F 6C 53 65 74  5C 43 6F 6E 74 72 6F 6C  5C 53 65 72 76 69 63 65  50 72 6F 76 69 64 65 72  ntrolSet\Control\ServiceProvider
000006E0  5C 4F 72 64 65 72 5C 50  72 6F 76 69 64 65 72 4F  72 64 65 72 00 00 00 00  53 79 73 74 65 6D 5C 43  \Order\ProviderOrder....System\C
00000700  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 56 78 44 5C 00 00  urrentControlSet\Services\VxD\..
00000720  5C 53 65 72 76 69 63 65  50 72 6F 76 69 64 65 72  00 00 00 00 43 6C 61 73  73 00 00 00 50 72 6F 76  \ServiceProvider....Class...Prov
00000740  69 64 65 72 50 61 74 68  00 00 00 00 4E 50 4C 6F  61 64 4E 61 6D 65 53 70  61 63 65 73 00 00 00 00  iderPath....NPLoadNameSpaces....
00000760  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 43 6F 6E 74 72 6F 6C  SYSTEM\CurrentControlSet\Control
00000780  5C 53 65 72 76 69 63 65  50 72 6F 76 69 64 65 72  5C 4F 72 64 65 72 5C 45  78 63 6C 75 64 65 64 50  \ServiceProvider\Order\ExcludedP
000007A0  72 6F 76 69 64 65 72 73  00 00 00 00 52 50 43 52  54 34 2E 44 4C 4C 00 00  52 70 63 53 74 72 69 6E  roviders....RPCRT4.DLL..RpcStrin
000007C0  67 46 72 65 65 41 00 00  55 75 69 64 54 6F 53 74  72 69 6E 67 41 00 00 00  55 75 69 64 46 72 6F 6D  gFreeA..UuidToStringA...UuidFrom
000007E0  53 74 72 69 6E 67 41 00  29 6E 2E 7E 29 6E 2E 7E  38 6E 2E 7E 38 6E 2E 7E  00 00 00 00 53 59 53 54  StringA.)n.~)n.~8n.~8n.~....SYST
00000800  45 4D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 43 6F 6E  74 72 6F 6C 5C 53 65 72  EM\CurrentControlSet\Control\Ser
00000820  76 69 63 65 50 72 6F 76  69 64 65 72 5C 53 65 72  76 69 63 65 54 79 70 65  73 00 00 00 00 00 00 00  viceProvider\ServiceTypes.......
00000840  7B 00 00 00 7D 00 00 00  47 55 49 44 00 00 00 00  00 A8 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  {...}...GUID.....¿☻.....└......F
00000860  60 F8 2E 7E 60 F8 2E 7E  0A 00 00 00 00 00 00 00  F3 01 00 00 F4 01 00 00  D0 07 00 00 D1 07 00 00  `°.~`°.~◙.......≤☺..⌠☺..╨•..╤•..
00000880  53 79 73 74 65 6D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  System\CurrentControlSet\Service
000008A0  73 5C 4D 53 54 43 50 5C  53 65 72 76 69 63 65 50  72 6F 76 69 64 65 72 00  4C 6F 63 61 6C 50 72 69  s\MSTCP\ServiceProvider.LocalPri
000008C0  6F 72 69 74 79 00 00 00  48 6F 73 74 73 50 72 69  6F 72 69 74 79 00 00 00  44 6E 73 50 72 69 6F 72  ority...HostsPriority...DnsPrior
000008E0  69 74 79 00 4E 65 74 62  74 50 72 69 6F 72 69 74  79 00 00 00 4D 61 78 48  6F 73 74 65 6E 74 43 61  ity.NetbtPriority...MaxHostentCa
00000900  63 68 65 53 69 7A 65 00  6C 6F 63 61 6C 68 6F 73  74 00 00 00 6C 6F 6F 70  62 61 63 6B 00 00 00 00  cheSize.localhost...loopback....
00000920  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 43 6F 6E 74 72 6F 6C  SYSTEM\CurrentControlSet\Control
00000940  5C 53 65 72 76 69 63 65  50 72 6F 76 69 64 65 72  5C 53 65 72 76 69 63 65  54 79 70 65 73 00 00 00  \ServiceProvider\ServiceTypes...
