==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  78 00 06 00 00 00 00 00  00 00 00 00 5E 02 06 00  64 01 06 00 98 00 06 00  00 00 00 00 00 00 00 00  x.♠.........^☻♠.d☺♠.ÿ.♠.........
00000020  E4 02 06 00 84 01 06 00  A0 00 06 00 00 00 00 00  00 00 00 00 02 03 06 00  8C 01 06 00 E0 00 06 00  Σ☻♠.ä☺♠.á.♠.........☻♥♠.î☺♠.α.♠.
00000040  00 00 00 00 00 00 00 00  38 04 06 00 CC 01 06 00  F4 00 06 00 00 00 00 00  00 00 00 00 50 04 06 00  ........8♦♠.╠☺♠.⌠.♠.........P♦♠.
00000060  E0 01 06 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  50 02 06 00 6C 02 06 00  α☺♠.....................P☻♠.l☻♠.
00000080  7E 02 06 00 8C 02 06 00  9C 02 06 00 B0 02 06 00  C4 02 06 00 00 00 00 00  D6 02 06 00 00 00 00 00  ~☻♠.î☻♠.£☻♠.░☻♠.─☻♠.....╓☻♠.....
000000A0  EE 02 06 00 10 03 06 00  1E 03 06 00 2A 03 06 00  36 03 06 00 44 03 06 00  56 03 06 00 6E 03 06 00  ε☻♠.►♥♠.▲♥♠.*♥♠.6♥♠.D♥♠.V♥♠.n♥♠.
000000C0  7C 03 06 00 88 03 06 00  A4 03 06 00 B2 03 06 00  C0 03 06 00 D2 03 06 00  E2 03 06 00 00 00 00 00  |♥♠.ê♥♠.ñ♥♠.▓♥♠.└♥♠.╥♥♠.Γ♥♠.....
000000E0  F8 03 06 00 04 04 06 00  14 04 06 00 28 04 06 00  00 00 00 00 42 04 06 00  5C 04 06 00 6A 04 06 00  °♥♠.♦♦♠.¶♦♠.(♦♠.....B♦♠.\♦♠.j♦♠.
00000100  7C 04 06 00 90 04 06 00  A2 04 06 00 B4 04 06 00  C6 04 06 00 D2 04 06 00  E2 04 06 00 EE 04 06 00  |♦♠.É♦♠.ó♦♠.┤♦♠.╞♦♠.╥♦♠.Γ♦♠.ε♦♠.
00000120  FA 04 06 00 02 05 06 00  10 05 06 00 20 05 06 00  2C 05 06 00 3A 05 06 00  46 05 06 00 54 05 06 00  ·♦♠.☻♣♠.►♣♠. ♣♠.,♣♠.:♣♠.F♣♠.T♣♠.
00000140  64 05 06 00 76 05 06 00  82 05 06 00 8E 05 06 00  A0 05 06 00 B2 05 06 00  C0 05 06 00 CC 05 06 00  d♣♠.v♣♠.é♣♠.Ä♣♠.á♣♠.▓♣♠.└♣♠.╠♣♠.
00000160  00 00 00 00 50 02 06 00  6C 02 06 00 7E 02 06 00  8C 02 06 00 9C 02 06 00  B0 02 06 00 C4 02 06 00  ....P☻♠.l☻♠.~☻♠.î☻♠.£☻♠.░☻♠.─☻♠.
00000180  00 00 00 00 D6 02 06 00  00 00 00 00 EE 02 06 00  10 03 06 00 1E 03 06 00  2A 03 06 00 36 03 06 00  ....╓☻♠.....ε☻♠.►♥♠.▲♥♠.*♥♠.6♥♠.
000001A0  44 03 06 00 56 03 06 00  6E 03 06 00 7C 03 06 00  88 03 06 00 A4 03 06 00  B2 03 06 00 C0 03 06 00  D♥♠.V♥♠.n♥♠.|♥♠.ê♥♠.ñ♥♠.▓♥♠.└♥♠.
000001C0  D2 03 06 00 E2 03 06 00  00 00 00 00 F8 03 06 00  04 04 06 00 14 04 06 00  28 04 06 00 00 00 00 00  ╥♥♠.Γ♥♠.....°♥♠.♦♦♠.¶♦♠.(♦♠.....