00000960  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 43 6F 6E 74 72 6F 6C  SYSTEM\CurrentControlSet\Control
00000980  5C 53 65 72 76 69 63 65  50 72 6F 76 69 64 65 72  5C 53 65 72 76 69 63 65  54 79 70 65 73 5C 00 00  \ServiceProvider\ServiceTypes\..
000009A0  54 63 70 50 6F 72 74 00  55 64 70 50 6F 72 74 00  54 43 50 2F 49 50 00 00  55 44 50 2F 49 50 00 00  TcpPort.UdpPort.TCP/IP..UDP/IP..
000009C0  54 43 50 2F 49 50 00 00  54 43 50 2F 49 50 00 00  55 44 50 2F 49 50 00 00  55 44 50 2F 49 50 00 00  TCP/IP..TCP/IP..UDP/IP..UDP/IP..
000009E0  55 44 50 2F 49 50 00 00  31 32 37 2E 30 2E 30 2E  31 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  UDP/IP..127.0.0.1...............
00000A00  00 00 00 00 25 73 3A 20  75 6E 6B 6E 6F 77 6E 20  68 6F 73 74 0A 00 00 00  00 00 00 00 6C 69 73 74  ....%s: unknown host◙.......list
00000A20  65 6E 00 00 25 64 00 00  77 72 69 74 65 3A 20 73  65 74 74 69 6E 67 20 75  70 20 73 74 64 65 72 72  en..%d..write: setting up stderr
00000A40  00 00 00 00 61 63 63 65  70 74 00 00 73 6F 63 6B  65 74 3A 20 70 72 6F 74  6F 63 6F 6C 20 66 61 69  ....accept..socket: protocol fai
00000A60  6C 75 72 65 20 69 6E 20  63 69 72 63 75 69 74 20  73 65 74 75 70 2E 0A 00  25 73 3A 20 00 00 00 00  lure in circuit setup.◙.%s: ....
00000A80  25 63 00 00 54 68 65 20  6E 65 74 77 6F 72 6B 20  69 73 20 64 6F 77 6E 0A  00 00 00 00 62 69 6E 64  %c..The network is down◙....bind
00000AA0  00 00 00 00 73 6F 63 6B  65 74 3A 20 41 6C 6C 20  70 6F 72 74 73 20 69 6E  20 75 73 65 0A 00 00 00  ....socket: All ports in use◙...
00000AC0  00 00 00 00 FF FF FF FF  77 73 6F 63 6B 33 32 00  25 64 00 00 3E 20 25 73  3A 25 73 0A 00 00 00 00  ....    wsock32.%d..> %s:%s◙....
00000AE0  48 6F 73 74 4E 61 6D 65  00 00 00 00 44 6F 6D 61  69 6E 00 00 53 65 61 72  63 68 4C 69 73 74 00 00  HostName....Domain..SearchList..
00000B00  4E 61 6D 65 53 65 72 76  65 72 00 00 E0 FA 2E 7E  EC FA 2E 7E F4 FA 2E 7E  00 FB 2E 7E 00 00 00 00  NameServer..α·.~∞·.~⌠·.~.√.~....
00000B20  53 79 73 74 65 6D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  System\CurrentControlSet\Service
00000B40  73 5C 56 78 44 5C 4D 53  54 43 50 00 56 44 48 43  50 00 00 00 5C 5C 2E 5C  00 00 00 00 2E 56 58 44  s\VxD\MSTCP.VDHCP...\\.\.....VXD
00000B60  00 00 00 00 00 00 00 00  77 73 6F 63 6B 33 32 00  2D 3E 20 25 73 3A 25 73  0A 00 00 00 FF FF FF FF  ........wsock32.-> %s:%s◙...    