000001E0  42 04 06 00 5C 04 06 00  6A 04 06 00 7C 04 06 00  90 04 06 00 A2 04 06 00  B4 04 06 00 C6 04 06 00  B♦♠.\♦♠.j♦♠.|♦♠.É♦♠.ó♦♠.┤♦♠.╞♦♠.
00000200  D2 04 06 00 E2 04 06 00  EE 04 06 00 FA 04 06 00  02 05 06 00 10 05 06 00  20 05 06 00 2C 05 06 00  ╥♦♠.Γ♦♠.ε♦♠.·♦♠.☻♣♠.►♣♠. ♣♠.,♣♠.
00000220  3A 05 06 00 46 05 06 00  54 05 06 00 64 05 06 00  76 05 06 00 82 05 06 00  8E 05 06 00 A0 05 06 00  :♣♠.F♣♠.T♣♠.d♣♠.v♣♠.é♣♠.Ä♣♠.á♣♠.
00000240  B2 05 06 00 C0 05 06 00  CC 05 06 00 00 00 00 00  AE 00 52 65 67 43 6C 6F  73 65 4B 65 79 00 41 44  ▓♣♠.└♣♠.╠♣♠.....«.RegCloseKey.AD
00000260  56 41 50 49 33 32 2E 64  6C 6C 00 00 B2 00 52 65  67 43 72 65 61 74 65 4B  65 79 45 78 41 00 B9 00  VAPI32.dll..▓.RegCreateKeyExA.╣.
00000280  52 65 67 45 6E 75 6D 4B  65 79 41 00 C5 00 52 65  67 4F 70 65 6E 4B 65 79  45 78 41 00 C8 00 52 65  RegEnumKeyA.┼.RegOpenKeyExA.╚.Re
000002A0  67 51 75 65 72 79 49 6E  66 6F 4B 65 79 41 00 00  CB 00 52 65 67 51 75 65  72 79 56 61 6C 75 65 45  gQueryInfoKeyA..╦.RegQueryValueE
000002C0  78 41 00 00 D6 00 52 65  67 53 65 74 56 61 6C 75  65 45 78 41 00 00 23 01  53 65 74 4D 61 70 4D 6F  xA..╓.RegSetValueExA..#☺SetMapMo
000002E0  64 65 00 00 47 44 49 33  32 2E 64 6C 6C 00 BF 00  47 65 74 4D 6F 64 75 6C  65 48 61 6E 64 6C 65 41  de..GDI32.dll.┐.GetModuleHandleA
00000300  00 00 4B 45 52 4E 45 4C  33 32 2E 64 6C 6C 00 00  26 01 4C 6F 63 61 6C 41  6C 6C 6F 63 00 00 2A 01  ..KERNEL32.dll..&☺LocalAlloc..*☺
00000320  4C 6F 63 61 6C 46 72 65  65 00 2C 01 4C 6F 63 61  6C 4C 6F 63 6B 00 30 01  4C 6F 63 61 6C 55 6E 6C  LocalFree.,☺LocalLock.0☺LocalUnl
00000340  6F 63 6B 00 7F 00 47 65  74 43 6F 6D 6D 61 6E 64  4C 69 6E 65 41 00 A8 00  47 65 74 45 6E 76 69 72  ock.⌂.GetCommandLineA.¿.GetEnvir
00000360  6F 6E 6D 65 6E 74 53 74  72 69 6E 67 73 00 F1 00  47 65 74 56 65 72 73 69  6F 6E 00 00 D6 01 57 72  onmentStrings.±.GetVersion..╓☺Wr
00000380  69 74 65 46 69 6C 65 00  B0 01 55 6E 68 61 6E 64  6C 65 64 45 78 63 65 70  74 69 6F 6E 46 69 6C 74  iteFile.░☺UnhandledExceptionFilt
000003A0  65 72 00 00 4B 00 45 78  69 74 50 72 6F 63 65 73  73 00 B2 00 47 65 74 46  69 6C 65 54 79 70 65 00  er..K.ExitProcess.▓.GetFileType.