00000B80  00 00 00 00 4D 69 63 72  6F 73 6F 66 74 20 57 69  6E 64 6F 77 73 20 53 6F  63 6B 65 74 73 20 56 65  ....Microsoft Windows Sockets Ve
00000BA0  72 73 69 6F 6E 20 31 2E  31 2E 00 00 52 75 6E 6E  69 6E 67 20 6F 6E 20 57  69 6E 64 6F 77 73 20 39  rsion 1.1...Running on Windows 9
00000BC0  35 2E 00 00 53 79 73 74  65 6D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 53 65 72  5...System\CurrentControlSet\Ser
00000BE0  76 69 63 65 73 5C 57 69  6E 73 6F 63 6B 5C 41 75  74 6F 64 69 61 6C 00 00  41 75 74 6F 64 69 61 6C  vices\Winsock\Autodial..Autodial
00000C00  44 6C 6C 4E 61 6D 65 33  32 00 00 00 41 75 74 6F  64 69 61 6C 46 63 6E 4E  61 6D 65 33 32 00 00 00  DllName32...AutodialFcnName32...
00000C20  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  D0 FD 00 00 88 FC 00 00  ........................╨²..êⁿ..
00000C40  00 00 00 00 00 00 00 00  00 00 00 00 DA 00 01 00  B4 FC 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ............┌.☺.┤ⁿ..............
00000C60  E6 01 01 00 90 FD 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  µ☺☺.ɲ..........................
00000C80  00 00 00 00 00 00 00 00  AC FD 00 00 BE FD 00 00  FE FD 00 00 DE FD 00 00  EE FD 00 00 2E FE 00 00  ........¼²..╛²..■²..▐²..ε²...■..
00000CA0  10 FE 00 00 20 FE 00 00  3E FE 00 00 52 FE 00 00  00 00 00 00 60 FE 00 00  70 FE 00 00 EA FE 00 00  ►■.. ■..>■..R■......`■..p■..Ω■..
00000CC0  D4 FE 00 00 92 FE 00 00  9C FE 00 00 AA FE 00 00  24 00 00 80 25 00 00 80  23 00 00 80 B8 FE 00 00  ╘■..Æ■..£■..¬■..$..Ç%..Ç#..Ç╕■..
00000CE0  F6 FE 00 00 96 FF 00 00  04 FF 00 00 10 FF 00 00  20 FF 00 00 32 FF 00 00  42 FF 00 00 4E FF 00 00  ÷■..û ..♦ ..► ..  ..2 ..B ..N ..
00000D00  5E FF 00 00 70 FF 00 00  E8 00 01 00 7A FE 00 00  7C 01 01 00 B0 FF 00 00  D0 FF 00 00 C4 FF 00 00  ^ ..p ..Φ.☺.z■..|☺☺.░ ..╨ ..─ ..
00000D20  86 01 01 00 E4 FF 00 00  F0 FF 00 00 02 00 01 00  1C 00 01 00 2C 00 01 00  38 00 01 00 44 00 01 00  å☺☺.Σ ..≡ ..☻.☺.∟.☺.,.☺.8.☺.D.☺.
00000D40  4C 00 01 00 5E 00 01 00  72 00 01 00 7E 00 01 00  8E 00 01 00 A2 00 01 00  B6 00 01 00 CC 00 01 00  L.☺.^.☺.r.☺.~.☺.Ä.☺.ó.☺.╢.☺.╠.☺.
00000D60  00 01 01 00 A2 FF 00 00  1C 01 01 00 2A 01 01 00  0C 01 01 00 52 01 01 00  62 01 01 00 42 01 01 00  .☺☺.ó ..∟☺☺.*☺☺.♀☺☺.R☺☺.b☺☺.B☺☺.
00000D80  70 01 01 00 7E FF 00 00  BA FF 00 00 00 00 00 00  A2 01 01 00 AE 01 01 00  BE 01 01 00 CC 01 01 00  p☺☺.~ ..║ ......ó☺☺.«☺☺.╛☺☺.╠☺☺.
00000DA0  DA 01 01 00 F2 01 01 00  00 00 00 00 AA 00 52 65  67 53 65 74 56 61 6C 75  65 45 78 57 00 00 82 00  ┌☺☺.≥☺☺.....¬.RegSetValueExW..é.
00000DC0  52 65 67 43 72 65 61 74  65 4B 65 79 45 78 41 00  41 44 56 41 50 49 33 32  2E 64 6C 6C 00 00 85 00  RegCreateKeyExA.ADVAPI32.dll..à.