000003C0  D9 00 47 65 74 53 74 61  72 74 75 70 49 6E 66 6F  41 00 DB 00 47 65 74 53  74 64 48 61 6E 64 6C 65  ┘.GetStartupInfoA.█.GetStdHandle
000003E0  00 00 BD 00 47 65 74 4D  6F 64 75 6C 65 46 69 6C  65 4E 61 6D 65 41 00 00  E1 01 52 74 6C 55 6E 77  ..╜.GetModuleFileNameA..ß☺RtlUnw
00000400  69 6E 64 00 53 00 4E 74  43 75 72 72 65 6E 74 54  65 62 00 00 3E 01 52 74  6C 45 78 41 6C 6C 6F 63  ind.S.NtCurrentTeb..>☺RtlExAlloc
00000420  61 74 65 48 65 61 70 00  40 01 52 74 6C 45 78 46  72 65 65 48 65 61 70 00  6E 74 64 6C 6C 2E 64 6C  ateHeap.@☺RtlExFreeHeap.ntdll.dl
00000440  6C 00 04 00 41 70 70 65  6E 64 4D 65 6E 75 41 00  55 53 45 52 33 32 2E 64  6C 6C 00 00 09 00 42 65  l.♦.AppendMenuA.USER32.dll..○.Be
00000460  67 69 6E 50 61 69 6E 74  00 00 24 00 43 68 65 63  6B 44 6C 67 42 75 74 74  6F 6E 00 00 26 00 43 68  ginPaint..$.CheckDlgButton..&.Ch
00000480  65 63 6B 52 61 64 69 6F  42 75 74 74 6F 6E 00 00  41 00 43 72 65 61 74 65  57 69 6E 64 6F 77 45 78  eckRadioButton..A.CreateWindowEx
000004A0  41 00 70 00 44 65 66 57  69 6E 64 6F 77 50 72 6F  63 41 00 00 7C 00 44 69  61 6C 6F 67 42 6F 78 50  A.p.DefWindowProcA..|.DialogBoxP
000004C0  61 72 61 6D 41 00 8E 00  44 72 61 77 49 63 6F 6E  00 00 96 00 45 6E 61 62  6C 65 57 69 6E 64 6F 77  aramA.Ä.DrawIcon..û.EnableWindow
000004E0  00 00 98 00 45 6E 64 44  69 61 6C 6F 67 00 9A 00  45 6E 64 50 61 69 6E 74  00 00 C6 00 47 65 74 44  ..ÿ.EndDialog.Ü.EndPaint..╞.GetD
00000500  43 00 CB 00 47 65 74 44  6C 67 49 74 65 6D 00 00  FA 00 47 65 74 53 79 73  74 65 6D 4D 65 6E 75 00  C.╦.GetDlgItem..·.GetSystemMenu.
00000520  2D 01 49 73 49 63 6F 6E  69 63 00 00 3B 01 4C 6F  61 64 43 75 72 73 6F 72  41 00 3F 01 4C 6F 61 64  -☺IsIconic..;☺LoadCursorA.?☺Load
00000540  49 63 6F 6E 41 00 47 01  4C 6F 61 64 53 74 72 69  6E 67 41 00 54 01 4D 65  73 73 61 67 65 42 6F 78  IconA.G☺LoadStringA.T☺MessageBox
00000560  45 78 41 00 70 01 52 65  67 69 73 74 65 72 43 6C  61 73 73 41 00 00 7E 01  52 65 6C 65 61 73 65 44  ExA.p☺RegisterClassA..~☺ReleaseD
00000580  43 00 A5 01 53 65 74 43  75 72 73 6F 72 00 AC 01  53 65 74 44 6C 67 49 74  65 6D 54 65 78 74 41 00  C.Ñ☺SetCursor.¼☺SetDlgItemTextA.
000005A0  CC 01 53 65 74 57 69 6E  64 6F 77 54 65 78 74 41  00 00 D8 01 53 68 6F 77  57 69 6E 64 6F 77 00 00  ╠☺SetWindowTextA..╪☺ShowWindow..
000005C0  FE 01 57 69 6E 48 65 6C  70 41 00 00 1A 02 77 73  70 72 69 6E 74 66 41 00  00 00 00 00 00 00 00 00  ■☺WinHelpA..→☻wsprintfA.........
000005E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................