00000DE0  52 65 67 44 65 6C 65 74  65 4B 65 79 41 00 8D 00  52 65 67 45 6E 75 6D 56  61 6C 75 65 41 00 A9 00  RegDeleteKeyA.ì.RegEnumValueA.⌐.
00000E00  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  95 00 52 65 67 4F 70 65  6E 4B 65 79 45 78 41 00  RegSetValueExA..ò.RegOpenKeyExA.
00000E20  94 00 52 65 67 4F 70 65  6E 4B 65 79 41 00 8A 00  52 65 67 45 6E 75 6D 4B  65 79 45 78 41 00 9D 00  ö.RegOpenKeyA.è.RegEnumKeyExA.¥.
00000E40  52 65 67 51 75 65 72 79  56 61 6C 75 65 45 78 41  00 00 7E 00 52 65 67 43  6C 6F 73 65 4B 65 79 00  RegQueryValueExA..~.RegCloseKey.
00000E60  40 01 47 65 74 54 69 63  6B 43 6F 75 6E 74 00 00  42 02 53 6C 65 65 70 45  78 00 88 01 4C 65 61 76  @☺GetTickCount..B☻SleepEx.ê☺Leav
00000E80  65 43 72 69 74 69 63 61  6C 53 65 63 74 69 6F 6E  00 00 4D 02 54 6C 73 46  72 65 65 00 4F 02 54 6C  eCriticalSection..M☻TlsFree.O☻Tl
00000EA0  73 47 65 74 56 61 6C 75  65 00 50 02 54 6C 73 53  65 74 56 61 6C 75 65 00  72 01 49 6E 69 74 69 61  sGetValue.P☻TlsSetValue.r☺Initia
00000EC0  6C 69 7A 65 43 72 69 74  69 63 61 6C 53 65 63 74  69 6F 6E 00 6D 02 57 61  69 74 46 6F 72 53 69 6E  lizeCriticalSection.m☻WaitForSin
00000EE0  67 6C 65 4F 62 6A 65 63  74 00 4B 02 54 6C 73 41  6C 6C 6F 63 00 00 AA 00  46 72 65 65 4C 69 62 72  gleObject.K☻TlsAlloc..¬.FreeLibr
00000F00  61 72 79 00 9F 02 6C 73  74 72 63 70 79 41 00 00  E7 01 52 74 6C 4D 6F 76  65 4D 65 6D 6F 72 79 00  ary.ƒ☻lstrcpyA..τ☺RtlMoveMemory.
00000F20  0F 01 47 65 74 50 72 6F  63 41 64 64 72 65 73 73  00 00 89 01 4C 6F 61 64  4C 69 62 72 61 72 79 41  ☼☺GetProcAddress..ë☺LoadLibraryA
00000F40  00 00 93 01 4C 6F 63 61  6C 46 72 65 65 00 EF 00  47 65 74 4C 61 73 74 45  72 72 6F 72 00 00 57 00  ..ô☺LocalFree.∩.GetLastError..W.
00000F60  44 65 76 69 63 65 49 6F  43 6F 6E 74 72 6F 6C 00  8F 01 4C 6F 63 61 6C 41  6C 6C 6F 63 00 00 4B 01  DeviceIoControl.Å☺LocalAlloc..K☺
00000F80  47 65 74 57 69 6E 64 6F  77 73 44 69 72 65 63 74  6F 72 79 41 00 00 A5 02  6C 73 74 72 6C 65 6E 41  GetWindowsDirectoryA..Ñ☻lstrlenA
00000FA0  00 00 56 01 47 6C 6F 62  61 6C 46 72 65 65 00 00  92 02 5F 6C 72 65 61 64  00 00 90 02 5F 6C 6C 73  ..V☺GlobalFree..Æ☻_lread..É☻_lls
00000FC0  65 65 6B 00 9C 02 6C 73  74 72 63 6D 70 69 41 00  25 02 53 65 74 48 61 6E  64 6C 65 43 6F 6E 74 65  eek.£☻lstrcmpiA.%☻SetHandleConte
00000FE0  78 74 00 00 96 02 6C 73  74 72 63 61 74 41 00 00  47 02 54 65 72 6D 69 6E  61 74 65 54 68 72 65 61  xt..û☻lstrcatA..G☻TerminateThrea
00001000  64 00 6B 02 57 61 69 74  46 6F 72 4D 75 6C 74 69  70 6C 65 4F 62 6A 65 63  74 73 00 00 E5 01 52 65  d.k☻WaitForMultipleObjects..σ☺Re
00001020  73 75 6D 65 54 68 72 65  61 64 00 00 99 02 6C 73  74 72 63 6D 70 41 00 00  A2 02 6C 73 74 72 63 70  sumeThread..Ö☻lstrcmpA..ó☻lstrcp
00001040  79 6E 41 00 41 02 53 6C  65 65 70 00 A4 00 46 6F  72 6D 61 74 4D 65 73 73  61 67 65 41 00 00 F9 00  ynA.A☻Sleep.ñ.FormatMessageA..∙.
00001060  47 65 74 4D 6F 64 75 6C  65 48 61 6E 64 6C 65 41  00 00 7C 02 57 72 69 74  65 46 69 6C 65 00 26 01  GetModuleHandleA..|☻WriteFile.&☺
00001080  47 65 74 53 74 64 48 61  6E 64 6C 65 00 00 EA 00  47 65 74 48 61 6E 64 6C  65 43 6F 6E 74 65 78 74  GetStdHandle..Ω.GetHandleContext
000010A0  00 00 C0 00 47 65 74 43  6F 6D 70 75 74 65 72 4E  61 6D 65 41 00 00 4B 00  43 72 65 61 74 65 53 6F  ..└.GetComputerNameA..K.CreateSo
000010C0  63 6B 65 74 48 61 6E 64  6C 65 00 00 39 00 43 72  65 61 74 65 46 69 6C 65  41 00 4B 45 52 4E 45 4C  cketHandle..9.CreateFileA.KERNEL
000010E0  33 32 2E 64 6C 6C 00 00  5E 00 45 6E 74 65 72 43  72 69 74 69 63 61 6C 53  65 63 74 69 6F 6E 00 00  32.dll..^.EnterCriticalSection..
00001100  1E 02 53 65 74 45 76 65  6E 74 00 00 37 00 43 72  65 61 74 65 45 76 65 6E  74 41 00 00 4F 01 47 6C  ▲☻SetEvent..7.CreateEventA..O☺Gl
00001120  6F 62 61 6C 41 6C 6C 6F  63 00 54 00 44 65 6C 65  74 65 43 72 69 74 69 63  61 6C 53 65 63 74 69 6F  obalAlloc.T.DeleteCriticalSectio
00001140  6E 00 28 02 53 65 74 4C  61 73 74 45 72 72 6F 72  00 00 4D 00 43 72 65 61  74 65 54 68 72 65 61 64  n.(☻SetLastError..M.CreateThread
00001160  00 00 24 00 43 6C 6F 73  65 48 61 6E 64 6C 65 00  B4 01 4F 70 65 6E 46 69  6C 65 00 00 8E 02 5F 6C  ..$.CloseHandle.┤☺OpenFile..Ä☻_l
00001180  63 6C 6F 73 65 00 73 00  45 78 70 61 6E 64 45 6E  76 69 72 6F 6E 6D 65 6E  74 53 74 72 69 6E 67 73  close.s.ExpandEnvironmentStrings
000011A0  41 00 2D 02 77 73 70 72  69 6E 74 66 41 00 8E 01  50 6F 73 74 4D 65 73 73  61 67 65 41 00 00 2A 00  A.-☻wsprintfA.Ä☺PostMessageA..*.
000011C0  43 68 61 72 55 70 70 65  72 41 00 00 2F 02 77 76  73 70 72 69 6E 74 66 41  00 00 50 01 49 73 57 69  CharUpperA../☻wvsprintfA..P☺IsWi
000011E0  6E 64 6F 77 00 00 55 53  45 52 33 32 2E 64 6C 6C  00 00 1A 00 43 68 61 72  4C 6F 77 65 72 41 00 00  ndow..USER32.dll..→.CharLowerA..